CVE-2020-2499

CVE-2020-2499 affects QNAP QES prior to 2.1.1 Build 20200515, due to a hard-coded credential in earlier QES releases. The issue could allow login with the hard-coded password. QNAP fixed the vulnerability in QES 2.1.1 Build 20200515 and later. Based on connected sources (NVD/Nessus plugin and rel...

QNAP QES Cross-Site Scripting Vulnerability

QNAP QES is a desktop operating system from China's QNAP Corporation that is primarily used for managing files. A cross-site scripting vulnerability exists in versions prior to QES 2.1.1 Build 20201006, which can be exploited by remote attackers to inject malicious code into File Station...

QNAP QES Security Vulnerabilities

QNAP QES is a desktop operating system from China's QNAP Inc. that is primarily used for managing files. A security vulnerability exists in versions prior to QES 2.1.1 Build 20201006, which can be exploited by an attacker to obtain sensitive information by generating an error message...

QNAP QES 路径遍历漏洞

QNAP QES is a desktop operating system mainly used for managing files by QNAP China. A directory traversal vulnerability exists in QNAP QES, which can be exploited by a remote attacker to submit a special request to obtain sensitive information...

QNAP QES Trust Management Issues Vulnerabilities

QNAP QES is a desktop operating system from China's QNAP Corporation that is primarily used for managing files. A trust management issue vulnerability exists in versions prior to QES 2.1.1 Build 20200515, which can be exploited by an attacker to log in with a hard-coded password...

QNAP QTS Music Station XSS Vulnerability (QSA-20-13)

QNAP Music Station is prone to a cross-site scripting XSS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

QNAP QTS Command Injection Vulnerability (QSA-20-16)

QNAP QTS is prone to a command injection vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; if description...

QNAP Photo Station XSS Vulnerability (QSA-20-15)

QNAP Photo Station is prone to a cross-site scripting XSS vulnerability. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...

QNAP QTS Multiple XSS Vulnerabilities (QSA-20-12)

QNAP QTS is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"...

CVE-2019-7198

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS...

CVE-2019-7198

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS...

Command injection

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS...

CVE-2019-7198 Command Injection Vulnerability in QTS and QuTS hero

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS...

CVE-2019-7198

CVE-2019-7198 is a remote command-injection vulnerability in QNAP QTS and QuTS hero. Affected products include QuTS hero and QTS with fixed versions: QuTS hero h4.5.1.1472 build 20201031 and later; QTS 4.5.1.1456 build 20201015 and later; QTS 4.4.3.1354 build 20200702 and later. Public sources (N...

PT-2020-15874 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 4.5.1.1456 build 20201015 QuTS hero versions prior to h4.5.1.1472 build 20201031 QTS versions prior to 4.4.3.1354 build 20200702 QTS versions prior to 4.3.6.1333 build 20200608 QTS versions prior to 4.3.4.1368 build...

Qnap Systems Cross-Site Scripting Vulnerability in Multiple Products

Qnap Systems QNAP QTS is a Turbo NAS operating system from Qnap Systems, China. The system provides file storage, management, backup, multimedia applications and security monitoring, etc. QNAP Systems QUTS Hero is a NAS operating system for file management from QNAP Systems, China. The system...

Cross-Site Scripting Vulnerability in Multiple Qnap Systems Products

Qnap Systems QNAP Systems Photo Station is a photo management and viewing application. QNAP QTS is a data storage device with a SAN-like storage architecture. Systems QUTS Hero and others are products of China Weilian Tong QNAP Systems.QNAP Systems QUTS Hero is a NAS operating system for managing...

QNAP Systems Multimedia Console Cross-Site Scripting Vulnerability

QNAP Systems Multimedia Console is a multimedia controller for centralized management of QTS devices from China Unicom QNAP Systems. A cross-site scripting vulnerability exists in Multimedia Console version 1.1.5 and later versions, which can be exploited to inject malicious code...

QANP Multi-Product Cross-Site Scripting Vulnerability

Qnap Systems QNAP QTS is a data storage device with SAN-like storage architecture from Qnap Systems, China. The device supports tiered storage, mirror protection, and other safeguard features.QNAP Systems QUTS Hero is a NAS operating system for file management from QNAP Systems, China. The system...

QNAP Systems Cross-Site Scripting Vulnerability in Multiple Products

Qnap Systems QNAP QTS is a Turbo NAS operating system from Qnap Systems. The system provides file storage, management, backup, multimedia applications and security monitoring. A cross-site scripting vulnerability exists in several QNAP Systems products, which can be exploited by an attacker to...