threat
engine
.sh
Back
·
··:··
Home
/
Product
/
qnap file station
Product
qnap file station
51 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
Sort
Newest first
Oldest first
Highest CVSS
Lowest CVSS
Min CVSS
Any
4.0+
7.0+ (High)
9.0+ (Critical)
Published since
Reset
CVE-2026-22894
>= 5.5.6.4691 and < 5.5.6.5190
A path traversal vulnerability has been reported to affect File Station 6. If a remote attacker gains a user account, they can the
6.5
MEDIUM
CVE-2025-66278
>= 5.5.6.4691 and < 5.5.6.5190
A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can the
6.5
MEDIUM
CVE-2025-62856
>= 5.5.6.4691 and < 5.5.6.5190
A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, the
4.4
MEDIUM
CVE-2025-62855
>= 5.5.6.4691 and < 5.5.6.5190
A path traversal vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator account, the
4.4
MEDIUM
CVE-2025-62854
>= 5.5.6.4691 and < 5.5.6.5190
An uncontrolled resource consumption vulnerability has been reported to affect File Station 5. If a remote attacker gains a user a
6.5
MEDIUM
CVE-2025-62853
>= 5.5.6.4691 and < 5.5.6.5190
A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can the
6.5
MEDIUM
CVE-2025-57713
>= 5.5.6.4691 and < 5.5.6.5190
A weak authentication vulnerability has been reported to affect File Station 5. The remote attackers can then exploit the vulnerab
7.5
HIGH
CVE-2025-57707
>= 5.5.6.4691 and < 5.5.6.5190
An improper neutralization of directives in statically saved code ('Static Code Injection') vulnerability has been reported to aff
8.8
HIGH
CVE-2025-54169
>= 5.5.6.4691 and < 5.5.6.5190
An out-of-bounds read vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they ca
6.5
MEDIUM
CVE-2025-54163
>= 5.5.6.4691 and < 5.5.6.5190
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator a
4.9
MEDIUM
CVE-2025-54162
>= 5.5.6.4691 and < 5.5.6.5190
A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains an administrator account, th
4.9
MEDIUM
CVE-2025-54161
>= 5.5.6.4691 and < 5.5.6.5190
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote atta
4.9
MEDIUM
CVE-2025-54155
>= 5.5.6.4691 and < 5.5.6.5190
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote atta
4.9
MEDIUM
CVE-2025-57706
>= 5.5.6.4691 and < 5.5.6.5018
A cross-site scripting (XSS) vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account,
5.4
MEDIUM
CVE-2025-53413
>= 5.5.6.4691 and < 5.5.6.5018
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote atta
6.5
MEDIUM
CVE-2025-53412
>= 5.5.6.4691 and < 5.5.6.5018
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-53411
>= 5.5.6.4691 and < 5.5.6.5018
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote atta
4.9
MEDIUM
CVE-2025-53410
>= 5.5.6.4691 and < 5.5.6.5018
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote atta
6.5
MEDIUM
CVE-2025-53409
>= 5.5.6.4691 and < 5.5.6.5018
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote atta
6.5
MEDIUM
CVE-2025-53408
>= 5.5.6.4691 and < 5.5.6.5018
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-52865
>= 5.5.6.4691 and < 5.5.6.5018
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-47207
>= 5.5.6.4691 and < 5.5.6.5018
A NULL pointer dereference vulnerability has been reported to affect several product versions. If a remote attacker gains a user a
6.5
MEDIUM
CVE-2025-29900
>= 5.5.6.4691 and < 5.5.6.4907
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote atta
6.5
MEDIUM
CVE-2025-29899
>= 5.5.6.4691 and < 5.5.6.4907
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote atta
6.5
MEDIUM
CVE-2025-29890
>= 5.5.6.4691 and < 5.5.6.4907
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote atta
6.5
MEDIUM
CVE-2025-29889
>= 5.5.6.4691 and < 5.5.6.4907
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-29888
>= 5.5.6.4691 and < 5.5.6.4907
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-29886
>= 5.5.6.4691 and < 5.5.6.4907
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-29879
>= 5.5.6.4691 and < 5.5.6.4907
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-29878
>= 5.5.6.4691 and < 5.5.6.4907
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-29875
>= 5.5.6.4691 and < 5.5.6.4907
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-29874
>= 5.5.6.4691 and < 5.5.6.4907
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-29901
>= 5.5.6.4691 and < 5.5.6.4933
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, th
6.5
MEDIUM
CVE-2025-47206
>= 5.5.6.4691 and < 5.5.6.4933
An out-of-bounds write vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they c
8.1
HIGH
CVE-2025-33035
>= 5.5.6.4691 and < 5.5.6.4847
A path traversal vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, they can th
6.5
MEDIUM
CVE-2025-33031
>= 5.5.6.4691 and < 5.5.6.4847
An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user acc
8.8
HIGH
CVE-2025-30279
>= 5.5.6.4691 and < 5.5.6.4847
An improper certificate validation vulnerability has been reported to affect File Station 5. If a remote attacker gains a user ac
8.8
HIGH
CVE-2025-29885
>= 5.5.6.4691 and < 5.5.6.4791
An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could
8.8
HIGH
CVE-2025-29884
>= 5.5.6.4691 and < 5.5.6.4791
An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could
8.8
HIGH
CVE-2025-29883
>= 5.5.6.4691 and < 5.5.6.4791
An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could
8.8
HIGH
CVE-2025-29877
>= 5.5.6.4691 and < 5.5.6.4847
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, t
7.5
HIGH
CVE-2025-29876
>= 5.5.6.4691 and < 5.5.6.4847
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, t
7.5
HIGH
CVE-2025-29873
>= 5.5.6.4691 and < 5.5.6.4847
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, t
7.5
HIGH
CVE-2025-29872
>= 5.5.6.4691 and < 5.5.6.4847
An allocation of resources without limits or throttling vulnerability has been reported to affect File Station 5. If a remote att
7.5
HIGH
CVE-2025-29871
>= 5.5.6.4691 and < 5.5.6.4847
An out-of-bounds read vulnerability has been reported to affect File Station 5. If a local attacker gains an administrator accoun
5.5
MEDIUM
CVE-2025-22490
>= 5.5.6.4691 and < 5.5.6.4847
A NULL pointer dereference vulnerability has been reported to affect File Station 5. If a remote attacker gains a user account, t
7.5
HIGH
CVE-2025-22486
>= 5.5.6.4691 and < 5.5.6.4791
An improper certificate validation vulnerability has been reported to affect File Station 5. If exploited, the vulnerability could
8.8
HIGH
CVE-2024-48864
>= 5.5.6.4691 and < 5.5.6.4741
A files or directories accessible to external parties vulnerability has been reported to affect File Station 5. If exploited, the
9.1
CRITICAL
CVE-2018-13288
>= 1.1 and < 1.1.5-0125
Information exposure vulnerability in SYNO.FolderSharing.List in Synology File Station before 1.2.3-0252 and before 1.1.5-0125 all
5.3
MEDIUM
CVE-2018-8923
< 1.1.4-0122
Cross-site scripting (XSS) vulnerability in Attachment Preview in Synology File Station before 1.1.4-0122 allows remote authentica
6.5
MEDIUM
CVE-2017-15893
< 1.1.1-0099
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology File Station before 1.1.1-0099 allows remote authent
6.5
MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin