Nas Proxy Server
Approved changes feed: RSS · Atom
cpe:2.3:a:qnap:nas_proxy_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Nas Proxy Server (9eb0c7e3-d9f2-577a-a38a-e3a92a02b057) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-34361 |
vulnerable | 2026-06-08 05:32:13.081377 |
Reflected XSS Vulnerability in Proxy Server
MEDIUM (5.3)
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later
Published: 2022-02-25T06:10:12.550Z
Updated: 2024-09-16T17:49:13.144Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34360 |
vulnerable | 2026-06-08 05:32:13.078449 |
CSRF Bypass in Proxy Server
MEDIUM (5.3)
A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later QuTS hero h5.0.0: Proxy Server 1.4.3 ( 2022/01/18 ) and later QuTScloud c4.5.6: Proxy Server 1.4.2 ( 2021/12/30 ) and later
Published: 2022-05-26T07:20:10.040Z
Updated: 2024-09-16T19:56:08.910Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34359 |
vulnerable | 2026-06-08 05:32:13.077877 |
Stored XSS Vulnerability in Proxy Server
MEDIUM (6.9)
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later
Published: 2022-02-25T06:10:10.788Z
Updated: 2024-09-17T01:12:01.133Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7639 |
vulnerable | 2026-06-08 05:09:56.689207 |
Details available
QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of Proxy Server.
Published: 2018-06-05T21:00:00.000Z
Updated: 2024-08-05T16:12:27.874Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7637 |
vulnerable | 2026-06-08 05:09:56.688540 |
Details available
QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges.
Published: 2018-06-05T21:00:00.000Z
Updated: 2024-08-05T16:12:27.739Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7636 |
vulnerable | 2026-06-08 05:09:56.688223 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7635 |
vulnerable | 2026-06-08 05:09:56.687821 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.