CVE Vulnerability Catalog

Qsync Central contains a NULL pointer dereference vulnerability. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

Qsync Central contains a NULL pointer dereference vulnerability. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

Qsync Central contains an allocation of resources without limits or throttling vulnerability. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

Qsync Central contains an allocation of resources without limits or throttling vulnerability. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

A vulnerability involving allocation of resources without limits or throttling has been reported in File Station 5. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

A vulnerability involving allocation of resources without limits or throttling has been reported in File Station 5. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

An uncontrolled resource consumption vulnerability has been reported in Qsync Central. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A vulnerability involving allocation of resources without limits or throttling has been reported in File Station 5. A remote attacker with a user account can exploit it to prevent other systems, applications, or processes from accessing the same type of resource.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability affects several QNAP operating system versions. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack. Fixes are available in QTS 5.2.5.3145 and QuTS hero h5.2.5.3138.

A security flaw was found in code-projects Simple Grading System 1.0 in /add_student_grade.php of the Admin Panel. Manipulating the Add argument results in SQL injection, exploitable remotely.

A vulnerability was identified in code-projects Simple Grading System 1.0 in /edit_account.php of the Admin Panel. Manipulating the ID argument leads to SQL injection, exploitable remotely.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A NULL pointer dereference vulnerability has been reported in File Station 5. A remote attacker with a user account can exploit it to launch a denial-of-service (DoS) attack.

A cross-site scripting (XSS) vulnerability affects several QNAP operating system versions. If a remote attacker gains an administrator account, they can exploit it to bypass security mechanisms or read application data.

A cross-site scripting (XSS) vulnerability has been reported in Photo Station. A remote attacker with a user account can exploit it to bypass security mechanisms or read application data. The issue is fixed in Photo Station 6.4.5 (2025/01/02) and later.