CVE Vulnerability Catalog

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. Fixed in QTS 5.2.5.3145 and QuTS hero h5.2.5.3138.

Qsync Central contains a NULL pointer dereference vulnerability. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

Qsync Central contains a NULL pointer dereference vulnerability. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

Qsync Central contains an allocation of resources without limits or throttling vulnerability. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

Qsync Central contains an allocation of resources without limits or throttling vulnerability. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

A vulnerability involving allocation of resources without limits or throttling has been reported in File Station 5. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

A vulnerability involving allocation of resources without limits or throttling has been reported in File Station 5. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

An uncontrolled resource consumption vulnerability has been reported in Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A vulnerability involving allocation of resources without limits or throttling has been reported in File Station 5. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack. Fixes are available in QTS 5.2.5.3145 and QuTS hero h5.2.5.3138.

A security flaw was found in code-projects Simple Grading System 1.0 in /add_student_grade.php of the Admin Panel. Manipulating the Add argument results in SQL injection, exploitable remotely.

A vulnerability was identified in code-projects Simple Grading System 1.0 in /edit_account.php of the Admin Panel. Manipulating the ID argument leads to SQL injection, exploitable remotely.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A cross-site scripting (XSS) vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to bypass security mechanisms or read application data.