Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:qulog_center:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQulog Center (eb270e70-8af1-5693-88af-a5e726c517ab)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-58469 vulnerable 2026-06-08 07:35:18.397622 QuLog Center
A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following version: QuLog Center 1.8.2.927 ( 2025/09/17 ) and later
Published: 2025-11-07T15:08:56.159Z
Updated: 2025-11-07T15:48:30.618Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54168 vulnerable 2026-06-08 07:33:11.733208 QuLog Center
A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuLog Center 1.8.2.923 ( 2025/08/27 ) and later
Published: 2025-11-07T15:12:10.966Z
Updated: 2025-11-07T15:57:21.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-53696 vulnerable 2026-06-08 06:54:15.322308 QuLog Center
A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who have gained administrator access to read application data. We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.829 ( 2024/10/01 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later QTS 4.5.4.2957 build 20241119 and later QuTS hero h4.5.4.2956 build 20241119 and later
Published: 2025-03-07T16:13:55.595Z
Updated: 2025-03-07T17:54:11.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48862 vulnerable 2026-06-08 06:50:10.313133 QuLog Center
A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed the vulnerability in the following versions: QuLog Center 1.7.0.831 ( 2024/10/15 ) and later QuLog Center 1.8.0.888 ( 2024/10/15 ) and later
Published: 2024-11-22T15:31:54.450Z
Updated: 2024-11-22T16:47:06.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32762 vulnerable 2026-06-08 06:37:23.863458 QuLog Center
HIGH (8.2)
A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QuLog Center 1.8.0.872 ( 2024/06/17 ) and later QuLog Center 1.7.0.827 ( 2024/06/17 ) and later
Published: 2024-09-06T16:27:22.225Z
Updated: 2024-09-06T17:32:52.859Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23357 vulnerable 2026-06-08 05:54:28.156334 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23354 vulnerable 2026-06-08 05:54:28.126698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36196 vulnerable 2026-06-08 05:25:02.743875 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.