CVE-2020-2506

CVE-2020-2506 affects QNAP Systems Inc. Helpdesk prior to version 3.0.3, due to improper access control that could allow an attacker to gain privileges or read sensitive information. The issue is documented across multiple sources (NVD, CNVD, CVELIST, PT-Security, Nessus QSA-20-08) and is referen...

CVE-2020-2507

CVE-2020-2507 is a command injection vulnerability in QNAP QTS Helpdesk prior to version 3.0.3. Exploitation could allow remote attackers to execute arbitrary commands with no authentication, as reported in multiple sources. The issue is tied to Helpdesk (improper access control) and is reference...

CVE-2018-19948

CVE-2018-19948 affects QNAP Helpdesk (the web-based component of NAS devices). The vulnerability is a cross-site request forgery (CSRF) that could cause authenticated NAS users to perform unintended actions via the web interface. The issue concerns earlier Helpdesk versions, and QNAP notes a fix ...

CVE-2021-28814

CVE-2021-28814 affects QNAP NAS Helpdesk prior to version 3.0.4. The issue is an improper access control that could allow remote attackers to compromise the software. Affected product/component: QNAP Systems Inc. Helpdesk (on QNAP NAS). Root cause: improper access control in the Helpdesk module. ...

CVE-2018-0728

CVE-2018-0728 concerns an improper access control vulnerability in QNAP Helpdesk within QTS. The available documents indicate that the issue allows an attacker to access system logs. The fixes are to update QTS and Helpdesk to the latest versions. The exact root cause, affected version(s), and ex...

CVE-2020-2500

The CVE-2020-2500 entry concerns QNAP Helpdesk (Kayako service). The vulnerability is an improper access control flaw that allows an attacker to access sensitive data on the QNAP Kayako server by abusing API keys, potentially enabling control over the Helpdesk component. The underlying issue is a...

CVE-2024-27125

Helpdesk is affected by a cross-site scripting (XSS) vulnerability that could allow authenticated administrators to inject malicious code via the network. Affected versions are prior to 3.3.1 (i.e., before 3.3.1); the issue is resolved in Helpdesk 3.3.1 and later. The vulnerability’s exposure is ...

CVE-2018-19947

The CVE applies to QNAP Helpdesk (older builds). It describes an information exposure vulnerability that affects earlier Helpdesk versions and states that QNAP has fixed the issue in Helpdesk 3.0.3 and later. The connected Red Hat and NVD records corroborate this by reiterating the same affected-...

CVE-2018-0714

CVE-2018-0714 concerns a command-injection vulnerability in QNAP QTS Helpdesk (affecting Helpdesk 1.1.21 and earlier and listed affected builds: QTS 4.2.6 build 20180531, 4.3.3 build 20180528, 4.3.4 build 20180528 and earlier). The underlying issue allows remote attackers to execute arbitrary com...

CVE-2024-50394

CVE-2024-50394 affects Helpdesk where an improper certificate validation vulnerability exists in versions prior to 3.3.3. The issue could allow remote attackers to compromise system security via network access, with low attack complexity and user interaction required. The provided documents indic...

CVE-2018-19946

CVE-2018-19946 affects earlier versions of QNAP Helpdesk. The issue is an improper certificate validation vulnerability, enabling an attacker to spoof a trusted entity by interfering in the communication path between the host and client. Root cause: certificate validation weakness in Helpdesk pri...