CVE Vulnerability Catalog

A NULL pointer dereference vulnerability affects several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. A remote attacker who gains an administrator account can exploit it to launch a denial-of-service (DoS) attack.

A path traversal vulnerability has been reported in several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit the vulnerability to read unexpected files or system data.

A NULL pointer dereference vulnerability in Qsync Central allows a remote attacker with a user account to launch a denial-of-service (DoS) attack.

Redis versions 8.2.1 and below allow an authenticated user to use a specially crafted LUA script to read out-of-bound data or crash the server, leading to denial of service. The problem exists in all versions of Redis with Lua scripting. This issue is fixed in version 8.2.2.

In Redis versions 8.2.1 and below, an authenticated user can use a specially crafted Lua script to manipulate different LUA objects and potentially run their own code in the context of another user. The problem exists in all Redis versions with Lua scripting. Fixed in version 8.2.2.

An allocation of resources without limits or throttling vulnerability in Qsync Central allows a remote attacker with a user account to exhaust resources. This can prevent other systems, applications, or processes from accessing the same type of resource.

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported to affect Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

An allocation of resources without limits or throttling vulnerability has been reported in Qsync Central. If a remote attacker gains a user account, they can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

An allocation of resources without limits or throttling vulnerability has been reported in Qsync Central. If a remote attacker gains a user account, they can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

An allocation of resources without limits or throttling vulnerability has been reported in Qsync Central. If a remote attacker gains a user account, they can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

An allocation of resources without limits or throttling vulnerability has been reported in Qsync Central. If a remote attacker gains a user account, they can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

A path traversal vulnerability has been reported in Qsync Central. A remote attacker with a user account can exploit it to read unexpected files or system data.

nopCommerce 4.40.3 is vulnerable to XSS in the Product Name field at /Admin/Product/Edit/[id]. Each time a user views the product in the shop, the XSS payload fires.