CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-27588 – Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2022-27588
05 May 2022 — We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later Ya hemos corregido esta vulnerabilidad en las siguientes versiones de QVR: QVR 5.1.6 build 20220401 y posteriores • https://www.qnap.com/en/security-advisory/qsa-22-07 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2021-38686 – Improper Authentication Vulnerability in VioStor
https://notcve.org/view.php?id=CVE-2021-38686
26 Nov 2021 — An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later Se ha informado de una vulnerabilidad de autenticación inapropiada que afecta al dispositivo de QNAP, VioStor. Si es explotada, esta vulnerabilidad permite a atacantes comprometer la seguridad del sistema. Ya hemos c... • https://www.qnap.com/en/security-advisory/qsa-21-52 • CWE-287: Improper Authentication •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2021-38685 – Command Injection Vulnerability in VioStor
https://notcve.org/view.php?id=CVE-2021-38685
26 Nov 2021 — A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP, VioStor. Si es explotada, esta vulnerabilidad permite a atacantes remotos ejecutar comandos arbitrarios. Ya hemos corregido esta vuln... • https://www.qnap.com/en/security-advisory/qsa-21-51 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 4%CPEs: 1EXPL: 0CVE-2021-34352 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34352
01 Oct 2021 — A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210902 and later Se ha reportado una vulnerabilidad de inyección de comandos que afecta al dispositivo QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos corre... • https://www.qnap.com/en/security-advisory/qsa-21-38 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2021-34351 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34351
27 Sep 2021 — A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos... • https://www.qnap.com/en/security-advisory/qsa-21-35 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 7.2EPSS: 1%CPEs: 1EXPL: 0CVE-2021-34349 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34349
27 Sep 2021 — A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos... • https://www.qnap.com/en/security-advisory/qsa-21-35 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.8EPSS: 1%CPEs: 1EXPL: 0CVE-2021-34348 – Command Injection Vulnerability in QVR
https://notcve.org/view.php?id=CVE-2021-34348
27 Sep 2021 — A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210803 and later Se ha informado de una vulnerabilidad de inyección de comandos que afecta al dispositivo de QNAP que ejecuta QVR. Si es explotado, esta vulnerabilidad podría permitir a atacantes remotos ejecutar comandos arbitrarios. Ya hemos... • https://www.qnap.com/en/security-advisory/qsa-21-35 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •