QNAP Systems QTS和QNAP Systems QuTS hero 路径遍历漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both software with data storage and management capabilities from QNAP Systems of Taiwan, China. A path traversal vulnerability exists in QNAP Systems QTS and QNAP Systems QuTS hero that originates from path traversal and could result in reading...

QNAP QuTS hero Multiple Vulnerabilities (QSA-25-45)

QNAP QuTS Hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

QNAP QuTS Hero DoS Vulnerability (QSA-25-36)

QNAP QuTS Hero is prone to a NULL pointer dereference vulnerability resulting in a denial of service DoS. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

QNAP QuTS hero Multiple Vulnerabilities (QSA-25-21, QSA-25-23)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

QNAP QuTS hero Heap-Based Buffer Overflow Vulnerability (QSA-21-02, Baron Samedit)

QNAP QuTS hero is prone to a heap-based buffer overflow vulnerability in sudo dubbed SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

QNAP QuTS hero Multiple OpenSSH Vulnerabilities (QSA-25-14)

QNAP QuTS hero is prone to multiple vulnerabilities in OpenSSH. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero";...

QNAP QTS and QNAP QuTS hero buffer overflow vulnerability

QNAP QTS is a Linux-based NAS operating system launched by QNAP, providing an intuitive and easy-to-use graphical interface and powerful data management features. QNAP QuTS hero is an operating system launched by QNAP specifically for enterprise-level applications, adopting the ZFS file system,...

QNAP QuTS hero Multiple Vulnerabilities (QSA-25-12)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

PT-2025-24292 · Qnap · Qnap Quts Hero +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.2.4.3079 build 20250321 QNAP QuTS hero versions prior to h5.2.4.3079 build 20250321 Description: A command injection issue has been reported, affecting several QNAP operating system versions. This could allow remo...

QNAP QuTS hero Multiple Vulnerabilities (QSA-24-54)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

QNAP QuTS hero Out-of-bounds Write Vulnerability (QSA-24-52)

QNAP QuTS hero is prone to an out-of-bounds write vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero";...

QNAP QuTS hero SSRF Vulnerability (QSA-24-53)

QNAP QuTS hero is prone to a server-side request forgery SSRF vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

QNAP QuTS hero Information Disclosure Vulnerability (QSA-25-03)

QNAP QuTS hero is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero...

PT-2025-10104

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description The issue is related to an improper neutralization of CRLF sequences, also known as 'CRLF Injection'. This could allow...

PT-2025-10112

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to 5.2.3.3006 build 20250108 Description An out-of-bounds write issue has been reported, potentially allowing remote attackers with administrator access to modi...

PT-2025-10105

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description A command injection issue has been reported, potentially allowing remote attackers with administrator access to execut...

PT-2025-10100

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.1.9.2954 build 20241120 QNAP QuTS hero h5.1.9 versions prior to 5.1.9.2954 build 20241120 Description An out-of-bounds write issue has been reported, potentially allowing remote attackers with administrator access ...

PT-2025-10111

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description A double free issue has been reported, potentially allowing remote attackers with administrator access to modify memor...

PT-2025-10106

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description An improper neutralization of CRLF sequences, also known as 'CRLF Injection', has been reported. This issue could allo...

PT-2025-10110

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description An out-of-bounds write issue has been reported, potentially allowing remote attackers with administrator access to...