CVE Vulnerability Catalog

A use of externally-controlled format string vulnerability has been reported in several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to obtain secret data or modify memory.

An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported affecting several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to launch a denial-of-service (DoS) attack. The vulnerability is fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250715 and later.

A NULL pointer dereference vulnerability has been reported affecting several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to launch a denial-of-service (DoS) attack. The vulnerability is fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250715 and later.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to launch a denial-of-service (DoS) attack. The issue is fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250715 and later.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to launch a denial-of-service (DoS) attack. The issue is fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250715 and later.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to launch a denial-of-service (DoS) attack. The issue is fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250715 and later.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to launch a denial-of-service (DoS) attack. The issue is fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250715 and later.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to launch a denial-of-service (DoS) attack. The issue is fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250715 and later.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to launch a denial-of-service (DoS) attack. The issue is fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250715 and later.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to launch a denial-of-service (DoS) attack. The issue is fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250715 and later.

HCL MyXalytics v6.6 is affected by an HTML Injection. This issue occurs when untrusted input is included in the output without proper handling, potentially allowing unauthorized content injection and manipulation.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to launch a denial-of-service (DoS) attack. The issue is fixed in QTS 5.2.6.3195 build 20250715 and later and QuTS hero h5.2.6.3195 build 20250715 and later.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to launch a denial-of-service (DoS) attack. The issue is fixed in QTS 5.2.6.3195 build 20250715 and later, QuTS hero h5.2.6.3195 build 20250715 and later, and QuTS hero h5.3.0.3192 build 20250716 and later.

A use of externally-controlled format string vulnerability has been reported in several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to obtain secret data or modify memory.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to launch a denial-of-service (DoS) attack. The issue is fixed in QTS 5.2.6.3195 build 20250715 and later.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to launch a denial-of-service (DoS) attack.

A use of externally-controlled format string vulnerability has been reported to affect several QNAP operating system versions. A remote attacker with an administrator account can exploit it to obtain secret data or modify memory.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to launch a denial-of-service (DoS) attack.