Skip to content
Noroxi

QNAP records

645 published records for vendor QNAP. 14 of them have been exploited in the wild (listed in CISA KEV) and 18 have a ready-made attack tool.

Filter by product ↓

Researcher profile

Entered KEV
14 · 2.2%
Weaponized
18 · 2.8%
Pre-auth RCE
66
With a fix record
0.3%
Median publish → KEV
573 days

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25
  10. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

645 records
  • CVE-2014-6271
    99Now

    GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attac

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    gnu · bashSep 24, 2014

  • CVE-2014-7169
    99Now

    GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variabl

    CriticalCVSS 9.8KEVWeaponizedEPSS 99%

    gnu · bashSep 24, 2014

  • CVE-2019-7195
    96Now

    This external control of file name or path vulnerability allows remote attackers to access or modify system files.

    CriticalCVSS 9.8KEVWeaponizedEPSS 89%

    qnap · photo stationDec 5, 2019

  • CVE-2019-7192
    95Now

    This improper access control vulnerability allows remote attackers to gain unauthorized access to the system.

    CriticalCVSS 9.8KEVWeaponizedEPSS 88%

    qnap · photo stationDec 5, 2019

  • CVE-2019-7194
    94Now

    This external control of file name or path vulnerability allows remote attackers to access or modify system files.

    CriticalCVSS 9.8KEVWeaponizedEPSS 82%

    qnap · photo stationDec 5, 2019

  • CVE-2022-27593
    92Now

    An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station.

    CriticalCVSS 9.1KEVWeaponizedEPSS 87%

    qnap · photo stationSep 8, 2022

  • CVE-2021-28799
    92Now

    Improper Authorization Vulnerability in HBS 3 (Hybrid Backup Sync)

    CriticalCVSS 9.8KEVWeaponizedEPSS 78%

    qnap · hybrid backup syncMay 12, 2021

  • CVE-2023-47565
    87Now

    An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x.

    HighCVSS 8.8KEVWeaponizedEPSS 73%

    qnap · qvr firmwareDec 8, 2023

  • CVE-2020-2509
    79This week

    Command Injection Vulnerability in QTS and QuTS hero

    CriticalCVSS 9.8KEVWeaponizedEPSS 33%

    qnap · qtsApr 17, 2021

  • CVE-2018-19949
    78This week

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands.

    CriticalCVSS 9.8KEVWeaponizedEPSS 30%

    qnap · qtsOct 28, 2020

  • CVE-2019-7193
    73This week

    This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system.

    CriticalCVSS 9.8KEVWeaponizedEPSS 14%

    qnap · qtsDec 5, 2019

  • CVE-2020-2506
    70This week

    improper access control vulnerability in Helpdesk

    CriticalCVSS 9.8KEVWeaponizedEPSS 2%

    qnap · helpdeskFeb 3, 2021

  • CVE-2018-19953
    63This week

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code.

    MediumCVSS 6.1KEVWeaponizedEPSS 30%

    qnap · qtsOct 28, 2020

  • CVE-2023-47218
    60This week

    QTS, QuTS hero, QuTScloud

    HighCVSS 8.3WeaponizedEPSS 89%

    qnap · qtsFeb 12, 2024

  • CVE-2017-13067
    60This week

    QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and

    CriticalCVSS 9.8WeaponizedEPSS 16%

    qnap · qtsSep 14, 2017

  • CVE-2017-6360
    59Plan

    QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain sensitive information via unspecified vect

    CriticalCVSS 9.8Proof of conceptEPSS 66%

    qnap · qtsMar 23, 2017

  • CVE-2018-19943
    58Plan

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code.

    MediumCVSS 5.4KEVWeaponizedEPSS 22%

    qnap · qtsOct 28, 2020

  • CVE-2017-6361
    56Plan

    QNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via unspecified vectors.

    CriticalCVSS 9.8Proof of conceptEPSS 56%

    qnap · qtsMar 23, 2017

  • CVE-2018-0706
    49Plan

    Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access se

    HighCVSS 8.8WeaponizedEPSS 48%

    qnap · q\'centerJul 16, 2018

  • CVE-2017-6359
    47Plan

    QNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and execute arbitrary commands via unspecified vector

    CriticalCVSS 9.8Proof of conceptEPSS 26%

    qnap · qtsMar 23, 2017

  • CVE-2018-0707
    46Plan

    Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated

    HighCVSS 7.2WeaponizedEPSS 58%

    qnap · q\'centerJul 16, 2018

  • CVE-2024-27130
    46Plan

    A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.

    HighCVSS 8.8Proof of conceptEPSS 37%

    qnap · qtsMay 21, 2024

  • CVE-2024-21899
    46Plan

    QTS, QuTS hero, QuTScloud

    CriticalCVSS 9.8No exploitEPSS 24%

    qnap · qtsMar 8, 2024

  • CVE-2023-23368
    44Plan

    QTS, QuTS hero, QuTScloud

    CriticalCVSS 9.8No exploitEPSS 17%

    qnap · qtsNov 3, 2023

  • CVE-2021-28809
    44Plan

    Missing Authentication for Critical Function in RTRR Server in HBS3

    CriticalCVSS 9.8No exploitEPSS 16%

    qnap · hybrid backup syncJul 8, 2021