Qnap Q\'Center Virtual Appliance vulnerabilities

7 vulnerabilities

Known vulnerabilities in Qnap Q\'Center Virtual Appliance, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.1CVE-2018-0724qnapq\'center_virtual_appliance
EPSS score
0.77%
Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723.
9CVE-2018-0710qnapq\'center+1
EPSS score
14.06%
Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
9CVE-2018-0707qnapq\'center+1
EPSS score
58.80%
Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
9CVE-2018-0708qnapq\'center+1
EPSS score
26.03%
Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
8.8CVE-2018-0706qnapq\'center+1
EPSS score
48.25%
Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information.
9CVE-2018-0709qnapq\'center+1
EPSS score
13.45%
Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
6.1CVE-2018-0723qnapq\'center_virtual_appliance
EPSS score
0.77%
Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724.