Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 242

Export CSV
CVE-2021-28812

Command Injection Vulnerability in Video Station

A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2; versions prior to 5.5.4 on QuTS hero h4.5.2; versions prior to 5.5.4 on QuTScloud c4.5.4. This issue does not affect: QNAP Systems Inc. Video Station on QTS 4.3.6; on QTS 4.3.3.

CVSS 3.1 · 8.8 High EPSS 1.6% KEV · Not listed
Vendors
Qnap
Products
Qts Quts Hero Qutscloud and 1 more
CVE-2024-8928

php: Erroneous parsing of multipart form data

A flaw was found in PHP. Erroneous parsing of multipart form data contained in an HTTP POST request could lead to legitimate data not being processed, violating data integrity.

CVSS 3.1 · 3.1 Low EPSS n/a KEV · Not listed
Vendors
—
Products
—