Qsync Central (Qnap Systems Inc.) - vulnerabilities (CVEs)
68 CVEs, 6 in the last 30 days, 2 known versions, newest CVE from 2026-10-15. Vendor: Qnap Systems Inc..
CVEs of Qsync Central
- CVE-2026-41541 - CVSS 5.3 (medium), 2026-10-15: An unix symbolic link (symlink) following vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then…
- CVE-2026-26243 - CVSS 7.2 (high), 2026-10-15: A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2026-24718 - CVSS 5.3 (medium), 2026-10-15: A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-29897 - CVSS 2.3 (low), 2026-10-15: A buffer copy without checking size of input vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then…
- CVE-2025-29896 - CVSS 2.3 (low), 2026-10-15: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-29895 - CVSS 2.3 (low), 2026-10-15: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-68406 - CVSS 6.5 (medium), 2026-02-11: A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-58472 - CVSS 4.9 (medium), 2026-02-11: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator account, they can then exploit…
- CVE-2025-57711 - CVSS 4.9 (medium), 2026-02-11: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator…
- CVE-2025-58471 - CVSS 4.9 (medium), 2026-02-11: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator…
- CVE-2025-57710 - CVSS 4.9 (medium), 2026-02-11: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains an administrator…
- CVE-2025-58470 - CVSS 6.5 (medium), 2026-02-11: A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-58467 - CVSS 6.5 (medium), 2026-02-11: A relative path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-57708 - CVSS 6.5 (medium), 2026-02-11: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account,…
- CVE-2025-54170 - CVSS 6.5 (medium), 2026-02-11: An out-of-bounds read vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-57709 - CVSS 8.1 (high), 2026-02-11: A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-54148 - CVSS 6.5 (medium), 2026-02-11: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-54151 - CVSS 5.5 (medium), 2026-02-11: An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit…
- CVE-2025-54150 - CVSS 5.5 (medium), 2026-02-11: An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit…
- CVE-2025-54149 - CVSS 5.5 (medium), 2026-02-11: An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a local attacker gains a user account, they can then exploit…
- CVE-2025-54152 - CVSS 6.5 (medium), 2026-02-11: A use of out-of-range pointer offset vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit…
- CVE-2025-53598 - CVSS 6.5 (medium), 2026-02-11: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-52870 - CVSS 8.1 (high), 2026-02-11: A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-54147 - CVSS 6.5 (medium), 2026-02-11: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-52869 - CVSS 8.1 (high), 2026-02-11: A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-54146 - CVSS 6.5 (medium), 2026-02-11: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-52868 - CVSS 8.1 (high), 2026-02-11: A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-47209 - CVSS 6.5 (medium), 2026-02-11: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-48724 - CVSS 8.1 (high), 2026-02-11: A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-30276 - CVSS 8.8 (high), 2026-02-11: An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-48723 - CVSS 8.1 (high), 2026-02-11: A buffer overflow vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-48722 - CVSS 6.5 (medium), 2026-02-11: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-30266 - CVSS 6.5 (medium), 2026-02-11: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-30269 - CVSS 8.1 (high), 2026-02-11: A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then…
- CVE-2025-57712 - CVSS 6.5 (medium), 2025-11-07: A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-53595 - CVSS 8.8 (high), 2025-10-03: An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-52867 - CVSS 6.5 (medium), 2025-10-03: An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit…
- CVE-2025-54153 - CVSS 8.8 (high), 2025-10-03: An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-44014 - CVSS 8.8 (high), 2025-10-03: An out-of-bounds write vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-47210 - CVSS 6.5 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-44009 - CVSS 6.5 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-44012 - CVSS 7.1 (high), 2025-10-03: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account,…
- CVE-2025-44008 - CVSS 6.5 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-44011 - CVSS 6.5 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-44010 - CVSS 6.5 (medium), 2025-10-03: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-44006 - CVSS 7.1 (high), 2025-10-03: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account,…
- CVE-2025-33040 - CVSS 7.1 (high), 2025-10-03: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account,…
- CVE-2025-44007 - CVSS 7.1 (high), 2025-10-03: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account,…
- CVE-2025-33034 - CVSS 6.5 (medium), 2025-10-03: A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-33039 - CVSS 7.1 (high), 2025-10-03: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account,…
- CVE-2025-33036 - CVSS 7.2 (high), 2025-08-29: A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-33033 - CVSS 7.2 (high), 2025-08-29: A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-33038 - CVSS 7.2 (high), 2025-08-29: A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-33037 - CVSS 7.2 (high), 2025-08-29: A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-30277 - CVSS 8.8 (high), 2025-08-29: An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit…
- CVE-2025-30275 - CVSS 6.5 (medium), 2025-08-29: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-30278 - CVSS 8.8 (high), 2025-08-29: An improper certificate validation vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit…
- CVE-2025-30263 - CVSS 6.5 (medium), 2025-08-29: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-30261 - CVSS 7.1 (high), 2025-08-29: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account,…
- CVE-2025-30260 - CVSS 7.1 (high), 2025-08-29: An allocation of resources without limits or throttling vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account,…
- CVE-2025-30262 - CVSS 6.5 (medium), 2025-08-29: A NULL pointer dereference vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the…
- CVE-2025-29894 - CVSS 8.8 (high), 2025-08-29: An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-29893 - CVSS 8.8 (high), 2025-08-29: An SQL injection vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability…
- CVE-2025-29898 - CVSS 6.5 (medium), 2025-08-29: An uncontrolled resource consumption vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit…
- CVE-2025-29892 - CVSS 8.8 (high), 2025-06-06: An SQL injection vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user…
- CVE-2025-22482 - CVSS 8.1 (high), 2025-06-06: A use of externally-controlled format string vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote…
- CVE-2024-50404 - CVSS 8.8 (high), 2024-12-06: A link following vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow remote attackers who have gained user…
- CVE-2023-47564 - CVSS 8.1 (high), 2024-02-02: An incorrect permission assignment for critical resource vulnerability has been reported to affect Qsync Central. If exploited, the vulnerability could allow…