Skip to content
OpenAdvisories

Vendor

QNAP Systems

631 known vulnerabilities.

Products

QTS 253 QuTS hero 235 Qsync Central 69 QuTScloud 66 File Station 5 58 Photo Station 22 Video Station 19 QuMagie 15 QuRouter 15 Music Station 10 Notes Station 3 10 Media Streaming Add-on 9 Helpdesk 9 QVR 8 QuLog Center 8 Q'center Virtual Appliance 7 License Center 6 HBS 3 Hybrid Backup Sync 6 QVR Pro 6 Download Station 6 QES 6 QuNetSwitch 5 QVR Elite 5 QVR Guard 5 Multimedia Console 5 QcalAgent 5 QNAP QTS 4 QNAP Media Streaming Add-On 4 QVPN Windows 3 QuFirewall 3 HybridDesk Station 3 Proxy Server 3 Surveillance Station 3 QTS Password function 2 QuFTP Service 2 QTS Login function 2 Notification Center 2 QmailAgent 2 VioStor 2 HBS 3 2
All Critical High Medium Low Exploited only Public exploit

8 results · Clear filters · Feed

  • High 8.0
    CVE-2023-47565 Exploited EPSS 73%

    Legacy VioStor NVR

    An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability …

    QNAP Systems VioStor NVR
    KEV Dec 21, 2023
  • Critical 10.0
    CVE-2022-27593 Exploited · Ransomware Scanner template EPSS 88%

    DeadBolt Ransomware

    An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QT…

    QNAP Systems Photo Station
    KEV Sep 8, 2022
  • Critical 10.0
    CVE-2021-28799 Exploited · Ransomware Scanner template EPSS 78%

    Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)

    An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.…

    QNAP Systems HBS 3 HBS 2 HBS 1.3
    KEV Mar 31, 2022
  • Critical 9.8
    CVE-2020-2509 Exploited Public exploit EPSS 34%

    Command Injection Vulnerability in QTS and QuTS hero

    A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: …

    QNAP Systems QTS QuTS hero
    KEV Apr 11, 2022
  • High 7.3
    CVE-2020-2506 Exploited

    improper access control vulnerability in Helpdesk

    The vulnerability have been reported to affect earlier versions of QTS. If exploited, this improper access control vulnerability could allow attackers to compromise the security of the software by gaining privileges, or reading sensitive information. This iss…

    QNAP Systems Helpdesk
    KEV Mar 25, 2022
  • Medium 6.1
    CVE-2018-19953 Exploited · Ransomware EPSS 31%

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…

    QNAP Systems QTS
    KEV May 24, 2022
  • High 8.0
    CVE-2018-19943 Exploited · Ransomware EPSS 23%

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…

    QNAP Systems QTS
    KEV May 24, 2022
  • Critical 9.8
    CVE-2018-19949 Exploited · Ransomware EPSS 30%

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has alr…

    QNAP Systems QTS
    KEV May 24, 2022