cbcvebase.

Qnap Q Center Virtual Appliance vulnerabilities

7 known vulnerabilities affecting qnap/q_center_virtual_appliance.

Total CVEs
7
CISA KEV
0
Public exploits
5
Exploited in wild
0
Severity breakdown
HIGH5MEDIUM2

Vulnerabilities

Page 1 of 1
CVE-2018-0706P2HIGHCVSS 8.8PoCv1.7.1063 and earlier2018-07-17
CVE-2018-0706 [HIGH] CVE-2018-0706: Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier coul Exposure of Private Information in QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to access sensitive information.
nvd
CVE-2018-0708P2HIGHCVSS 8.8PoCv1.7.1063 and earlier2018-07-17
CVE-2018-0708 [HIGH] CWE-78 CVE-2018-0708: Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 an Command injection vulnerability in networking of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
nvd
CVE-2018-0707P2HIGHCVSS 7.2PoCv1.7.1063 and earlier2018-07-17
CVE-2018-0707 [HIGH] CWE-78 CVE-2018-0707: Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.10 Command injection vulnerability in change password of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
nvd
CVE-2018-0710P2HIGHCVSS 8.8PoCv1.7.1063 and earlier2018-07-17
CVE-2018-0710 [HIGH] CWE-78 CVE-2018-0710: Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earli Command injection vulnerability in SSH of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
nvd
CVE-2018-0709P2HIGHCVSS 8.8PoCv1.7.1063 and earlier2018-07-17
CVE-2018-0709 [HIGH] CWE-78 CVE-2018-0709: Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earl Command injection vulnerability in date of QNAP Q'center Virtual Appliance version 1.7.1063 and earlier could allow authenticated users to run arbitrary commands.
nvd
CVE-2018-0724P4MEDIUMCVSS 6.1≤ 1.8.10142018-12-26
CVE-2018-0724 [MEDIUM] CVE-2018-0724: Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723.
nvd
CVE-2018-0723P4MEDIUMCVSS 6.1≤ 1.8.1014vQ'center Virtual Appliance 1.8.1014 and earlier versions2018-12-26
CVE-2018-0723 [MEDIUM] CWE-79 CVE-2018-0723: Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724.
nvd