Skip to content
OpenAdvisories

Archive

6 December 2024

Vulnerabilities first published on this day (UTC), newest first.

4 results · Clear filters · Feed

  • Low 3.0

    shared_preferences_android vulnerability

    ### Impact Due to some data types not being natively representable for the available storage options, shared_preferences_android serializes and deserializes special string prefixes to store these unrepresentable data types. This allows arbitrary classes to be…

  • Low 2.1

    QTS, QuTS hero

    A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify me…

  • Low 2.1

    QTS, QuTS hero

    A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to obtain secret data or modify me…

  • Low 2.3

    QTS, QuTS hero

    An improper handling of URL encoding (Hex Encoding) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to run the system into unexpected state. We have already fixed t…