Known vulnerabilities in Qsync Central - page 2

Software: Qsync Central
Software CPE: cpe:2.3:a:qnap_systems:qsync_central:*:*:*:*:*:*:*:*
Total vulnerabilities: 34
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Qsync Central Qsync Central is affected by 34 known vulnerabilities: 33 medium, 1 low Critical High Medium Low

Vulnerabilities (34)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114601 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-33038
CWE-22 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121
#VU114600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-33037
CWE-22 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121
#VU114599 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-33036
CWE-22 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121
#VU114598 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-33033
CWE-22 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121
#VU114597 - Improper Certificate Validation
CVE-2025-30278
CWE-295 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121
#VU114595 - NULL Pointer Dereference
CVE-2025-30275
CWE-476 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121
#VU114594 - Allocation of Resources Without Limits or Throttling
CVE-2025-30260
CWE-770 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121
#VU114593 - Resource exhaustion
CVE-2025-29898
CWE-400 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121
#VU114592 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-29894
CWE-89 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121
#VU114591 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-29893
CWE-89 Medium
No
No
4.5.0.7 01.09.2025 SB2025090121
#VU110669 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2025-29892
CWE-89 Medium
No
No
4.5.0.6 09.06.2025 SB2025060951
#VU110668 - Use of Externally-Controlled Format String
CVE-2025-22482
CWE-134 Low
No
No
4.5.0.6 09.06.2025 SB2025060951
#VU101338 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-50404
CWE-59 Medium
Available
No
4.4.0.16_20240819 09.12.2024 SB2024120903
#VU86056 - Incorrect Permission Assignment for Critical Resource
CVE-2023-47564
CWE-732 Medium
No
No
4.3.0.11, 4.4.0.15 05.02.2024 SB2024020511


Showing elements 21 - 40 out of 34