GCVE - cpe:2.3:a:qnap:qvr:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:qvr:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Qnap (`a402dda4-b7da-50eb-b0f8-700e564ee87d`)
Product	Qvr (`7c4acc0d-cd5c-5bfa-a443-8220a46d33cc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-52856`	vulnerable	2026-06-08 07:31:13.056875	VioStor An improper authentication vulnerability has been reported to affect VioStor. If a remote attacker, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: VioStor 5.1.6 build 20250621 and later Published: 2025-08-29T17:17:20.562Z Updated: 2026-02-26T17:47:47.567Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-25-29	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-27588`	vulnerable	2026-06-08 05:42:42.418979	Vulnerability in QVR CRITICAL (9.8) We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and later Published: 2022-05-05T16:50:30.497Z Updated: 2024-09-16T20:21:49.914Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-22-07	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38686`	vulnerable	2026-06-08 05:33:48.299978	Improper Authentication Vulnerability in VioStor HIGH (8.8) An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later Published: 2021-11-26T14:00:14.527Z Updated: 2024-09-16T20:16:15.429Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-21-52	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-38685`	vulnerable	2026-06-08 05:33:48.299529	Command Injection Vulnerability in VioStor CRITICAL (9.8) A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR FW 5.1.6 build 20211109 and later Published: 2021-11-26T14:00:13.130Z Updated: 2024-09-17T02:46:41.057Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-21-51	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34352`	vulnerable	2026-06-08 05:32:13.067012	Command Injection Vulnerability in QVR HIGH (7.2) A command injection vulnerability has been reported to affect QNAP device running QVR. If exploited, this vulnerability could allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.5 build 20210902 and later Published: 2021-10-01T02:50:14.803Z Updated: 2024-09-17T00:01:13.681Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-21-38	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34351`	vulnerable	2026-06-08 05:32:13.066667	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34349`	vulnerable	2026-06-08 05:32:13.066295	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-34348`	vulnerable	2026-06-08 05:32:13.065821	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.