Qsync Central vulnerabilities
20 known vulnerabilities in Qsync Central from QNAP. 20 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Qsync Central: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the
- 8.1 High severity
Qsync Central: Heap-based Buffer Overflow
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version:
- 8.1 High severity
Qsync Central: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version:
- 8.1 High severity
Qsync Central: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version:
- 8.1 High severity
Qsync Central: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version:
- 8.1 High severity
Qsync Central: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version:
- 8.1 High severity
Qsync Central: Buffer Copy without Checking Size of Input
A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version:
- 8.8 High severity
Qsync Central: Out-of-bounds Write
An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: Qs
- 8.1 High severity
Qsync Central: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to obtain secret data or modify memory. We have already fixed the vulnerabi
- 8.8 High severity
Qsync Central: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following vers
- 8.8 High severity
Qsync Central: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following vers
- 8.8 High severity
Qsync Central: Out-of-bounds Write
An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to modify or corrupt memory. We have already fixed the vulnerability in the following version: Qs
- 8.8 High severity
Qsync Central: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in
- 8.8 High severity
Qsync Central: Improper Certificate Validation
An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in
- 8.8 High severity
Qsync Central: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following vers
- 8.8 High severity
Qsync Central: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following vers
- 8.8 High severity
Qsync Central: Improper Neutralization of Special Elements used in an SQL Command
An SQL injection vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to execute unauthorized code or commands. We have already fixed the vulnerability in the followin
- 8.1 High severity
Qsync Central: Use of Externally-Controlled Format String
A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to obtain secret data or modify memory. We have already fixed the vul
- 8.8 High severity
Qsync Central: Improper Link Resolution Before File Access
A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in t
- 8.1 High severity
Qsync Central: Incorrect Permission Assignment for Critical Resource
An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerabil