Vulnerabilities (CVE)

Filtered by vendor Qnap Subscribe
Filtered by product Qulog Center
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2025-54168 1 Qnap 1 Qulog Center 2025-11-14 N/A 4.8 MEDIUM
A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If a remote attacker gains an administrator account, they can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QuLog Center 1.8.2.923 ( 2025/08/27 ) and later
CVE-2025-58469 1 Qnap 1 Qulog Center 2025-11-14 N/A 8.8 HIGH
A cross-site request forgery (CSRF) vulnerability has been reported to affect QuLog Center. The remote attackers can then exploit the vulnerability to gain privileges or hijack user identities. We have already fixed the vulnerability in the following version: QuLog Center 1.8.2.927 ( 2025/09/17 ) and later
CVE-2020-36196 1 Qnap 1 Qulog Center 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
A stored XSS vulnerability has been reported to affect QNAP NAS running QuLog Center. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QuLog Center versions prior to 1.2.0.
CVE-2024-32762 1 Qnap 1 Qulog Center 2024-09-13 N/A 6.1 MEDIUM
A cross-site scripting (XSS) vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QuLog Center 1.8.0.872 ( 2024/06/17 ) and later QuLog Center 1.7.0.827 ( 2024/06/17 ) and later