CVE-2020-2496 Cross-site scripting vulnerability in QTS and QuTS hero

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 a...

CVE-2020-2495

CVE-2020-2495 is a cross-site scripting (XSS) vulnerability in QNAP QTS/QuTS Hero File Station that could allow remote attackers to inject malicious code. The issue is fixed in multiple newer builds: QuTS hero h4.5.1.1472+ (20201031+), QTS 4.5.1.1456+, QTS 4.4.3.1354+, QTS 4.3.6.1333+, QTS 4.3.4....

CVE-2020-2495 Cross-site scripting vulnerability in QTS and QuTS hero

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 a...

CVE-2020-2494

The CVE-2020-2494 entry concerns a cross-site scripting (XSS) vulnerability in QNAP Music Station. The issue allows remote attackers to inject malicious code through Music Station components, with exploitation tied to specific versions of QNAP firmware: QuTS hero h4.5.1: Music Station 5.3.13 and ...

CVE-2020-2494 Cross-site Scripting Vulnerability in Music Station

This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in the following versions of Music Station. QuTS hero h4.5.1: Music Station 5.3.13 and later QTS 4.5.1: Music Station 5.3.12 and later QTS 4.4.3:...

CVE-2019-7198 Command Injection Vulnerability in QTS and QuTS hero

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS...

CVE-2019-7198

CVE-2019-7198 is a remote command-injection vulnerability in QNAP QTS and QuTS hero. Affected products include QuTS hero and QTS with fixed versions: QuTS hero h4.5.1.1472 build 20201031 and later; QTS 4.5.1.1456 build 20201015 and later; QTS 4.4.3.1354 build 20200702 and later. Public sources (N...

CVE-2020-2491 Cross-site Scripting Vulnerability in Photo Station

This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. QTS 4.5.1: Photo Station 6.0.12 and later QTS 4.4.3: Photo Station 6.0.12 and later QTS 4.3.6: Photo...

CVE-2020-2491

CVE-2020-2491 is a cross-site scripting (XSS) vulnerability in QNAP Photo Station . The CVE applies to QTS/QuTS installations that include Photo Station and can allow remote attackers to inject malicious code via Photo Station components. The included connected documents confirm affected products...

QNAP Systems QUTS Hero and Qnap Systems QNAP QTS Cross-Site Scripting Vulnerabilities

Qnap Systems QNAP QTS is a data storage device with SAN-like storage architecture from Qnap Systems, China. The device supports tiered storage, mirror protection, and other safeguard features.QNAP Systems QUTS Hero is a NAS operating system for file management from QNAP Systems, China. The system...

QNAP QTS Multiple Vulnerabilities (QSA-20-09)

QNAP QTS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; if description...

CVE-2020-2492

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...

CVE-2020-2492

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...

CVE-2020-2490

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...

CVE-2020-2490

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...

Command injection

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...

Command injection

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...

CVE-2020-2490

Summary: CVE-2020-2490 is a remote command-injection vulnerability in QNAP QTS prior to 4.4.3.1421 (build 20200907). Affected product/version: QNAP Systems QTS, versions before 4.4.3.1421 on build 20200907. Impact (as stated): If exploited, allows remote attackers to execute arbitrary commands wi...

CVE-2020-2492

If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907...

CVE-2020-2492

CVE-2020-2492 affects QNAP QTS prior to 4.4.3.1421 (build 20200907). Multiple sources confirm a remote command injection vulnerability that could allow an attacker to execute arbitrary commands with network access and with high-impact implications (confidentiality, integrity, availability all pot...