GCVE - cpe:2.3:a:qnap:qumagie:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:qumagie:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Qnap (`a402dda4-b7da-50eb-b0f8-700e564ee87d`)
Product	Qumagie (`0e6466ce-5c96-5778-a111-825ec2d8e255`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-62857`	vulnerable	2026-06-08 07:39:16.870250	QuMagie A cross-site scripting (XSS) vulnerability has been reported to affect QuMagie. The remote attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuMagie 2.8.1 and later Published: 2026-01-02T14:51:49.742Z Updated: 2026-01-05T20:39:30.363Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-25-49	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58464`	vulnerable	2026-06-08 07:35:18.339740	QuMagie A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: QuMagie 2.7.3 and later Published: 2025-11-07T15:10:10.396Z Updated: 2025-11-07T16:11:39.344Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-25-43	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-52425`	vulnerable	2026-06-08 07:31:11.511270	QuMagie An SQL injection vulnerability has been reported to affect QuMagie. A remote attacker can exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QuMagie 2.7.0 and later Published: 2025-11-07T15:15:57.937Z Updated: 2025-11-07T15:55:26.440Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-25-33	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41285`	vulnerable	2026-06-08 06:11:05.834661	QuMagie HIGH (7.4) A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later Published: 2023-11-10T16:02:06.812Z Updated: 2024-09-03T17:33:49.118Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-50	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41284`	vulnerable	2026-06-08 06:11:05.834133	QuMagie HIGH (7.4) A SQL injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: QuMagie 2.1.4 and later Published: 2023-11-10T16:01:54.206Z Updated: 2024-09-03T17:34:52.723Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-23-50	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-39295`	vulnerable	2026-06-08 06:09:36.856291	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.