Known vulnerabilities in Qsync Central

Software: Qsync Central
Software CPE: cpe:2.3:a:qnap_systems:qsync_central:*:*:*:*:*:*:*:*
Total vulnerabilities: 34
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Qsync Central Qsync Central is affected by 34 known vulnerabilities: 33 medium, 1 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU118215 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-57712
CWE-22 Medium
No
No
5.0.0.3 10.11.2025 SB2025111042
#VU116630 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-54153
CWE-89 Medium
No
No
5.0.0.2 06.10.2025 SB2025100645
#VU116629 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-53595
CWE-89 Medium
No
No
5.0.0.2 06.10.2025 SB2025100645
#VU116628 - Resource exhaustion
CVE-2025-52867
CWE-400 Medium
No
No
5.0.0.2 06.10.2025 SB2025100645
#VU116627 - NULL Pointer Dereference
CVE-2025-47210
CWE-476 Medium
No
No
5.0.0.2 06.10.2025 SB2025100645
#VU116626 - Allocation of Resources Without Limits or Throttling
CVE-2025-44012
CWE-770 Medium
No
No
5.0.0.2 06.10.2025 SB2025100645
#VU116625 - Out-of-bounds write
CVE-2025-44014
CWE-787 Medium
No
No
5.0.0.1 06.10.2025 SB2025100642
#VU116624 - NULL Pointer Dereference
CVE-2025-44011
CWE-476 Medium
No
No
5.0.0.1 06.10.2025 SB2025100642
#VU116621 - NULL Pointer Dereference
CVE-2025-44010
CWE-476 Medium
No
No
5.0.0.1 06.10.2025 SB2025100642
#VU116620 - NULL Pointer Dereference
CVE-2025-44009
CWE-476 Medium
No
No
5.0.0.1 06.10.2025 SB2025100642
#VU116618 - NULL Pointer Dereference
CVE-2025-44008
CWE-476 Medium
No
No
5.0.0.1 06.10.2025 SB2025100642
#VU116617 - Allocation of Resources Without Limits or Throttling
CVE-2025-44007
CWE-770 Medium
No
No
5.0.0.1 06.10.2025 SB2025100642
#VU116616 - Allocation of Resources Without Limits or Throttling
CVE-2025-44006
CWE-770 Medium
No
No
5.0.0.1 06.10.2025 SB2025100642
#VU116613 - Allocation of Resources Without Limits or Throttling
CVE-2025-33040
CWE-770 Medium
No
No
5.0.0.1 06.10.2025 SB2025100642
#VU116611 - Allocation of Resources Without Limits or Throttling
CVE-2025-33039
CWE-770 Medium
No
No
5.0.0.1 06.10.2025 SB2025100642
#VU116610 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-33034
CWE-22 Medium
No
No
5.0.0.1 06.10.2025 SB2025100642
#VU114659 - NULL Pointer Dereference
CVE-2025-30263
CWE-476 Medium
No
No
5.0.0.0 02.09.2025 SB2025090221
#VU114658 - NULL Pointer Dereference
CVE-2025-30262
CWE-476 Medium
No
No
5.0.0.0 02.09.2025 SB2025090221
#VU114657 - Allocation of Resources Without Limits or Throttling
CVE-2025-30261
CWE-770 Medium
No
No
5.0.0.0 02.09.2025 SB2025090221
#VU114596 - Improper Certificate Validation
CVE-2025-30277
CWE-295 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121


Showing elements 1 - 20 out of 34