Skip to content
OpenAdvisories

Vendor

QNAP Systems

631 known vulnerabilities.

Products

QTS 253 QuTS hero 235 Qsync Central 69 QuTScloud 66 File Station 5 58 Photo Station 22 Video Station 19 QuMagie 15 QuRouter 15 Music Station 10 Notes Station 3 10 Media Streaming Add-on 9 Helpdesk 9 QVR 8 QuLog Center 8 Q'center Virtual Appliance 7 License Center 6 HBS 3 Hybrid Backup Sync 6 QVR Pro 6 Download Station 6 QES 6 QuNetSwitch 5 QVR Elite 5 QVR Guard 5 Multimedia Console 5 QcalAgent 5 QNAP QTS 4 QNAP Media Streaming Add-On 4 QVPN Windows 3 QuFirewall 3 HybridDesk Station 3 Proxy Server 3 Surveillance Station 3 QTS Password function 2 QuFTP Service 2 QTS Login function 2 Notification Center 2 QmailAgent 2 VioStor 2 HBS 3 2
All Critical High Medium Low Exploited only Public exploit

16 results · Clear filters · Feed

  • Low 1.2
    CVE-2025-59382 Public exploit

    QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)

    QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:

    QNAP Systems QTS QuTS hero QuTScloud
  • Medium 6.8
    CVE-2024-50404 Public exploit

    Qsync Central

    A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in …

    QNAP Systems Qsync Central
  • High 8.7
    CVE-2024-53691 Public exploit EPSS 23%

    QTS, QuTS hero

    A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fi…

    QNAP Systems QTS QuTS hero
  • Medium 6.9
    CVE-2024-50395 Public exploit

    Media Streaming add-on

    An authorization bypass through user-controlled key vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow local network attackers to gain privilege. We have already fixed the vulnerability in the followi…

    QNAP Systems Media Streaming Add-on
  • High 7.2
    CVE-2024-27130 Public exploit EPSS 38%

    QTS, QuTS hero

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the foll…

    QNAP Systems QTS QuTS hero
  • Medium 5.8
    CVE-2023-47218 Public exploit Scanner template EPSS 90%

    QTS, QuTS hero, QuTScloud

    An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Q…

    QNAP Systems QTS QuTS hero QuTScloud
  • High 8.0
    CVE-2023-47564 Public exploit

    Qsync Central

    An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerabi…

    QNAP Systems Qsync Central
  • Critical 9.8
    CVE-2020-2509 Exploited Public exploit EPSS 34%

    Command Injection Vulnerability in QTS and QuTS hero

    A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: …

    QNAP Systems QTS QuTS hero
    KEV Apr 11, 2022
  • Unscored —
    CVE-2018-0715 Public exploit

    Cross-site scripting vulnerability in QNAP Photo Station versions 5.7.0 and earlier could allow remote attackers to inj…

    QNAP Systems Photo Station
  • Unscored —
    CVE-2018-0706 Public exploit EPSS 48%

    Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticat…

    QNAP Systems Q'center Virtual Appliance
  • Unscored —
    CVE-2018-0710 Public exploit EPSS 14%

    Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow auth…

    QNAP Systems Q'center Virtual Appliance
  • Unscored —
    CVE-2018-0709 Public exploit EPSS 13%

    Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow aut…

    QNAP Systems Q'center Virtual Appliance
  • Unscored —
    CVE-2018-0707 Public exploit EPSS 59%

    Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier coul…

    QNAP Systems Q'center Virtual Appliance
  • Unscored —
    CVE-2018-0708 Public exploit EPSS 26%

    Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could all…

    QNAP Systems Q'center Virtual Appliance
  • Unscored —
    CVE-2017-13068 Public exploit

    QNAP has already patched this vulnerability. This security concern allows a remote attacker to perform an SQL injection…

    QNAP Systems QNAP Helpdesk APP
  • Unscored —
    CVE-2017-13067 Public exploit EPSS 17%

    QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2…

    QNAP Systems QTS Media Libary PRODUCT