# cve.now: Qsan

The newest entries naming Qsan as an affected vendor (up to 200), of 31 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2021-37216](https://cve.now/CVE-2021-37216.md): QSAN Storage Manager - Reflected Cross-Site Scripting (CVSS 6.1)
- [CVE-2021-32535](https://cve.now/CVE-2021-32535.md): QSAN SANOS - Use of Hard-coded Credentials (CVSS 9.8)
- [CVE-2021-32534](https://cve.now/CVE-2021-32534.md): QSAN SANOS - Command Injection (CVSS 9.8)
- [CVE-2021-32533](https://cve.now/CVE-2021-32533.md): QSAN SANOS - Command Injection (CVSS 9.8)
- [CVE-2021-32532](https://cve.now/CVE-2021-32532.md): QSAN XEVO - Path Traversal (CVSS 7.5)
- [CVE-2021-32531](https://cve.now/CVE-2021-32531.md): QSAN XEVO - Command Injection Following via Init function (CVSS 9.8)
- [CVE-2021-32530](https://cve.now/CVE-2021-32530.md): QSAN XEVO - Command Injection Following via Array function (CVSS 9.8)
- [CVE-2021-32529](https://cve.now/CVE-2021-32529.md): QSAN XEVO, SANOS - Command Injection -1 (CVSS 9.8)
- [CVE-2021-32528](https://cve.now/CVE-2021-32528.md): QSAN Storage Manager - Exposure of Sensitive Information to an Unauthorized Actor (CVSS 5.3)
- [CVE-2021-32527](https://cve.now/CVE-2021-32527.md): QSAN Storage Manager - Path Traversal-2 (CVSS 7.5)
- [CVE-2021-32526](https://cve.now/CVE-2021-32526.md): QSAN Storage Manager - Incorrect Permission Assignment for Critical Resource (CVSS 6.5)
- [CVE-2021-32525](https://cve.now/CVE-2021-32525.md): QSAN Storage Manager - Use of Hard-coded Password-2 (CVSS 9.1)
- [CVE-2021-32524](https://cve.now/CVE-2021-32524.md): QSAN Storage Manager - Command Injection-3 (CVSS 9.1)
- [CVE-2021-32523](https://cve.now/CVE-2021-32523.md): QSAN Storage Manager - Improper Authorization (CVSS 9.1)
- [CVE-2021-32522](https://cve.now/CVE-2021-32522.md): QSAN Storage Manager, XEVO, SANOS - Improper Restriction of Excessive Authentication Attempts (CVSS 9.8)
- [CVE-2021-32521](https://cve.now/CVE-2021-32521.md): QSAN Storage Manager, XEVO, SANOS - Use of Hard-coded Password (CVSS 7.3)
- [CVE-2021-32520](https://cve.now/CVE-2021-32520.md): QSAN Storage Manager - Use of Hard-coded Cryptographic Key (CVSS 9.8)
- [CVE-2021-32519](https://cve.now/CVE-2021-32519.md): QSAN Storage Manager, XEVO, SANOS - Use of Password Hash With Insufficient Computational Effort (CVSS 9.8)
- [CVE-2021-32518](https://cve.now/CVE-2021-32518.md): QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following (CVSS 7.5)
- [CVE-2021-32517](https://cve.now/CVE-2021-32517.md): QSAN Storage Manager - Improper Access Control (CVSS 7.5)
- [CVE-2021-32516](https://cve.now/CVE-2021-32516.md): QSAN Storage Manager - Path Traversal (CVSS 7.5)
- [CVE-2021-32515](https://cve.now/CVE-2021-32515.md): QSAN Storage Manager - Exposure of Information Through Directory Listing (CVSS 5.3)
- [CVE-2021-32514](https://cve.now/CVE-2021-32514.md): QSAN Storage Manager - Improper Access Control Following via FirwareUpgrade function (CVSS 7.5)
- [CVE-2021-32513](https://cve.now/CVE-2021-32513.md): QSAN Storage Manager - Command Injection Following via QsanTorture function (CVSS 9.8)
- [CVE-2021-32512](https://cve.now/CVE-2021-32512.md): QSAN Storage Manager - Command Injection Following via QuickInstall function (CVSS 9.8)
- [CVE-2021-32511](https://cve.now/CVE-2021-32511.md): QSAN Storage Manager - Exposure of Information Through Directory Listing Following via ViewBroserList function (CVSS 4.3)
- [CVE-2021-32510](https://cve.now/CVE-2021-32510.md): QSAN Storage Manager - Exposure of Information Through Directory Listing Following via Antivirus function (CVSS 4.3)
- [CVE-2021-32509](https://cve.now/CVE-2021-32509.md): QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileviewDoc function (CVSS 6.5)
- [CVE-2021-32508](https://cve.now/CVE-2021-32508.md): QSAN Storage Manager - UNIX Symbolic Link (Symlink) Following via FileStreaming function (CVSS 6.5)
- [CVE-2021-32507](https://cve.now/CVE-2021-32507.md): QSAN Storage Manager - Absolute Path Traversal via FileDownload function (CVSS 6.5)
- [CVE-2021-32506](https://cve.now/CVE-2021-32506.md): QSAN Storage Manager - Absolute Path Traversal via GetImage function (CVSS 6.5)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/qsan
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.