Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 13

Export CSV
CVE-2026-26237

QuMagie

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later

CVSS 4.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qumagie Qumagie
CVE-2026-26236

QuMagie

A missing authorization vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to access unauthorized data or perform unauthorized actions. We have already fixed the vulnerability in the following version: QuMagie 2.9.0 and later

CVSS 4.0 · 6.6 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qumagie Qumagie
CVE-2026-44083

QuMagie

An authorization bypass through user-controlled key vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to gain unintended privileges. We have already fixed the vulnerability in the following version: QuMagie 2.9.1 and later

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems
Products
Qumagie Qumagie
CVE-2025-62857

QuMagie

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later

CVSS 4.0 · 2.2 Low EPSS < 1% KEV · Not listed
Vendors
Qnap Qnap Systems Inc.
Products
Qumagie Qumagie
CVE-2025-52425

QuMagie

An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later

CVSS 4.0 · 9.5 Critical EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qumagie
CVE-2025-58464

QuMagie

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.7.3 and later

CVSS 4.0 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qumagie
CVE-2023-47560

QuMagie

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later

CVSS 3.1 · 7.4 High EPSS 1.1% KEV · Not listed
Vendors
Qnap
Products
Qumagie
CVE-2023-47559

QuMagie

A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qumagie
CVE-2023-47219

QuMagie

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later

CVSS 3.1 · 3.5 Low EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qumagie
CVE-2023-41285

QuMagie

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qumagie
CVE-2023-41284

QuMagie

A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later

CVSS 3.1 · 7.4 High EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qumagie
CVE-2023-39295

QuMagie

An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later

CVSS 3.1 · 8.8 High EPSS 2.1% KEV · Not listed
Vendors
Qnap
Products
Qumagie
CVE-2024-38642

QuMagie

An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in the following version: QuMagie 2.3.1 and later

CVSS 4.0 · 1 Low EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qumagie