VendorsQNAPnasall versions
Vulnerabilities

QNAP NAS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

11CVEs
CVE-2021-28797
Stack Buffer Overflow in Surveillance Station
Published 2021-04-14 · Modified
9.8EPSS 0.059
CVE-2020-2501
Stack Buffer Overflow in Surveillance Station
Published 2021-02-17 · Modified
9.8EPSS 0.029
CVE-2021-34358
CSRF Vulnerability in QmailAgent
Published 2021-11-20 · Modified
8.8EPSS 0.004
CVE-2021-34354
Stored Cross-site Scripting Vulnerability in Photo Station
Published 2021-10-01 · Modified
7.6EPSS 0.006
CVE-2021-34355
Stored XSS Vulnerability in Photo Station
Published 2021-10-01 · Modified
7.6EPSS 0.006
CVE-2021-34356
Stored XSS Vulnerability in Photo Station
Published 2021-10-01 · Modified
7.6EPSS 0.006
CVE-2021-34357
Reflected XSS Vulnerability in QmailAgent
Published 2021-11-13 · Modified
6.9EPSS 0.007
CVE-2013-0143
cgi-bin/pingping.cgi on QNAP VioStor NVR devices with firmware 4.0.3, and in the Surveillance Station Pro component in QNAP NAS, allows remote authenticated users to execute arbitrary commands by leveraging guest access and placing shell metacharacters in the query string.
Published 2013-06-07 · Modified
6.51 PoCEPSS 0.070
CVE-2021-38681
Reflected XSS Vulnerability in Ragic Cloud DB
Published 2021-11-20 · Modified
5.4EPSS 0.007
CVE-2021-38675
Stored XSS Vulnerability in Image2PDF
Published 2021-10-01 · Modified
5.4EPSS 0.006
CVE-2013-0142
QNAP VioStor NVR devices with firmware 4.0.3, and the Surveillance Station Pro component in QNAP NAS, have a hardcoded guest account, which allows remote attackers to obtain web-server login access via unspecified vectors.
Published 2013-06-07 · Modified
5.0EPSS 0.013