Download Station (Qnap) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 45 known versions, newest CVE from 2025-11-07. Vendor: Qnap.

CVEs of Download Station

• CVE-2025-58465 - CVSS 5.4 (medium), 2025-11-07: A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the…
• CVE-2025-58463 - CVSS 4.9 (medium), 2025-11-07: A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then…
• CVE-2024-38640 - CVSS 7 (high), 2024-09-06: A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If exploited, the vulnerability could allow authenticated users to…