CVE Vulnerability Catalog

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. An attacker can exploit the vulnerability to launch a denial-of-service (DoS) attack. It has been fixed in QTS 5.2.5.3145 build 20250526 and later, and QuTS hero h5.2.5.3138 build 20250519 and later.

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. Fixed in QTS 5.2.5.3145 and QuTS hero h5.2.5.3138.

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to launch a denial-of-service (DoS) attack. Fixed in QTS 5.2.5.3145 and QuTS hero h5.2.5.3138.

A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains a user account, they can then exploit the vulnerability to modify memory or crash processes. Fixed in QTS 5.2.5.3145 and QuTS hero h5.2.5.3138.

Qsync Central contains a NULL pointer dereference vulnerability. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

Qsync Central contains a NULL pointer dereference vulnerability. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

Qsync Central contains an allocation of resources without limits or throttling vulnerability. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

Qsync Central contains an allocation of resources without limits or throttling vulnerability. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

A vulnerability involving allocation of resources without limits or throttling has been reported in File Station 5. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

A vulnerability involving allocation of resources without limits or throttling has been reported in File Station 5. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

An uncontrolled resource consumption vulnerability has been reported in Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A vulnerability involving allocation of resources without limits or throttling has been reported in File Station 5. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack. Fixes are available in QTS 5.2.5.3145 and QuTS hero h5.2.5.3138.

A security flaw was found in code-projects Simple Grading System 1.0 in /add_student_grade.php of the Admin Panel. Manipulating the Add argument results in SQL injection, exploitable remotely.

A vulnerability was identified in code-projects Simple Grading System 1.0 in /edit_account.php of the Admin Panel. Manipulating the ID argument leads to SQL injection, exploitable remotely.