1929 matches found
CVE-2018-19941
A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information stored in cleartext inside cookies via certain widely-available tools. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.1.1456 bui...
CVE-2018-19944
A cleartext transmission of sensitive information vulnerability has been reported to affect certain QTS devices. If exploited, this vulnerability allows a remote attacker to gain access to sensitive information. QNAP have already fixed this vulnerability in the following versions: QTS 4.4.3.1354...
CVE-2018-19945
A vulnerability has been reported to affect earlier QNAP devices running QTS 4.3.4 to 4.3.6. Caused by improper limitations of a pathname to a restricted directory, this vulnerability allows for renaming arbitrary files on the target system, if exploited. QNAP have already fixed this vulnerabilit...
Design/Logic Flaw
A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information stored in cleartext inside cookies via certain widely-available tools. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.1.1456 bui...
Design/Logic Flaw
A cleartext transmission of sensitive information vulnerability has been reported to affect certain QTS devices. If exploited, this vulnerability allows a remote attacker to gain access to sensitive information. QNAP have already fixed this vulnerability in the following versions: QTS 4.4.3.1354...
Design/Logic Flaw
A vulnerability has been reported to affect earlier QNAP devices running QTS 4.3.4 to 4.3.6. Caused by improper limitations of a pathname to a restricted directory, this vulnerability allows for renaming arbitrary files on the target system, if exploited. QNAP have already fixed this vulnerabilit...
CVE-2018-19945 Improper Limitation of a Pathname to a Restricted Directory in QTS
A vulnerability has been reported to affect earlier QNAP devices running QTS 4.3.4 to 4.3.6. Caused by improper limitations of a pathname to a restricted directory, this vulnerability allows for renaming arbitrary files on the target system, if exploited. QNAP have already fixed this vulnerabilit...
CVE-2018-19945
CVE-2018-19945 affects older QNAP QTS devices (versions 4.3.4–4.3.6). The root cause is an improper limitation of a pathname to a restricted directory, enabling an attacker to rename arbitrary files on the target system when exploited. QNAP has fixed the issue in QTS 4.3.6.0895 (build 20190328) a...
CVE-2018-19944 Cleartext Transmission of Sensitive Information in SNMP
A cleartext transmission of sensitive information vulnerability has been reported to affect certain QTS devices. If exploited, this vulnerability allows a remote attacker to gain access to sensitive information. QNAP have already fixed this vulnerability in the following versions: QTS 4.4.3.1354...
CVE-2018-19944
CVE-2018-19944 : A cleartext transmission of sensitive information affects QNAP QTS devices. Public details indicate this enables a remote attacker to access sensitive information. The vulnerability has been fixed in QTS 4.4.3.1354 build 20200702 and later; organizations should upgrade to this ve...
CVE-2018-19944: Missing Encryption of Sensitive Data
A cleartext transmission of sensitive information vulnerability has been reported to affect certain QTS devices. If exploited, this vulnerability allows a remote attacker to gain access to sensitive information. QNAP have already fixed this vulnerability in the following versions: QTS 4.4.3.1354...
PT-2020-8653
Name of the Vulnerable Software and Affected Versions: QTS versions prior to 4.4.3.1354 build 20200702 Description: A cleartext transmission of sensitive information issue has been reported, allowing a remote attacker to gain access to sensitive information if exploited. Recommendations: For...
CVE-2018-19945: Improper Input Validation
A vulnerability has been reported to affect earlier QNAP devices running QTS 4.3.4 to 4.3.6. Caused by improper limitations of a pathname to a restricted directory, this vulnerability allows for renaming arbitrary files on the target system, if exploited. QNAP have already fixed this vulnerabilit...
PT-2020-8654
Name of the Vulnerable Software and Affected Versions: QNAP QTS versions 4.3.4 through 4.3.6 Description: A vulnerability has been reported that affects QNAP devices, caused by improper limitations of a pathname to a restricted directory. This issue allows for renaming arbitrary files on the targ...
CVE-2020-25847
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero...
Command injection
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero...
CVE-2020-25847
CVE-2020-25847 is a remote command injection vulnerability affecting QNAP QTS and QuTS hero. The flaw allows attackers to execute arbitrary commands in a compromised application. NVD/OSS records assign CVSSv3.1 base score 8.8 (Network, Low attack complexity, Privileges required: Low, User interac...
CVE-2020-25847 Command Injection Vulnerability in QTS and QuTS hero
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero...
Qnap Systems QNAP QTS and QNAP Systems QUTS Hero Command Injection Vulnerabilities
Qnap Systems QNAP QTS is a data storage device with SAN-like storage architecture from Qnap Systems, China. The device supports tiered storage, mirror protection, and other safeguard features.QNAP Systems QUTS Hero is a NAS operating system for file management from QNAP Systems, China. The system...
CVE-2020-25847: Improper Neutralization of Special Elements used in a Command
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero...