Approved changes feed: RSS · Atom

cpe:2.3:a:qnap_systems_inc.:qumagie:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorQnap Systems Inc. (1f66ac1e-0889-51bf-b27f-24c7175e5920)
ProductQumagie (2fe6f95c-d54b-5e8b-8001-e93b0252eb93)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-62857 vulnerable 2026-06-03 15:09:35.528583 QuMagie
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later
Published: 2026-01-02T14:51:49.742Z
Updated: 2026-01-05T20:39:30.363Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58464 vulnerable 2026-06-03 15:06:21.713283 QuMagie
A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.7.3 and later
Published: 2025-11-07T15:10:10.396Z
Updated: 2025-11-07T16:11:39.344Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52425 vulnerable 2026-06-03 15:01:59.169146 QuMagie
An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later
Published: 2025-11-07T15:15:57.937Z
Updated: 2025-11-07T15:55:26.440Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38642 vulnerable 2026-06-03 14:56:19.190145 QuMagie
An improper certificate validation vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow local network users to compromise the security of the system via unspecified vectors. We have already fixed the vulnerability in the following version: QuMagie 2.3.1 and later
Published: 2024-09-06T16:29:44.378Z
Updated: 2024-09-06T16:58:21.953Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47560 vulnerable 2026-06-03 14:53:17.655329 QuMagie
HIGH (7.4)
An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later
Published: 2024-01-05T16:18:17.856Z
Updated: 2025-06-17T20:29:12.638Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47559 vulnerable 2026-06-03 14:53:17.654915 QuMagie
MEDIUM (5.5)
A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later
Published: 2024-01-05T16:18:24.533Z
Updated: 2025-06-03T14:41:30.597Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47219 vulnerable 2026-06-03 14:53:17.206852 QuMagie
LOW (3.5)
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.2.1 and later
Published: 2024-01-05T16:18:32.213Z
Updated: 2025-04-17T18:12:53.814Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41285 vulnerable 2026-06-03 14:52:51.552168 QuMagie
HIGH (7.4)
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later
Published: 2023-11-10T16:02:06.812Z
Updated: 2024-09-03T17:33:49.118Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41284 vulnerable 2026-06-03 14:52:51.551126 QuMagie
HIGH (7.4)
A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later
Published: 2023-11-10T16:01:54.206Z
Updated: 2024-09-03T17:34:52.723Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39295 vulnerable 2026-06-03 14:52:38.546443 QuMagie
HIGH (8.8)
An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.3 and later
Published: 2023-11-10T16:01:44.438Z
Updated: 2024-09-03T17:35:42.394Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.