Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2730▼ 551 respecto a la semana anterior
Críticas / altas1294▼ 234 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
640 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (7.2) | 0.64% | — | Qnap QTSQnap Quts Hero | 5/1/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build… | |
| Modificada | Alta (7.2) | 0.64% | — | Qnap QTSQnap Quts Hero | 5/1/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build… | |
| Modificada | Alta (7.2) | 0.64% | — | Qnap QTSQnap Quts Hero | 5/1/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build… | |
| Modificada | Alta (7.2) | 0.64% | — | Qnap QTSQnap Quts Hero | 5/1/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build… | |
| Modificada | Alta (7.2) | 0.64% | — | Qnap QTSQnap Quts Hero | 5/1/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build… | |
| Modificada | Alta (7.2) | 0.64% | — | Qnap QTSQnap Quts Hero | 5/1/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build… | |
| Modificada | Alta (8.8) | 1.1% | — | Qnap Qcalagent | 5/1/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect QcalAgent. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QcalAgent 1.1.8 and later | |
| Modificada | Alta (8.8) | 1.1% | — | Qnap Video Station | 5/1/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/11/23 ) and later | |
| Modificada | Alta (8.8) | 0.51% | — | Qnap Video Station | 5/1/2024 | 17/6/2026 | A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.2 ( 2023/11/23 ) and later | |
| Modificada | Alta (7.5) | 1.6% | — | Qnap QTSQnap Quts Hero | 5/1/2024 | 17/6/2026 | A prototype pollution vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to override existing attributes with ones that have incompatible type, which may lead to a crash via a network. We have already fixed the vulnerability in the… | |
| Modificada | Alta (7.2) | 1.1% | — | Qnap QTSQnap Quts Hero | 5/1/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and… | |
| Analizada | Alta (8.8) | 73% | ⚠ Explotación activa | Qnap QVR Firmware | 8/12/2023 | 17/6/2026 | An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QVR Firmware 5.0.0 and later | |
| Modificada | Alta (7.2) | 0.87% | — | Qnap QTSQnap Quts Hero | 8/12/2023 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2514 build… | |
| Modificada | Alta (7.2) | 0.76% | — | Qnap QTSQnap Quts Hero | 8/12/2023 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2514 build… | |
| Modificada | Media (6.1) | 0.45% | — | Qnap QTSQnap Quts Hero | 8/12/2023 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and later QTS… | |
| Modificada | Alta (8.8) | 0.54% | — | Qnap Qumagie | 10/11/2023 | 17/6/2026 | A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later | |
| Modificada | Alta (8.8) | 0.54% | — | Qnap Qumagie | 10/11/2023 | 17/6/2026 | A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later | |
| Modificada | Alta (8.8) | 1.7% | — | Qnap Qumagie | 10/11/2023 | 17/6/2026 | An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later | |
| Modificada | Alta (7.2) | 1.5% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 10/11/2023 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and… | |
| Modificada | Media (4.3) | 0.34% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 3/11/2023 | 17/6/2026 | A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2514 build 20230906… | |
| Modificada | Alta (7.5) | 0.61% | — | Qnap Music Station | 3/11/2023 | 17/6/2026 | A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions: Music Station 4.8.11 and later Music Station… | |
| Modificada | Crítica (9.8) | 15% | — | Qnap QTSQnap Multimedia ConsoleQnap Media Streaming Add-on | 3/11/2023 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.2 ( 2023/05/04 ) and later Multimedia… | |
| Modificada | Crítica (9.8) | 19% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 3/11/2023 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QTS 4.5.4.2374 build… | |
| Modificada | Alta (8.8) | 1.1% | — | Qnap Qusbcam2 | 20/10/2023 | 17/6/2026 | An OS command injection vulnerability has been reported to affect QUSBCam2. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following version: QUSBCam2 2.0.3 ( 2023/06/15 ) and later | |
| Modificada | Media (5.4) | 0.30% | — | Qnap Video Station | 13/10/2023 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.0 ( 2023/07/27 ) and later |