Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 64

Export CSV
CVE-2025-54153

Qsync Central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.2 ( 2025/07/31 ) and later

CVSS 4.0 · 8.6 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-44006

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 ( 2025/07/09 ) and later

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-44007

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 ( 2025/07/09 ) and later

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-33034

Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 ( 2025/07/09 ) and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-33039

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 ( 2025/07/09 ) and later

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-33040

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.1 ( 2025/07/09 ) and later

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Qsync Central
CVE-2025-29892

Qsync Central

An SQL injection vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.6 ( 2025/03/20 ) and later

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-22482

Qsync Central

A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.6 ( 2025/03/20 ) and later

CVSS 4.0 · 2.3 Low EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-29898

Qsync Central

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

CVSS 4.0 · 6 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-29894

Qsync Central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-29893

Qsync Central

An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

CVSS 4.0 · 7.5 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-30262

Qsync Central

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.0 ( 2025/06/13 ) and later

CVSS 4.0 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-30261

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 5.0.0.0 ( 2025/06/13 ) and later

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-30260

Qsync Central

An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to prevent other systems, applications, or processes from accessing the same type of resource. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

CVSS 4.0 · 7.1 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-33038

Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-33037

Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-33036

Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-33033

Qsync Central

A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

CVSS 4.0 · 7.2 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-30278

Qsync Central

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central
CVE-2025-30277

Qsync Central

An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Qsync Central 4.5.0.7 ( 2025/04/23 ) and later

CVSS 4.0 · 8.3 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qsync Central