Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2726▼ 504 respecto a la semana anterior
Críticas / altas1294▼ 196 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)229▼ 273 respecto a la semana anterior
640 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (7.7) | 0.91% | — | Qnap QTSQnap Quts Hero | 29/8/2025 | 25/9/2026 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145 build 20250526 and… | |
| Analizada | Media (5.3) | 0.46% | — | Qnap QTSQnap Quts Hero | 29/8/2025 | 25/9/2026 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.5.3145… | |
| Analizada | Baja (2) | 0.24% | — | Qnap Photo Station | 29/8/2025 | 26/9/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect Photo Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: Photo Station 6.4.5 (… | |
| Analizada | Alta (7.1) | 0.37% | — | Qnap File Station | 26/8/2025 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4933 and later | |
| Analizada | Alta (7.1) | 0.38% | — | Qnap File Station | 18/8/2025 | 17/6/2026 | An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4933 and later | |
| Analizada | Alta (7.2) | 0.55% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later | |
| Analizada | Alta (8.3) | 0.26% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later | |
| Analizada | Alta (8.3) | 0.26% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later | |
| Analizada | Alta (8.7) | 0.47% | — | Qnap Qsync Central | 6/6/2025 | 17/6/2026 | An SQL injection vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.6 ( 2025/03/20 ) and later | |
| Analizada | Alta (8.3) | 0.26% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4791… | |
| Analizada | Alta (8.3) | 0.26% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4791… | |
| Analizada | Alta (8.3) | 0.26% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4791… | |
| Analizada | Media (5.3) | 0.42% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later | |
| Analizada | Media (5.3) | 0.42% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later | |
| Analizada | Media (5.3) | 0.42% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later | |
| Analizada | Alta (7.1) | 0.42% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the… | |
| Analizada | Baja (2.4) | 0.14% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | An out-of-bounds read vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later | |
| Analizada | Media (5.3) | 0.42% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: File Station 5 5.5.6.4847 and later | |
| Analizada | Alta (7.1) | 0.26% | — | Qnap File Station | 6/6/2025 | 17/6/2026 | An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could allow remote attackers who have gained user access to compromise the security of the system. We have already fixed the vulnerability in the following versions: File Station 5 5.5.6.4791… | |
| Analizada | Baja (2.3) | 0.36% | — | Qnap Qsync Central | 6/6/2025 | 17/6/2026 | A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.6… | |
| Analizada | Alta (8.7) | 0.95% | — | Qnap QTSQnap Quts Hero | 6/6/2025 | 17/6/2026 | A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.2.4.3079 build 20250321… | |
| Analizada | Media (5.3) | 0.42% | — | Qnap QTSQnap Quts Hero | 6/6/2025 | 17/6/2026 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to modify memory or crash processes. We have already fixed the vulnerability in the following versions: QTS 5.2.4.3079 build… | |
| Analizada | Baja (2) | 0.27% | — | Qnap License Center | 6/6/2025 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect License Center. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: License Center 1.9.49… | |
| Analizada | Media (5.2) | 0.27% | — | Qnap Qurouter | 6/6/2025 | 17/6/2026 | An improper authentication vulnerability has been reported to affect QHora. If an attacker gains local network access, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: QuRouter 2.5.0.140 and later | |
| Analizada | Baja (2.4) | 0.62% | — | Qnap Qurouter | 6/6/2025 | 17/6/2026 | A command injection vulnerability has been reported to affect QHora. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: QuRouter 2.4.6.028 and… |