CVE-2025-53411

CVE-2025-53411 affects QNAP File Station 5. The issue is an unlimited/unthrottled resource allocation vulnerability that can be exploited by an attacker who has administrator privileges to disrupt access to resources, preventing other systems/applications/processes from using the same resources. ...

CVE-2025-53411 File Station 5

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of...

CVE-2025-53412

The CVE-2025-53412 issue affects QNAP File Station 5.0 and later, caused by a NULL pointer dereference that can be exploited by a remote attacker who has a user account to trigger a DoS. The NVD entry lists a Network attack vector with Low complexity, Low privileges required, and a Medium overall...

CVE-2025-53412 File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-53412 File Station 5

A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service DoS attack. We have already fixed the vulnerability in the following version: File Station 5...

CVE-2025-53413 File Station 5

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...

CVE-2025-53413 File Station 5

An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We ha...

CVE-2025-53413

CVE-2025-53413 concerns QNAP File Station 5. The vulnerability is described as an unlimited resource allocation/throttling issue that, if exploitable by an attacker with a user account, can lead to denial of service by preventing other systems, applications, or processes from accessing the same t...

CVE-2025-57706

CVE-2025-57706 is a QNAP File Station 5 XSS vulnerability. It stems from insufficient filtering/escaping of user-supplied data, enabling an attacker with a valid account to read application data or bypass security checks. Affected software: File Station 5; vulnerable component/content handling le...

CVE-2025-57706 File Station 5

A cross-site scripting XSS vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: File...

CVE-2025-57706 File Station 5

A cross-site scripting XSS vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: File...

CVE-2025-58463 Download Station

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

CVE-2025-58463

CVE-2025-58463 affects QNAP Download Station and is a relative path traversal vulnerability. The issue can be exploited by a remote attacker who has an administrator account to read contents of unexpected files or system data. The vulnerability is triggered via a path traversal flaw in the downlo...

CVE-2025-58463 Download Station

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following...

CVE-2025-58465 Download Station

A cross-site scripting XSS vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions:...

CVE-2025-58465 Download Station

A cross-site scripting XSS vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions:...

CVE-2025-58465

The CVE-2025-58465 entry describes a cross-site scripting (XSS) vulnerability in QNAP Download Station. A remote attacker who gains a user account could exploit the flaw to bypass security mechanisms or read application data. Affected software is Download Station; vulnerable component/process is ...

QNAP Systems File Station 5 代码问题漏洞

QNAP Systems File Station 5 is a file management software from QNAP Systems. A code issue vulnerability exists in QNAP Systems File Station 5 that stems from a null pointer dereference that could lead to a denial of service attack...

PT-2025-45433

Name of the Vulnerable Software and Affected Versions File Station 5 versions prior to 5.5.6.5018 Description A cross-site scripting XSS issue exists in File Station 5. If an attacker obtains a user account, they may be able to bypass security features or access application data. Recommendations...

PT-2025-45435

Name of the Vulnerable Software and Affected Versions Download Station versions prior to 5.10.0.304 Download Station versions prior to 5.10.0.305 Description A relative path traversal issue exists in Download Station. Successful exploitation by a remote attacker with administrator privileges coul...