CVE-2020-2490

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...

PT-2020-15857

Name of the Vulnerable Software and Affected Versions QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907. Description The issue is a command injection vulnerability that could allow remote attackers to execute arbitrary commands if exploited. Recommendations For QNAP Systems Inc...

CVE-2020-2492: Improper Neutralization of Special Elements used in a Command

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...

PT-2018-9037

Name of the Vulnerable Software and Affected Versions QNAP Systems Inc. QTS versions prior to 4.2.6 on build 20180711 QNAP Systems Inc. QTS versions prior to 4.3.3 on build 20180725 QNAP Systems Inc. QTS versions prior to 4.3.4 on build 20180710 Description A Cross-site Scripting XSS issue allows...

CVE-2018-0719: Improper Neutralization of Input During Web Page Generation

Cross-site Scripting XSS vulnerability in NAS devices of QNAP Systems Inc. QTS allows attackers to inject javascript. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior versions ...