Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2677▼ 656 respecto a la semana anterior
Críticas / altas1264▼ 294 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)244▼ 258 respecto a la semana anterior
640 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Alta (8.8) | 0.51% | — | Qnap Video Station | 13/10/2023 | 17/6/2026 | A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.7.0 ( 2023/07/27 ) and later | |
| Modificada | Alta (8.8) | 1.0% | — | Qnap Video Station | 13/10/2023 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. QuTScloud is not affected. We have already fixed the vulnerability in the following versions: QuTS hero… | |
| Modificada | Alta (7.2) | 1.1% | — | Qnap Container Station | 13/10/2023 | 17/6/2026 | An OS command injection vulnerability has been reported to affect Container Station. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Container Station 2.6.7.44 and later | |
| Modificada | Alta (7.5) | 0.61% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 13/10/2023 | 17/6/2026 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.0.2444 build… | |
| Modificada | Alta (7.2) | 0.55% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 13/10/2023 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build… | |
| Modificada | Media (4.9) | 0.50% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 13/10/2023 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network. QES is not affected. We have already fixed the vulnerability in the following… | |
| Modificada | Alta (7.2) | 0.59% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 6/10/2023 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build… | |
| Modificada | Alta (7.2) | 0.59% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 6/10/2023 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build… | |
| Modificada | Media (4.4) | 0.11% | — | Qnap Qvpn | 6/10/2023 | 17/6/2026 | A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors. We have already fixed the vulnerability in the following version: QVPN Windows… | |
| Modificada | Media (4.4) | 0.16% | — | Qnap Qvpn | 6/10/2023 | 17/6/2026 | An insufficiently protected credentials vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to gain access to user accounts and access sensitive data used by the user account via unspecified vectors. We have already fixed the… | |
| Modificada | Media (6.5) | 0.67% | — | Qnap Music Station | 6/10/2023 | 17/6/2026 | A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: Music Station 5.3.22 and later | |
| Modificada | Media (6.5) | 0.67% | — | Qnap Music Station | 6/10/2023 | 17/6/2026 | A path traversal vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow authenticated users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version: Music Station 5.3.22 and later | |
| Modificada | Crítica (9.8) | 0.92% | — | Qnap Multimedia Console | 22/9/2023 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1.1 ( 2023/03/29 )… | |
| Modificada | Crítica (9.8) | 0.92% | — | Qnap QTS | 22/9/2023 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 4.3.6.2441 build 20230621 and later… | |
| Modificada | Alta (8.8) | 1.6% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 22/9/2023 | 17/6/2026 | An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to execute commands via susceptible QNAP devices. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2376 build 20230421 and later QTS… | |
| Modificada | Media (4.4) | 0.18% | — | Qnap QVR PRO Client | 8/9/2023 | 17/6/2026 | An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an additional, less-protected path to acquiring the information via unspecified vectors. We have already fixed the… | |
| Modificada | Media (5.3) | 0.48% | — | Qnap QTSQnap Quts Hero | 24/8/2023 | 17/6/2026 | An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2425 build 20230609 and later QTS 5.1.0.2444… | |
| Modificada | Media (6.5) | 0.17% | — | Qnap QTSQnap Quts Hero | 24/8/2023 | 17/6/2026 | A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the vulnerability in the following… | |
| Modificada | Alta (8.8) | 0.10% | — | Qnap QTSQnap Quts Hero | 24/8/2023 | 17/6/2026 | An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to decrypt the data using brute force attacks via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS… | |
| Modificada | Baja (2.7) | 0.66% | — | Qnap QTSQnap Quts HeroQnap QutscloudQnap Qvp-41b Firmware+6 | 29/3/2023 | 17/6/2026 | A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) We have already… | |
| Modificada | Baja (2.7) | 0.66% | — | Qnap QVRQnap QTSQnap Quts HeroQnap Qutscloud+7 | 29/3/2023 | 17/6/2026 | A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) We have already… | |
| Modificada | Alta (7.2) | 1.2% | — | Qnap QVRQnap QTSQnap Quts HeroQnap Qutscloud+7 | 29/3/2023 | 17/6/2026 | An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated administrators to execute commands via unspecified vectors. QES is not affected. We have already fixed the vulnerability in the following versions: QTS… | |
| Modificada | Crítica (9.8) | 2.7% | — | Qnap QTSQnap Quts Hero | 30/1/2023 | 17/6/2026 | A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QuTS hero, QTS: QuTS hero h5.0.1.2248 build 20221215 and later QTS 5.0.1.2234 build… | |
| Analizada | Crítica (9.1) | 88% | ⚠ Explotación activa💥 Exploit | Qnap Photo Station | 8/9/2022 | 17/6/2026 | An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x:… | |
| Modificada | Alta (8.8) | 0.47% | — | Qnap NAS Proxy Server | 26/5/2022 | 17/6/2026 | A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 (… |