Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2678▼ 660 respecto a la semana anterior
Críticas / altas1266▼ 293 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)250▼ 252 respecto a la semana anterior
640 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Crítica (9.8) | 1.4% | — | Qnap QVR | 5/5/2022 | 17/6/2026 | We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later | |
| Modificada | Crítica (9.8) | 0.93% | — | Qnap Photo Station | 5/5/2022 | 17/6/2026 | An improper authentication vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.20 ( 2022/02/15 )… | |
| Modificada | Crítica (9.8) | 0.93% | — | Qnap Video Station | 5/5/2022 | 17/6/2026 | An improper authentication vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Video Station: Video Station 5.5.9 and later Video… | |
| Modificada | Crítica (9.8) | 1.1% | — | Qnap Video Station | 5/5/2022 | 17/6/2026 | An missing authorization vulnerability has been reported to affect QNAP device running Video Station. If exploited, this vulnerability allows remote attackers to access data or perform actions that they should not be allowed to perform. We have already fixed this vulnerability in the following versions of Video… | |
| Modificada | Media (6.1) | 0.58% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 5/5/2022 | 17/6/2026 | An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and… | |
| Modificada | Media (6.1) | 0.76% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 5/5/2022 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and QuTScloud: QTS 4.5.4.1991… | |
| Modificada | Alta (8.1) | 1.6% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 5/5/2022 | 17/6/2026 | An improper link resolution before file access ('Link Following') vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS. If exploited, this vulnerability allows remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected… | |
| Modificada | Alta (8.8) | 1.7% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 5/5/2022 | 17/6/2026 | A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS: QuTScloud c5.0.1.1949 and… | |
| Modificada | Media (5.3) | 0.95% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 5/5/2022 | 17/6/2026 | A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance. If exploited, this vulnerability allows attackers to read the contents of unexpected files and expose sensitive data. We have already fixed this vulnerability in the following versions of… | |
| Modificada | Media (6.1) | 0.69% | — | Qnap NAS Proxy Server | 25/2/2022 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 )… | |
| Modificada | Media (5.4) | 0.62% | — | Qnap NAS Proxy Server | 25/2/2022 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 )… | |
| Modificada | Crítica (9.8) | 0.74% | — | Qnap Kazoo Server | 11/2/2022 | 17/6/2026 | An improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Kazoo Server: Kazoo Server 4.11.22 and later | |
| Modificada | Crítica (9.8) | 1.3% | — | Qnap QVR EliteQnap QVR GuardQnap QVR PRO | 14/1/2022 | 17/6/2026 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: QuTS hero h5.0.0: QVR… | |
| Modificada | Crítica (9.8) | 1.3% | — | Qnap QVR EliteQnap QVR GuardQnap QVR PRO | 14/1/2022 | 17/6/2026 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: QuTS hero h5.0.0: QVR… | |
| Modificada | Crítica (9.8) | 1.3% | — | Qnap QVR EliteQnap QVR GuardQnap QVR PRO | 14/1/2022 | 17/6/2026 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: QuTS hero h5.0.0: QVR… | |
| Modificada | Crítica (9.8) | 1.3% | — | Qnap QVR EliteQnap QVR GuardQnap QVR PRO | 14/1/2022 | 17/6/2026 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: QuTS hero h5.0.0: QVR… | |
| Modificada | Crítica (9.8) | 1.3% | — | Qnap QVR EliteQnap QVR GuardQnap QVR PRO | 14/1/2022 | 17/6/2026 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: QuTS hero h5.0.0: QVR… | |
| Modificada | Media (6.1) | 0.57% | — | Qnap Qcalagent | 14/1/2022 | 17/6/2026 | An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later | |
| Modificada | Media (6.1) | 0.70% | — | Qnap Qcalagent | 14/1/2022 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later | |
| Modificada | Media (6.1) | 0.64% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 7/1/2022 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and QuTScloud: QuTS hero h4.5.4.1771 build… | |
| Modificada | Alta (7.5) | 0.81% | — | Qnap Qfile | 29/12/2021 | 17/6/2026 | An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers to compromise app and access information We have already fixed this vulnerability in the following versions of Qfile: Qfile 3.0.0.1105 and later | |
| Modificada | Crítica (9.8) | 1.3% | — | Qnap Surveillance Station | 29/12/2021 | 17/6/2026 | A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of Surveillance Station: QTS 5.0.0 (64 bit): Surveillance Station… | |
| Modificada | Media (6.1) | 0.69% | — | Qnap Kazoo Server | 29/12/2021 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Kazoo Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Kazoo Server: Kazoo Server 4.11.20 and later | |
| Modificada | Alta (8.8) | 0.97% | — | Qnap QVR | 26/11/2021 | 17/6/2026 | An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later | |
| Modificada | Crítica (9.8) | 1.5% | — | Qnap QVR | 26/11/2021 | 17/6/2026 | A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later |