Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:download_station:5.10.0.291:*:*:*:*:*:*:*

part: a version: 5.10.0.291 update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductDownload Station (fb6df598-41fc-584d-910c-c762ebb6b862)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:gem/qnap-download_station purl2cpe 2026-06-01 10:16:27.294183
pkg:github/cyclotron3k/qnap-download_station purl2cpe 2026-06-01 10:16:27.294184

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58465 vulnerable 2026-06-08 07:35:18.340177 Download Station
A cross-site scripting (XSS) vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: Download Station 5.10.0.305 ( 2025/09/16 ) and later Download Station 5.10.0.304 ( 2025/09/08 ) and later
Published: 2025-11-07T15:09:31.301Z
Updated: 2025-11-07T15:47:03.235Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58463 vulnerable 2026-06-08 07:35:18.325235 Download Station
A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following versions: Download Station 5.10.0.305 ( 2025/09/16 ) and later Download Station 5.10.0.304 ( 2025/09/08 ) and later
Published: 2025-11-07T15:10:42.856Z
Updated: 2025-11-07T16:11:30.915Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.