Lucene search
+L

1405 matches found

Cvelist
Cvelist
•added 2022/01/07 1:15 a.m.•32 views

CVE-2021-38674 Reflected XSS Vulnerability in TFTP

A cross-site scripting XSS vulnerability has been reported to affect QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and QuTScloud: QuTS hero...

4.2CVSS6.2AI score0.00636EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2022/01/07 12:00 a.m.•15 views

QNAP Systems QUTS Hero 跨站脚本漏洞

QNAP Systems QUTS Hero is a NAS operating system for file management from China Waylink QNAP Systems. The system retains the QTS application ecosystem and integrates a more powerful 128-bit ZFS file system to provide enterprises with a more stable and reliable NAS storage solution.QNAP Systems QU...

6.1CVSS5.2AI score0.00636EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/07 12:00 a.m.•1 views

CVE-2021-38674: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability has been reported to affect QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and QuTScloud: QuTS hero...

6.1CVSS5.7AI score0.00636EPSS
SaveExploits0References3
CNVD
CNVD
•added 2022/01/07 12:00 a.m.•48 views

QNAP Systems QUTS Hero Cross-Site Scripting Vulnerability

QNAP Systems QUTS Hero is a NAS operating system for file management from China Waylink QNAP Systems. The system retains the QTS application ecosystem and integrates a more powerful 128-bit ZFS file system to provide enterprises with a more stable and reliable NAS storage solution.QNAP Systems QU...

6.1CVSS0.8AI score0.00636EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2021/12/20 12:00 a.m.•15 views

The vulnerability of the QTS and QuTS operating systems, related to buffer overflows in dynamic memory, allows attackers to execute arbitrary code.

The vulnerability of the QTS and QuTS operating systems is related to overflowing buffers in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending specially crafted data...

10CVSS6AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2021/11/29 12:00 a.m.•32 views

QNAP QTS/QES/QuTS hero - Web Detection

Binary data qnapqtsqutsherowebdetect.nbin...

7.3AI score
SaveExploits0References1
CVE
CVE
•added 2021/10/22 4:25 a.m.•56 views

CVE-2021-34362

CVE-2021-34362 is a command-injection vulnerability affecting QNAP devices with the Media Streaming add-on. The issue allows remote attackers to run arbitrary commands over the network. Affected installations include QTS 5.0.0 (Media Streaming add-on 500.0.0.3+), QTS 4.5.4 (500.0.0.3+), QTS 4.3.6...

8.7CVSS7.5AI score0.01266EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/10/21 12:00 a.m.•12 views

The vulnerability of the QuTS hero, QTS, and QuTScloud operating systems is caused by buffer overflow in the stack, allowing attackers to execute arbitrary code.

The vulnerability of the QuTS hero, QTS, and QuTScloud operating systems is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS7.8AI score0.0195EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2021/10/21 12:00 a.m.•11 views

The vulnerability of the QuTS hero, QTS, and QuTScloud operating systems is caused by buffer overflow in the stack, allowing attackers to execute arbitrary code.

The vulnerability of the QuTS hero, QTS, and QuTScloud operating systems is caused by buffer overflow in the stack. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS8.3AI score0.00928EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2021/09/10 4:15 a.m.•36 views

CVE-2021-34343

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

7.2CVSS0.0195EPSS
SaveExploits0References1
OSV
OSV
•added 2021/09/10 4:15 a.m.•14 views

CVE-2021-34343

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

7.2CVSS7.5AI score0.0195EPSS
SaveExploits0References1
OSV
OSV
•added 2021/09/10 4:15 a.m.•20 views

CVE-2021-28816

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

8.8CVSS7.7AI score0.00928EPSS
SaveExploits0References1
NVD
NVD
•added 2021/09/10 4:15 a.m.•33 views

CVE-2021-28816

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

8.8CVSS0.00928EPSS
SaveExploits0References1
NVD
NVD
•added 2021/09/10 4:15 a.m.•36 views

CVE-2018-19957

A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS...

6.1CVSS0.00707EPSS
SaveExploits0References1
Prion
Prion
•added 2021/09/10 4:15 a.m.•23 views

Stack overflow

A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 2021/07/30 and lat...

7.5CVSS9.8AI score0.01579EPSS
SaveExploits0References1Affected Software1
Prion
Prion
•added 2021/09/10 4:15 a.m.•26 views

Design/Logic Flaw

A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS...

4.3CVSS6.3AI score0.00707EPSS
SaveExploits0References1Affected Software3
Prion
Prion
•added 2021/09/10 4:15 a.m.•29 views

Stack overflow

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

6.5CVSS9AI score0.00928EPSS
SaveExploits0References1Affected Software3
Prion
Prion
•added 2021/09/10 4:15 a.m.•30 views

Stack overflow

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS...

6.5CVSS7.4AI score0.0195EPSS
SaveExploits0References1Affected Software3
Cvelist
Cvelist
•added 2021/09/10 4:00 a.m.•41 views

CVE-2021-34344 Stack Buffer Overflow Vulnerability in QUSBCam2

A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 2021/07/30 and lat...

9.8CVSS10AI score0.01579EPSS
SaveExploits0References1
CVE
CVE
•added 2021/09/10 4:00 a.m.•81 views

CVE-2021-34344

CVE-2021-34344 is a stack buffer overflow affecting QNAP QUSBCam2 used on NAS devices. The issue allows arbitrary code execution when exploited via the affected service. Affected versions and fixes are specified across multiple QNAP platforms: QTS 4.5.4: QUSBCam2 1.1.4 (from 2021-07-30) and later...

9.8CVSS10AI score0.01579EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder