Qnap

Qulog Center

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.8

CVE-2025-54168

Medienbericht
  • EPSS 0.08%
  • Veröffentlicht 07.11.2025 15:12:10
  • Zuletzt bearbeitet 14.11.2025 20:13:07

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already...

8.8

CVE-2025-58469

Medienbericht
  • EPSS 0.06%
  • Veröffentlicht 07.11.2025 15:08:56
  • Zuletzt bearbeitet 14.11.2025 18:22:24

A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the followin...

4.9

CVE-2024-53696

  • EPSS 0.09%
  • Veröffentlicht 07.03.2025 17:15:20
  • Zuletzt bearbeitet 06.12.2025 00:34:08

A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read application data. We have already fixed the vulner...

4.8

CVE-2023-23357

  • EPSS 0.13%
  • Veröffentlicht 19.12.2024 02:15:22
  • Zuletzt bearbeitet 19.12.2024 02:15:22

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to bypass security mechanisms or read app...

7.3

CVE-2023-23354

  • EPSS 0.1%
  • Veröffentlicht 19.12.2024 02:15:21
  • Zuletzt bearbeitet 19.12.2024 02:15:21

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application ...

9.8

CVE-2024-48862

  • EPSS 0.57%
  • Veröffentlicht 22.11.2024 16:15:28
  • Zuletzt bearbeitet 08.12.2025 19:18:50

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have...

6.1

CVE-2024-32762

  • EPSS 0.61%
  • Veröffentlicht 06.09.2024 17:15:15
  • Zuletzt bearbeitet 13.09.2024 21:10:30

A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QuLog C...

6.1

CVE-2020-36196

  • EPSS 0.29%
  • Veröffentlicht 01.07.2021 02:15:07
  • Zuletzt bearbeitet 21.11.2024 05:28:59

A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QuLog Center versions prior to 1.2.0.