Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- Low1.3A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.EPSS 0.4%Jan 2, 2026
- Low1.3A buffer overflow vulnerability has been reported to affect several QNAP operating system versions.EPSS 0.4%Jan 2, 2026
- Low1.2A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.EPSS 0.4%Jan 2, 2026
- Low1.2A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.EPSS 0.4%Jan 2, 2026
- Low1.2A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.EPSS 0.4%Jan 2, 2026
- Medium4.9An allocation of resources without limits or throttling vulnerability has been reported to affect several QNAP operating system versions.EPSS 0.3%Jan 2, 2026
- Low1.3A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.EPSS 0.3%Jan 2, 2026
- UnknownQNAP music_station Improper AuthenticationKEVAug 16, 2025
- UnknownQNAP QTS Improper Neutralization of Special Elements used in a Command ('Command Injection')KEVSep 18, 2024
- UnknownQNAP Operating System Authenticated Network Buffer OverflowKEVMay 27, 2024
- UnknownQNAP QTS Command InjectionKEVMay 16, 2024
- UnknownQNAP QTS Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')KEVMar 24, 2024
- UnknownQNAP QTS Improper AuthenticationKEVMar 18, 2024
- UnknownQNAP QTS and QuTS Command Injection VulnerabilityKEVFeb 16, 2024
- High8.8QNAP VioStor NVR OS Command Injection VulnerabilityKEVEPSS 73.3%Dec 8, 2023
- Critical9.1QNAP Photo Station Externally Controlled Reference VulnerabilityKEVEPSS 87.9%May 18, 2022
- UnknownQNAP malware_remover Improper Neutralization of Special Elements used in a Command ('Command Injection')KEVMar 24, 2022
- UnknownQNAP QTS Improper Input ValidationKEVJul 28, 2021
- Critical9.8QNAP NAS Improper Authorization VulnerabilityKEVEPSS 78.3%Apr 29, 2021
- Critical9.8QNAP Network-Attached Storage (NAS) Command Injection VulnerabilityKEVEPSS 34.0%Apr 16, 2021
- UnknownQNAP Helpdesk Improper Neutralization of Special Elements used in a Command ('Command Injection')KEVMar 5, 2021
- Critical9.8QNAP Helpdesk Improper Access Control VulnerabilityKEVEPSS 2.0%Feb 3, 2021
- Medium6.1QNAP NAS File Station Cross-Site Scripting VulnerabilityKEVEPSS 29.0%Oct 28, 2020
- Medium5.4QNAP NAS File Station Cross-Site Scripting VulnerabilityKEVEPSS 21.5%Oct 28, 2020
- Critical9.8QNAP NAS File Station Command Injection VulnerabilityKEVEPSS 28.6%Jun 5, 2020