CVSS: 9.8EPSS: 1%CPEs: 3EXPL: 0CVE-2021-38682 – Stack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard
https://notcve.org/view.php?id=CVE-2021-38682
14 Jan 2022 — A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: QuTS hero h5.0.0: QVR Elite 2.1.4.0 (2021/12/06) and later QuTS hero h4.5.4: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 5.0.0: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 4.5.4: QVR Elite 2.1.4.0 (2021/12/06) and l... • https://www.qnap.com/en/security-advisory/qsa-21-59 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-38686 – Improper Authentication Vulnerability in VioStor
https://notcve.org/view.php?id=CVE-2021-38686
26 Nov 2021 — An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later Se ha informado de una vulnerabilidad de autenticación inapropiada que afecta al dispositivo de QNAP, VioStor. Si es explotada, esta vulnerabilidad permite a atacantes comprometer la seguridad del sistema. Ya hemos c... • https://www.qnap.com/en/security-advisory/qsa-21-52 • CWE-287: Improper Authentication •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2021-38685 – Command Injection Vulnerability in VioStor
https://notcve.org/view.php?id=CVE-2021-38685
26 Nov 2021 — A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP, VioStor. Si es explotada, esta vulnerabilidad permite a atacantes remotos ejecutar comandos arbitrarios. Ya hemos corregido esta vuln... • https://www.qnap.com/en/security-advisory/qsa-21-51 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 4%CPEs: 1EXPL: 0CVE-2021-34352 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34352
01 Oct 2021 — A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210902 and later Se ha reportado una vulnerabilidad de inyección de comandos que afecta al dispositivo QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos corre... • https://www.qnap.com/en/security-advisory/qsa-21-38 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2021-34351 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34351
27 Sep 2021 — A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos... • https://www.qnap.com/en/security-advisory/qsa-21-35 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.2EPSS: 1%CPEs: 1EXPL: 0CVE-2021-34349 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34349
27 Sep 2021 — A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos... • https://www.qnap.com/en/security-advisory/qsa-21-35 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2021-34348 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34348
27 Sep 2021 — A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos... • https://www.qnap.com/en/security-advisory/qsa-21-35 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •