CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

1693 matches found

OSV•added 2020/12/10 4:15 a.m.•9 views

CVE-2019-7198

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS...

9.8CVSS7.5AI score0.02718EPSS

SaveExploits0References1

OSV•added 2020/12/10 4:15 a.m.•7 views

CVE-2020-2496

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 a...

6.1CVSS6.7AI score0.01023EPSS

SaveExploits0References1

OSV•added 2020/12/10 4:15 a.m.•10 views

CVE-2020-2495

6.1CVSS6.7AI score0.01036EPSS

SaveExploits0References1

NVD•added 2020/12/10 4:15 a.m.•36 views

CVE-2020-2495

6.1CVSS6.3AI score0.01036EPSS

SaveExploits0References1

NVD•added 2020/12/10 4:15 a.m.•31 views

CVE-2020-2496

6.1CVSS6.3AI score0.01023EPSS

SaveExploits0References1

NVD•added 2020/12/10 4:15 a.m.•37 views

CVE-2020-2497

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in System Connection Logs. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build...

6.1CVSS6.2AI score0.00985EPSS

SaveExploits0References1

Prion•added 2020/12/10 4:15 a.m.•21 views

Command injection

7.5CVSS9.8AI score0.02718EPSS

SaveExploits0References1Affected Software2

Prion•added 2020/12/10 4:15 a.m.•32 views

Cross site scripting

4.3CVSS6.2AI score0.01023EPSS

SaveExploits0References1Affected Software2

Prion•added 2020/12/10 4:15 a.m.•27 views

Cross site scripting

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in certificate configuration. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 bui...

4.3CVSS6.2AI score0.00603EPSS

SaveExploits0References1Affected Software2

CVE•added 2020/12/10 3:45 a.m.•84 views

CVE-2020-2498

CVE-2020-2498 is a cross-site scripting vulnerability affecting QTS and QuTS hero. The issue allows remote attackers to inject malicious code into certificate configuration if exploited. Affected versions were fixed in QuTS hero h4.5.1.1472 build 20201031 and later, QTS 4.5.1.1456 build 20201015 ...

6.1CVSS6.2AI score0.00603EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2020/12/10 3:45 a.m.•41 views

CVE-2020-2498 Cross-site scripting vulnerability in QTS and QuTS hero

6.3AI score0.00603EPSS

SaveExploits0References1

CVE•added 2020/12/10 3:43 a.m.•87 views

CVE-2020-2497

The CVE-2020-2497 entry describes a cross-site scripting (XSS) vulnerability in QTS/QuTS Hero where remote attackers could inject malicious code into System Connection Logs. Affected products include QTS and QuTS Hero with multiple fixed versions listed: QuTS hero h4.5.1.1472 build 20201031 and l...

6.1CVSS6.2AI score0.00985EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2020/12/10 3:43 a.m.•38 views

CVE-2020-2497 Cross-site scripting vulnerability in QTS and QuTS hero

6.3AI score0.00985EPSS

SaveExploits0References1

Cvelist•added 2020/12/10 3:41 a.m.•38 views

CVE-2020-2496 Cross-site scripting vulnerability in QTS and QuTS hero

6.3AI score0.01023EPSS

SaveExploits0References1

CVE•added 2020/12/10 3:39 a.m.•100 views

CVE-2020-2495

CVE-2020-2495 is a cross-site scripting (XSS) vulnerability in QNAP QTS/QuTS Hero File Station that could allow remote attackers to inject malicious code. The issue is fixed in multiple newer builds: QuTS hero h4.5.1.1472+ (20201031+), QTS 4.5.1.1456+, QTS 4.4.3.1354+, QTS 4.3.6.1333+, QTS 4.3.4....

6.1CVSS6.6AI score0.01036EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2020/12/10 3:39 a.m.•42 views

CVE-2020-2495 Cross-site scripting vulnerability in QTS and QuTS hero

6.3AI score0.01036EPSS

SaveExploits0References1

CVE•added 2020/12/10 3:36 a.m.•74 views

CVE-2020-2494

The CVE-2020-2494 entry concerns a cross-site scripting (XSS) vulnerability in QNAP Music Station. The issue allows remote attackers to inject malicious code through Music Station components, with exploitation tied to specific versions of QNAP firmware: QuTS hero h4.5.1: Music Station 5.3.13 and ...

6.1CVSS6AI score0.00993EPSS

SaveExploits0References1Affected Software1

Cvelist•added 2020/12/10 3:36 a.m.•33 views

CVE-2020-2494 Cross-site Scripting Vulnerability in Music Station

This cross-site scripting vulnerability in Music Station allows remote attackers to inject malicious code. QANP have already fixed this vulnerability in the following versions of Music Station. QuTS hero h4.5.1: Music Station 5.3.13 and later QTS 4.5.1: Music Station 5.3.12 and later QTS 4.4.3:...

6AI score0.00993EPSS

SaveExploits0References1

Cvelist•added 2020/12/10 3:34 a.m.•37 views

CVE-2019-7198 Command Injection Vulnerability in QTS and QuTS hero

9.9AI score0.02718EPSS

SaveExploits0References1

CVE•added 2020/12/10 3:34 a.m.•78 views

CVE-2019-7198

CVE-2019-7198 is a remote command-injection vulnerability in QNAP QTS and QuTS hero. Affected products include QuTS hero and QTS with fixed versions: QuTS hero h4.5.1.1472 build 20201031 and later; QTS 4.5.1.1456 build 20201015 and later; QTS 4.4.3.1354 build 20200702 and later. Public sources (N...

9.8CVSS9.9AI score0.02718EPSS

SaveExploits0References1Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by