Nas Proxy Server (Qnap) - vulnerabilities (CVEs)
7 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2022-05-26. Vendor: Qnap.
CVEs of Nas Proxy Server
- CVE-2021-34360 - CVSS 8.8 (high), 2022-05-26: A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote…
- CVE-2021-34359 - CVSS 6.9 (medium), 2022-02-25: A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote…
- CVE-2021-34361 - CVSS 6.1 (medium), 2022-02-25: A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote…
- CVE-2017-7636 - CVSS 6.1 (medium), 2018-06-05: Cross-site scripting (XSS) vulnerability in QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to inject arbitrary web script or…
- CVE-2017-7635 - CVSS 8.8 (high), 2018-06-05: QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections.
- CVE-2017-7639 - CVSS 5.3 (medium), 2018-06-05: QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of…
- CVE-2017-7637 - CVSS 9.8 (critical), 2018-06-05: QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges.