Lucene search
K

CVE-2018-19942

🗓️ 16 Apr 2021 01:10:14Reported by qnapType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 71 Views

A cross-site scripting (XSS) vulnerability in earlier versions of File Station allows remote attackers to inject malicious code. Fixed in QTS 4.5.2.1566, 4.5.1.1456, 4.3.6.1446, 4.3.4.1463, 4.3.3.1432, 4.2.6, QuTS hero h4.5.1.1472, QuTScloud c4.5.4.1601, and c4.5.3.1454 (and later

Related
Detection
Affected
Refs
Social
ReporterTitlePublishedViews
Family
Cvelist
CVE-2018-19942 Cross-site Scripting Vulnerability in File Station
16 Apr 202101:10
cvelist
EUVD
EUVD-2018-11613
7 Oct 202500:30
euvd
NVD
CVE-2018-19942
16 Apr 202101:15
nvd
OpenVAS
QNAP QTS XSS Vulnerability (QSA-21-04)
19 Apr 202100:00
openvas
Prion
Cross site scripting
16 Apr 202101:15
prion
Tenable Nessus
Qnap QTS Cross-site Scripting (CVE-2018-19942)
16 Oct 202400:00
nessus
NVD
Node
qnapqtsRange<4.2.6
OR
qnapqtsRange4.3.54.3.6
OR
qnapqtsRange4.4.04.5.1
OR
qnapqtsMatch4.2.6-
OR
qnapqtsMatch4.2.6build_20170517
OR
qnapqtsMatch4.2.6build_20190322
OR
qnapqtsMatch4.2.6build_20190730
OR
qnapqtsMatch4.2.6build_20190921
OR
qnapqtsMatch4.2.6build_20191107
OR
qnapqtsMatch4.2.6build_20200109
OR
qnapqtsMatch4.2.6build_20200421
OR
qnapqtsMatch4.2.6build_20200611
OR
qnapqtsMatch4.2.6build_20200821
OR
qnapqtsMatch4.3.3
OR
qnapqtsMatch4.3.3.0095
OR
qnapqtsMatch4.3.3.0096
OR
qnapqtsMatch4.3.3.0136
OR
qnapqtsMatch4.3.3.0154
OR
qnapqtsMatch4.3.3.0174
OR
qnapqtsMatch4.3.3.0188
OR
qnapqtsMatch4.3.3.0210
OR
qnapqtsMatch4.3.3.0229
OR
qnapqtsMatch4.3.3.0238
OR
qnapqtsMatch4.3.3.0262
OR
qnapqtsMatch4.3.3.0299
OR
qnapqtsMatch4.3.3.0351
OR
qnapqtsMatch4.3.3.0353
OR
qnapqtsMatch4.3.3.0361
OR
qnapqtsMatch4.3.3.0369
OR
qnapqtsMatch4.3.3.0378
OR
qnapqtsMatch4.3.3.0396
OR
qnapqtsMatch4.3.3.0404
OR
qnapqtsMatch4.3.3.0416
OR
qnapqtsMatch4.3.3.0418
OR
qnapqtsMatch4.3.3.0448
OR
qnapqtsMatch4.3.3.0514
OR
qnapqtsMatch4.3.3.0546
OR
qnapqtsMatch4.3.3.0570
OR
qnapqtsMatch4.3.3.0868
OR
qnapqtsMatch4.3.3.0998
OR
qnapqtsMatch4.3.3.1051
OR
qnapqtsMatch4.3.3.1098
OR
qnapqtsMatch4.3.3.1161
OR
qnapqtsMatch4.3.3.1252
OR
qnapqtsMatch4.3.3.1315
OR
qnapqtsMatch4.3.3.1386
OR
qnapqtsMatch4.3.4
OR
qnapqtsMatch4.3.4.0358
OR
qnapqtsMatch4.3.4.0358beta1
OR
qnapqtsMatch4.3.4.0370
OR
qnapqtsMatch4.3.4.0370beta1
OR
qnapqtsMatch4.3.4.0372
OR
qnapqtsMatch4.3.4.0372beta1
OR
qnapqtsMatch4.3.4.0374
OR
qnapqtsMatch4.3.4.0374beta1
OR
qnapqtsMatch4.3.4.0387
OR
qnapqtsMatch4.3.4.0387beta2
OR
qnapqtsMatch4.3.4.0411
OR
qnapqtsMatch4.3.4.0416
OR
qnapqtsMatch4.3.4.0427
OR
qnapqtsMatch4.3.4.0434
OR
qnapqtsMatch4.3.4.0435
OR
qnapqtsMatch4.3.4.0451
OR
qnapqtsMatch4.3.4.0483
OR
qnapqtsMatch4.3.4.0486
OR
qnapqtsMatch4.3.4.0506
OR
qnapqtsMatch4.3.4.0516
OR
qnapqtsMatch4.3.4.0526
OR
qnapqtsMatch4.3.4.0551
OR
qnapqtsMatch4.3.4.0557
OR
qnapqtsMatch4.3.4.0561
OR
qnapqtsMatch4.3.4.0569
OR
qnapqtsMatch4.3.4.0593
OR
qnapqtsMatch4.3.4.0597
OR
qnapqtsMatch4.3.4.0604
OR
qnapqtsMatch4.3.4.0899
OR
qnapqtsMatch4.3.4.1029
OR
qnapqtsMatch4.3.4.1082
OR
qnapqtsMatch4.3.4.1190
OR
qnapqtsMatch4.3.4.1282
OR
qnapqtsMatch4.3.4.1368
OR
qnapqtsMatch4.3.4.1417
OR
qnapqtsMatch4.3.6-
OR
qnapqtsMatch4.3.6.0895
OR
qnapqtsMatch4.3.6.0907
OR
qnapqtsMatch4.3.6.0923
OR
qnapqtsMatch4.3.6.0944
OR
qnapqtsMatch4.3.6.0959
OR
qnapqtsMatch4.3.6.0979
OR
qnapqtsMatch4.3.6.0993
OR
qnapqtsMatch4.3.6.1013
OR
qnapqtsMatch4.3.6.1033
OR
qnapqtsMatch4.3.6.1070
OR
qnapqtsMatch4.3.6.1154
OR
qnapqtsMatch4.3.6.1218
OR
qnapqtsMatch4.3.6.1263
OR
qnapqtsMatch4.3.6.1286
OR
qnapqtsMatch4.3.6.1333
OR
qnapqtsMatch4.3.6.1411
OR
qnapqtsMatch4.5.1-
OR
qnapqtsMatch4.5.2-
OR
qnapquts_heroRange<h4.5.1
OR
qnapquts_heroMatchh4.5.1
OR
qnapquts_heroMatchh4.5.1-
OR
qnapqutscloudRange<c4.5.3
OR
qnapqutscloudMatchc4.5.3-
OR
qnapqutscloudMatchc4.5.4-
[
  {
    "product": "QTS",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "4.5.2.1566 build 20210202",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "4.5.1.1456 build 20201015",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.6.1446 build 20200929",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.4.1463 build 20201006",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.3.1432 build 20201006",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "4.2.6 build 20210327",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "QuTS hero",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "h4.5.1.1472 build 20201031",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "QuTScloud",
    "vendor": "QNAP Systems Inc.",
    "versions": [
      {
        "lessThan": "c4.5.4.1601 build 20210309",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "c4.5.3.1454 build 20201013",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Nov 2024 03:58Current
6Medium risk
Vulners AI Score6
CVSS 24.3
CVSS 3.16.1
EPSS0.00327
71