Approved changes feed: RSS · Atom
cpe:2.3:h:qnap:nas:-:*:*:*:*:*:*:*
part: h version: - update: *
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Nas (0699c901-d0fc-5bdd-a3aa-06e90e6cd346) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-38681 |
not_vulnerable | 2026-06-08 05:33:48.289144 |
Reflected XSS Vulnerability in Ragic Cloud DB
MEDIUM (5.3)
A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security patch from Ragic.
Published: 2021-11-20T01:05:12.456Z
Updated: 2024-09-16T22:30:22.100Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-38675 |
not_vulnerable | 2026-06-08 05:33:48.281680 |
Stored XSS Vulnerability in Image2PDF
MEDIUM (5.4)
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Image2PDF: Image2PDF 2.1.5 ( 2021/08/17 ) and later
Published: 2021-10-01T02:50:20.876Z
Updated: 2024-09-16T20:26:41.162Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34358 |
not_vulnerable | 2026-06-08 05:32:13.075475 |
CSRF Vulnerability in QmailAgent
MEDIUM (6.8)
We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later
Published: 2021-11-20T01:05:10.468Z
Updated: 2024-09-17T02:15:40.190Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34357 |
not_vulnerable | 2026-06-08 05:32:13.075022 |
Reflected XSS Vulnerability in QmailAgent
MEDIUM (6.9)
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QmailAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later
Published: 2021-11-13T00:50:10.221Z
Updated: 2024-09-17T02:15:40.656Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34356 |
not_vulnerable | 2026-06-08 05:32:13.072041 |
Stored XSS Vulnerability in Photo Station
HIGH (7.6)
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Photo Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Photo Station: Photo Station 6.0.18 ( 2021/09/01 ) and later
Published: 2021-10-01T02:50:19.306Z
Updated: 2024-09-16T16:52:47.065Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34355 |
not_vulnerable | 2026-06-08 05:32:13.071648 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34354 |
not_vulnerable | 2026-06-08 05:32:13.071026 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-28797 |
not_vulnerable | 2026-06-08 05:31:24.878774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-2501 |
not_vulnerable | 2026-06-08 05:24:59.331337 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0143 |
vulnerable | 2026-06-08 05:03:01.820129 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0142 |
vulnerable | 2026-06-08 05:03:01.819662 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.