NotCVE - vendor:"Qnap" product:"Qvr"

17 results (0.003 seconds)

CVSS: 6.7EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-27592 – QVR Smart Client

https://notcve.org/view.php?id=CVE-2022-27592

06 Sep 2024 — An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors. We have already fixed the vulnerability in the following version: Windows 10 SP1, Windows 11, Mac OS, and Mac M1: QVR Smart Client 2.4.0.0570 and later An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnera... • https://www.qnap.com/en/security-advisory/qsa-24-22 • CWE-428: Unquoted Search Path or Element •

CVSS: 9.0EPSS: 49%CPEs: 1EXPL: 0

CVE-2023-47565 – QNAP VioStor NVR OS Command Injection Vulnerability

https://notcve.org/view.php?id=CVE-2023-47565

08 Dec 2023 — An OS command injection vulnerability has been found to affect legacy QNAP VioStor NVR models running QVR Firmware 4.x. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QVR Firmware 5.0.0 and later Se ha descubierto que una vulnerabilidad de inyección de comandos del sistema operativo afecta a los modelos QNAP VioStor NVR heredados que ejecutan el firmware QVR 4.x. Si se explota, la vulnerabi... • https://www.qnap.com/en/security-advisory/qsa-23-48 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 6.7EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-27599 – QVR Pro Client

https://notcve.org/view.php?id=CVE-2022-27599

08 Sep 2023 — An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possibly provides local authenticated administrators with an additional, less-protected path to acquiring the information via unspecified vectors. We have already fixed the vulnerability in the following version: Windows 10 SP1, Windows 11, Mac OS, and Mac M1: QVR Pro Client 2.3.0.0420 and later Se ha informado que una inserción de información confidencial en la vulnerabilid... • https://www.qnap.com/en/security-advisory/qsa-23-08 • CWE-532: Insertion of Sensitive Information into Log File •

CVSS: 8.3EPSS: 0%CPEs: 18EXPL: 0

CVE-2023-23355 – QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances), QVR

https://notcve.org/view.php?id=CVE-2023-23355

29 Mar 2023 — An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated administrators to execute commands via unspecified vectors. QES is not affected. We have already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later QTS 4.5.4.2374 build 20230416 and later QuTS hero h5.0.1.2348 build 20230324 and later QuTS hero h4.5.4.2374 build 20230417 and later QuTScloud c5.0.1.2374 and later... • https://www.qnap.com/en/security-advisory/qsa-23-10 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •

CVSS: 3.3EPSS: 0%CPEs: 18EXPL: 0

CVE-2022-27597 – QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)

https://notcve.org/view.php?id=CVE-2022-27597

29 Mar 2023 — A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances) We have already fixed the vulnerability in the following versions: QTS 5.0.1.2346 build 20230322 and later QuTS hero h5.0.1.2348 build 20230324 and later • https://www.qnap.com/en/security-advisory/qsa-23-06 • CWE-125: Out-of-bounds Read CWE-489: Active Debug Code CWE-1295: Debug Messages Revealing Unnecessary Information •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2022-27588 – Vulnerability in QVR

https://notcve.org/view.php?id=CVE-2022-27588

05 May 2022 — We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later Ya hemos corregido esta vulnerabilidad en las siguientes versiones de QVR: QVR 5.1.6 build 20220401 y posteriores • https://www.qnap.com/en/security-advisory/qsa-22-07 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •

CVSS: 9.8EPSS: 1%CPEs: 3EXPL: 0

CVE-2021-38692 – Stack Overflow Vulnerability in QVR Elite, QVR Pro and QVR Guard

https://notcve.org/view.php?id=CVE-2021-38692

14 Jan 2022 — A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QVR Elite, QVR Pro, QVR Guard: QuTS hero h5.0.0: QVR Elite 2.1.4.0 (2021/12/06) and later QuTS hero h4.5.4: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 5.0.0: QVR Elite 2.1.4.0 (2021/12/06) and later QTS 4.5.4: QVR Elite 2.1.4.0 (2021/12/06) and l... • https://www.qnap.com/en/security-advisory/qsa-21-59 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') CWE-787: Out-of-bounds Write •