CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-34352 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34352
A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210902 and later Se ha reportado una vulnerabilidad de inyección de comandos que afecta al dispositivo QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos corregido esta vulnerabilidad en las siguientes versiones de QVR: QVR 5.1.5 build 20210902 y posteriores • https://www.qnap.com/en/security-advisory/qsa-21-38 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-34351 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34351
A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos corregido esta vulnerabilidad en las siguientes versiones de QVR: QVR 5.1.5 build 20210803 y posteriores • https://www.qnap.com/en/security-advisory/qsa-21-35 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 0CVE-2021-34349 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34349
A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos corregido esta vulnerabilidad en las siguientes versiones de QVR: QVR 5.1.5 build 20210803 y posteriores • https://www.qnap.com/en/security-advisory/qsa-21-35 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-34348 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34348
A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos corregido esta vulnerabilidad en las siguientes versiones de QVR: QVR 5.1.5 build 20210803 y posteriores • https://www.qnap.com/en/security-advisory/qsa-21-35 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2021-34346 – Stack Based Overflow Vulnerability in NVR Storage Expansion
https://notcve.org/view.php?id=CVE-2021-34346
A stack buffer overflow vulnerability has been reported to affect QNAP device running NVR Storage Expansion. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of NVR Storage Expansion: NVR Storage Expansion 1.0.6 ( 2021/08/03 ) and later Se ha reportado de una vulnerabilidad de desbordamiento del búfer de la pila que afecta al dispositivo QNAP que ejecuta NVR Storage Expansion. Si es explotado, esta vulnerabilidad permite a atacantes ejecutar código arbitrario. Ya hemos corregido esta vulnerabilidad en las siguientes versiones de NVR Storage Expansion: NVR Storage Expansion 1.0.6 (03/08/2021) y posteriores • https://www.qnap.com/en/security-advisory/qsa-21-36 • CWE-787: Out-of-bounds Write •