Qnap Nas Proxy Server
7 CVEs affecting Qnap Nas Proxy Server. Latest disclosed: 2022-05-26. Critical: 1, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-7637 | Critical | 9.8 | 2018-06-05 | QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to run arbitrary OS commands against the system with root privileges. |
CVE-2017-7635 | High | 8.8 | 2018-06-05 | QNAP NAS application Proxy Server through version 1.2.0 does not utilize CSRF protections. |
CVE-2021-34359 | Medium | 6.9 | 2022-02-25 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attacke… |
CVE-2017-7636 | Medium | 6.1 | 2018-06-05 | Cross-site scripting (XSS) vulnerability in QNAP NAS application Proxy Server through version 1.2.0 allows remote attackers to inject arbitrary web script or H… |
CVE-2021-34360 | Medium | 5.3 | 2022-05-26 | A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote… |
CVE-2021-34361 | Medium | 5.3 | 2022-02-25 | A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attacke… |
CVE-2017-7639 | Medium | 5.3 | 2018-06-05 | QNAP NAS application Proxy Server through version 1.2.0 does not authenticate requests properly. Successful exploitation can lead to change of the settings of… |