Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2856▼ 331 respecto a la semana anterior
Críticas / altas1383▼ 38 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)292▼ 217 respecto a la semana anterior
640 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Baja (0.6) | 0.42% | — | Qnap Qsync Central | 11/2/2026 | 17/6/2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later | |
| Analizada | Baja (0.6) | 0.32% | — | Qnap Qsync Central | 11/2/2026 | 17/6/2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later | |
| Analizada | Baja (0.6) | 0.42% | — | Qnap QTSQnap Quts Hero | 11/2/2026 | 17/6/2026 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QuTS hero h5.3.2.3354 build… | |
| Analizada | Baja (0.6) | 0.40% | — | Qnap Qsync Central | 11/2/2026 | 17/6/2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later | |
| Analizada | Baja (0.6) | 0.40% | — | Qnap Qsync Central | 11/2/2026 | 17/6/2026 | A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later | |
| Analizada | Baja (1.3) | 0.42% | — | Qnap Qsync Central | 11/2/2026 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and… | |
| Analizada | Baja (1.3) | 0.42% | — | Qnap Qsync Central | 11/2/2026 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and… | |
| Analizada | Media (5.1) | 0.44% | — | Qnap QTSQnap Quts Hero | 11/2/2026 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS… | |
| Analizada | Media (4.9) | 0.53% | — | Qnap Qsync Central | 11/2/2026 | 17/6/2026 | An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later | |
| Analizada | Baja (0.6) | 0.30% | — | Qnap Qsync Central | 11/2/2026 | 17/6/2026 | A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 (… | |
| Analizada | Baja (0.6) | 0.42% | — | Qnap Qsync Central | 11/2/2026 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and… | |
| Analizada | Baja (2) | 0.60% | — | Qnap Media Streaming Add-on | 11/2/2026 | 17/6/2026 | A command injection vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access who have also gained a user account, they can then exploit the vulnerability to execute arbitrary commands. We have already fixed the vulnerability in the following version: Media Streaming… | |
| Analizada | Baja (1.7) | 0.11% | — | Qnap Media Streaming Add-on | 11/2/2026 | 17/6/2026 | An out-of-bounds read vulnerability has been reported to affect Media Streaming add-on. If an attacker gains local network access, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.6 ( 2024/08/02 ) and later | |
| Analizada | Baja (2.7) | 0.45% | — | Qnap QTSQnap Quts Hero | 2/1/2026 | 17/6/2026 | An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following versions: QTS… | |
| Analizada | Alta (7) | 0.27% | — | Qnap Hybrid Backup Sync | 2/1/2026 | 25/7/2026 | An external control of file name or path vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read or modify files or directories. We have already fixed the vulnerability in the following version: HBS 3 Hybrid Backup… | |
| Analizada | Alta (7) | 0.24% | — | Qnap Hybrid Backup Sync | 2/1/2026 | 17/6/2026 | A generation of error message containing sensitive information vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If an attacker gains local network access, they can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following version: HBS 3 Hybrid… | |
| Analizada | Alta (8.1) | 0.69% | — | Qnap Hyper Data Protector | 2/1/2026 | 17/6/2026 | An SQL injection vulnerability has been reported to affect Hyper Data Protector. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: Hyper Data Protector 2.2.4.1 and later | |
| Analizada | Alta (8.1) | 0.52% | — | Qnap Qfiling | 2/1/2026 | 17/6/2026 | A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qfiling 3.13.1 and later | |
| Modificada | Media (6.9) | 0.47% | — | Qnap QTSQnap Quts Hero | 2/1/2026 | 17/6/2026 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: QTS… | |
| Analizada | Media (4.6) | 0.58% | — | Qnap QTSQnap Quts Hero | 2/1/2026 | 17/6/2026 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: QTS… | |
| Analizada | Baja (1.2) | 0.60% | — | Qnap License Center | 2/1/2026 | 17/6/2026 | A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later | |
| Aplazada | Media (4.4) | 0.12% | — | Qnap Qfinder PRO MACAIQnap Qsync MACAIQnap Qvpn Device Client MACAI | 2/1/2026 | 17/6/2026 | A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinder Pro Mac 7.13.0 and… | |
| Analizada | Baja (1.3) | 0.58% | — | Qnap License Center | 2/1/2026 | 17/6/2026 | An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later | |
| Analizada | Alta (8.1) | 1.5% | — | Qnap Malware Remover | 2/1/2026 | 17/6/2026 | An improper control of generation of code vulnerability has been reported to affect Malware Remover. The remote attackers can then exploit the vulnerability to bypass protection mechanism. We have already fixed the vulnerability in the following version: Malware Remover 6.6.8.20251023 and later | |
| Analizada | Baja (1.2) | 0.36% | — | Qnap QTSQnap Quts Hero | 2/1/2026 | 7/10/2026 | A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QTS 5.2.8.3332 build… |