Qsync Central vulnerabilities
36 known CVE vulnerabilities in Qsync Central, translated and rated.
- CVE-2026-41541Medium
An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. The vulnerability has been fixed in versions 5.0.0.7, 5.1.0.3, 5.2.0.5, and 5.3.0.2 and later.
- CVE-2026-26243High
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
- CVE-2026-24718Medium
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.
- CVE-2025-29897Low
A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes.
- CVE-2025-29896Low
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
- CVE-2025-29895Low
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
- CVE-2025-57712Medium
A path traversal vulnerability has been reported in Qsync Central. A remote attacker with a user account can exploit it to read unexpected files or system data.
- CVE-2025-54153High
An SQL injection vulnerability has been reported to affect Qsync Central. A remote attacker who gains a user account can exploit the vulnerability to execute unauthorized code or commands.
- CVE-2025-53595High
An SQL injection vulnerability has been reported to affect Qsync Central. A remote attacker who gains a user account can exploit the vulnerability to execute unauthorized code or commands.
- CVE-2025-52867Medium
An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.
- CVE-2025-47210Medium
A NULL pointer dereference vulnerability in Qsync Central allows a remote attacker with a user account to launch a denial-of-service (DoS) attack.
- CVE-2025-44014High
Qsync Central has an out-of-bounds write vulnerability. A remote attacker who gains a user account can exploit it to modify or corrupt memory.
- CVE-2025-44012Medium
An allocation of resources without limits or throttling vulnerability in Qsync Central allows a remote attacker with a user account to exhaust resources. This can prevent other systems, applications, or processes from accessing the same type of resource.
- CVE-2025-44011Medium
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.
- CVE-2025-44010Medium
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.
- CVE-2025-44009Medium
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.
- CVE-2025-44008Medium
A NULL pointer dereference vulnerability has been reported to affect Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.
- CVE-2025-44007Medium
An allocation of resources without limits or throttling vulnerability has been reported in Qsync Central. If a remote attacker gains a user account, they can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.
- CVE-2025-44006Medium
An allocation of resources without limits or throttling vulnerability has been reported in Qsync Central. If a remote attacker gains a user account, they can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.
- CVE-2025-33040Medium
An allocation of resources without limits or throttling vulnerability has been reported in Qsync Central. If a remote attacker gains a user account, they can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.
- CVE-2025-33039Medium
An allocation of resources without limits or throttling vulnerability has been reported in Qsync Central. If a remote attacker gains a user account, they can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.
- CVE-2025-33034Medium
A path traversal vulnerability has been reported in Qsync Central. A remote attacker with a user account can exploit it to read unexpected files or system data.
- CVE-2025-33038Medium
A path traversal vulnerability in Qsync Central allows a remote attacker with a user account to read the contents of unexpected files or system data.
- CVE-2025-33037Medium
A path traversal vulnerability has been reported in Qsync Central. A remote attacker with a user account can exploit it to read unexpected files or system data.
- CVE-2025-33036Medium
A path traversal vulnerability has been reported in Qsync Central. A remote attacker with a user account can exploit it to read unexpected files or system data.
- CVE-2025-33033Medium
A path traversal vulnerability has been reported in Qsync Central. A remote attacker with a user account can exploit it to read unexpected files or system data.
- CVE-2025-30278High
An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can exploit the vulnerability to compromise the security of the system.
- CVE-2025-30277High
An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can exploit the vulnerability to compromise the security of the system.
- CVE-2025-30275Medium
A NULL pointer dereference vulnerability has been reported in Qsync Central. If a remote attacker gains a user account, they can exploit the vulnerability to launch a denial-of-service (DoS) attack. The vulnerability is fixed in Qsync Central 4.5.0.7 and later.
- CVE-2025-30263Medium
Qsync Central contains a NULL pointer dereference vulnerability. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.
- CVE-2025-30262Medium
Qsync Central contains a NULL pointer dereference vulnerability. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.
- CVE-2025-30261Medium
Qsync Central contains an allocation of resources without limits or throttling vulnerability. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.
- CVE-2025-30260Medium
Qsync Central contains an allocation of resources without limits or throttling vulnerability. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.
- CVE-2025-29898Medium
An uncontrolled resource consumption vulnerability has been reported in Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.
- CVE-2025-29894High
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can exploit the vulnerability to execute unauthorized code or commands. The vulnerability has been fixed in Qsync Central 4.5.0.7 (2025/04/23) and later.
- CVE-2025-29893High
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can exploit the vulnerability to execute unauthorized code or commands. The vulnerability has been fixed in Qsync Central 4.5.0.7 (2025/04/23) and later.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS

