Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 62

Export CSV
CVE-2025-52868

Qsync Central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 0.6 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-48724

Qsync Central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 0.6 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-48723

Qsync Central

A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 0.6 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-48722

Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-47209

Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 1.3 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-30276

Qsync Central

An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 4.9 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-30269

Qsync Central

A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 0.6 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2025-30266

Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.4 ( 2026/01/20 ) and later

CVSS 4.0 · 0.6 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qsync Central Qsync Central
CVE-2024-50404

Qsync Central

A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: Qsync Central 4.4.0.16_20240819 ( 2024/08/19 ) and later

CVSS 4.0 · 6.8 Medium EPSS 1.4% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-57712

Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.3 ( 2025/08/28 ) and later

CVSS 4.0 · 4 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-44012

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 ( 2025/07/31 ) and later

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-44014

Qsync Central

An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 ( 2025/07/09 ) and later

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-44011

Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 ( 2025/07/09 ) and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-44010

Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 ( 2025/07/09 ) and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-44009

Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 ( 2025/07/09 ) and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-44008

Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 ( 2025/07/09 ) and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-47210

Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 ( 2025/07/31 ) and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-52867

Qsync Central

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 ( 2025/07/31 ) and later

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-53595

Qsync Central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 ( 2025/07/31 ) and later

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-54153

Qsync Central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 ( 2025/07/31 ) and later

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central