1.2

CVSS4.0

CVE-2025-62852 - QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QT…

πŸ“… Published: Jan. 2, 2026, 3:19 p.m. πŸ”„ Last Modified: Jan. 6, 2026, 1:56 p.m.

8.1

CVSS4.0

CVE-2025-59387 - MARS (Multi-Application Recovery Service)

An SQL injection vulnerability has been reported to affect MARS (Multi-Application Recovery Service). The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: MARS (Multi-Application Recovery…

πŸ“… Published: Jan. 2, 2026, 3:19 p.m. πŸ”„ Last Modified: Jan. 5, 2026, 8:38 p.m.

8.1

CVSS4.0

CVE-2025-59384 - Qfiling

A path traversal vulnerability has been reported to affect Qfiling. The remote attackers can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qfiling 3.13.1 and later

πŸ“… Published: Jan. 2, 2026, 3:19 p.m. πŸ”„ Last Modified: Jan. 22, 2026, 6:23 p.m.

4.6

CVSS4.0

CVE-2025-59381 - QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the fo…

πŸ“… Published: Jan. 2, 2026, 3:19 p.m. πŸ”„ Last Modified: Jan. 6, 2026, 1:57 p.m.

4.6

CVSS4.0

CVE-2025-59380 - QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the fo…

πŸ“… Published: Jan. 2, 2026, 3:18 p.m. πŸ”„ Last Modified: Jan. 6, 2026, 1:58 p.m.

1.2

CVSS4.0

CVE-2025-53597 - License Center

A buffer overflow vulnerability has been reported to affect License Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: License Center 2.0.36 and …

πŸ“… Published: Jan. 2, 2026, 3:18 p.m. πŸ”„ Last Modified: Jan. 5, 2026, 8:33 p.m.

4.4

CVSS4.0

CVE-2025-53594 - Qfinder Pro, Qsync, QVPN

A path traversal vulnerability has been reported to affect several product versions. If a local attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Qfinder…

πŸ“… Published: Jan. 2, 2026, 3:18 p.m. πŸ”„ Last Modified: Jan. 5, 2026, 10:13 a.m.

1.3

CVSS4.0

CVE-2025-52871 - License Center

An out-of-bounds read vulnerability has been reported to affect License Center. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data. We have already fixed the vulnerability in the following version: License Center 2.0.36 and later

πŸ“… Published: Jan. 2, 2026, 3:18 p.m. πŸ”„ Last Modified: Jan. 5, 2026, 8:32 p.m.

1.2

CVSS4.0

CVE-2025-48721 - QTS, QuTS hero

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QT…

πŸ“… Published: Jan. 2, 2026, 3:17 p.m. πŸ”„ Last Modified: Jan. 6, 2026, 1:59 p.m.

2.7

CVSS4.0

CVE-2025-9110 - QTS, QuTS hero

An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following…

πŸ“… Published: Jan. 2, 2026, 3:17 p.m. πŸ”„ Last Modified: Jan. 6, 2026, 1:55 p.m.
Total resulsts: 344009
Page 1788 of 34,401
Β« previous page Β» next page
Filters