Lucene search

K
QnapQsync Central4.5.0.3

11 matches found

CVE
CVE
added 2025/08/29 6:15 p.m.5 views

CVE-2025-29894

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version:Qsync Central 4.5.0.7 ( 2025/04/23 ...

8.8CVSS7.8AI score0.00159EPSS
CVE
CVE
added 2025/08/29 6:15 p.m.5 views

CVE-2025-30260

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have ...

7.1CVSS6.3AI score0.00222EPSS
CVE
CVE
added 2025/08/29 6:15 p.m.5 views

CVE-2025-30275

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version:Qsync Central 4.5.0.7 (...

6.5CVSS6.3AI score0.00231EPSS
CVE
CVE
added 2025/08/29 6:15 p.m.5 views

CVE-2025-30277

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version:Qsync Central 4.5...

8.8CVSS6.3AI score0.00088EPSS
CVE
CVE
added 2025/08/29 6:15 p.m.5 views

CVE-2025-30278

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version:Qsync Central 4.5...

8.8CVSS6.3AI score0.00088EPSS
CVE
CVE
added 2025/08/29 6:15 p.m.5 views

CVE-2025-33033

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:Qsync Central 4.5.0....

7.2CVSS6.3AI score0.00271EPSS
CVE
CVE
added 2025/08/29 6:15 p.m.5 views

CVE-2025-33036

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:Qsync Central 4.5.0....

7.2CVSS6.3AI score0.00271EPSS
CVE
CVE
added 2025/08/29 6:15 p.m.4 views

CVE-2025-29893

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version:Qsync Central 4.5.0.7 ( 2025/04/23 ...

8.8CVSS7.8AI score0.00159EPSS
CVE
CVE
added 2025/08/29 6:15 p.m.4 views

CVE-2025-29898

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version:Qsync Central...

6.5CVSS6.3AI score0.00222EPSS
CVE
CVE
added 2025/08/29 6:15 p.m.4 views

CVE-2025-33037

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:Qsync Central 4.5.0....

7.2CVSS6.3AI score0.00271EPSS
CVE
CVE
added 2025/08/29 6:15 p.m.4 views

CVE-2025-33038

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:Qsync Central 4.5.0....

7.2CVSS6.3AI score0.00271EPSS