EUVD-2021-15461

Malware in sbrugna...

EUVD-2021-15457

Malware in sbrugna...

CVE-2021-28805

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

CVE-2021-28805

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

CVE-2021-28801

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

Cross site scripting

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...

CVE-2021-28805 Inclusion of Sensitive Information in QSS

Inclusion of sensitive information in the source code has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read application data. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.3 build 20210505 on QSW-M2108-2C; versio...

CVE-2021-28805

CVE-2021-28805 affects QNAP QSS on certain QSW switches: QSW-M2108-2C/2S and QSW-M2108R-2C (pre-1.0.3 build 20210505) and QSW-M408 (pre-1.0.12 build 20210506). Root cause: inclusion of sensitive information in the QSS source code, enabling attackers to read application data. Impact is defined in ...

CVE-2021-28801

CVE-2021-28801 describes an out-of-bounds read in QNAP QSS on certain QSW-M2108-2C/2S/2C-RV switches. Affected versions are QSS before 1.0.2 build 20210122 for QSW-M2108-2C, QSW-M2108-2S, and QSW-M2108R-2C. The vulnerability could allow an attacker to read sensitive information from the system. P...

CVE-2021-28801 Out-of-Bounds Read Vulnerability in QSS

An out-of-bounds read vulnerability has been reported to affect certain QNAP switches running QSS. If exploited, this vulnerability allows attackers to read sensitive information on the system. This issue affects: QNAP Systems Inc. QSS versions prior to 1.0.2 build 20210122 on QSW-M2108-2C;...