CVE Vulnerability Catalog

CasaOS versions up to and including 0.4.15 expose multiple unauthenticated endpoints that allow remote attackers to retrieve sensitive configuration files and system debug information. The /v1/users/image and /v1/sys/debug endpoints can be abused to access files and disclose host OS, kernel, hardware, and storage details.

In Daptin 0.10.3, the goqu.L function in server/resource/resource_aggregate.go of the Aggregate API component is vulnerable to SQL injection via manipulation of the column/group/order arguments. The attack can be initiated remotely and the exploit is publicly available.

Plane (open source project management tool) prior to version 1.2.0 has an issue where the `/api/workspaces/:slug/members/` endpoint is accessible by guest users and allows listing users in a specific workspace. Since the `display_name` in the response is actually the handler of the email, a malicious guest can identify admin users' email addresses.

A buffer overflow vulnerability in QNAP operating systems. A remote attacker with an administrator account can modify memory or crash processes. Fixed in QTS 5.2.8.3332 build 20251128 and later.

A path traversal vulnerability has been reported to affect several QNAP operating system versions. A remote attacker with an administrator account can exploit this vulnerability to read the contents of unexpected files or system data.

A path traversal vulnerability in several QNAP operating system versions. A remote attacker with an administrator account can exploit it to read unexpected files or system data. Fixed in QTS 5.2.8.3332 and later, and QuTS hero h5.2.8.3321 and later.

A buffer overflow vulnerability in License Center. A remote attacker with an administrator account can exploit it to modify memory or crash processes. The issue is fixed in version 2.0.36 and later.

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can exploit the vulnerability to read the contents of unexpected files or system data.

An out-of-bounds read vulnerability in License Center. A remote attacker with a user account can exploit it to obtain secret data. The issue is fixed in version 2.0.36 and later.

A buffer overflow vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit the vulnerability to modify memory or crash processes. Fixed in QTS 5.2.8.3332 build 20251128 and later.

A cross-site scripting (XSS) vulnerability has been reported in QuMagie. Remote attackers can exploit it to bypass security mechanisms or read application data.

An allocation of resources without limits or throttling vulnerability in QNAP operating systems can be exploited by a remote attacker who gains an administrator account to prevent other systems, applications, or processes from accessing the same type of resource. The vendor has fixed the vulnerability in QTS 5.2.7.3256 build 20250913 and later, and QuTS hero h5.2.7.3256 build 20250913 and h5.3.1.3250 build 20250912 and later.

An out-of-bounds read vulnerability affects several QNAP operating system versions. A remote attacker with an administrator account can exploit it to obtain secret data.

An out-of-bounds read vulnerability affects several QNAP operating system versions. A remote attacker with an administrator account can exploit it to obtain secret data.

An out-of-bounds read vulnerability affects several QNAP operating system versions. A remote attacker with an administrator account can exploit it to obtain secret data.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit the vulnerability to launch a denial-of-service (DoS) attack.

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit the vulnerability to modify memory or crash processes.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. A remote attacker who gains a user account can exploit it to launch a denial-of-service (DoS) attack.

A use of externally-controlled format string vulnerability affects several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to obtain secret data or modify memory.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit the vulnerability to launch a denial-of-service (DoS) attack.