NA - CVE-2024-53694 - A time-of-check time-of-use (TOCTOU) race...
A time-of-check time-of-use (TOCTOU) race condition vulnerability has been reported to affect several product versions. If exploited, the vulnerability could allow local attackers who have gained...
NA - CVE-2024-53695 - A buffer overflow vulnerability has been...
A buffer overflow vulnerability has been reported to affect HBS 3 Hybrid Backup Sync. If exploited, the vulnerability could allow remote attackers to modify memory or crash processes. We have...
NA - CVE-2024-53696 - A server-side request forgery (SSRF)...
A server-side request forgery (SSRF) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers who have gained administrator access to...
NA - CVE-2024-53697 - An out-of-bounds write vulnerability has been...
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator...
NA - CVE-2024-53698 - A double free vulnerability has been reported...
A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to...
NA - CVE-2024-53699 - An out-of-bounds write vulnerability has been...
An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator...
NA - CVE-2024-53700 - A command injection vulnerability has been...
A command injection vulnerability has been reported to affect QHora. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary...
High - CVE-2025-0162 - IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is...
IBM Aspera Shares 1.9.9 through 1.10.0 PL7 is vulnerable to an XML external entity injection (XXE) attack when processing XML data. A remote authenticated attacker could exploit this vulnerability...
NA - CVE-2025-27604 - XWiki Confluence Migrator Pro helps admins to...
XWiki Confluence Migrator Pro helps admins to import confluence packages into their XWiki instance. The homepage of the application is public which enables a guest to download the package which...
NA - CVE-2025-27607 - Python JSON Logger is a JSON Formatter for...
Python JSON Logger is a JSON Formatter for Python Logging. Between 30 December 2024 and 4 March 2025 Python JSON Logger was vulnerable to RCE through a missing dependency. This occurred because...