CVE-2024-21903

CVE-2024-21903 is an OS command injection vulnerability affecting QNAP QTS and QuTS hero. It allows authenticated administrators to execute commands over the network. The root cause details are not provided in the documents beyond the command-injection nature. Benign exploitation details are not ...

CVE-2024-21903 QTS, QuTS hero

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722...

CVE-2024-21898

The CVE-2024-21898 issue is an OS command injection in QNAP QTS and QuTS hero that could allow authenticated network access to execute commands. Affected: QTS 5.1.6.2722 build 20240402 and later; QuTS hero h5.1.6.2734 build 20240414 and later. Root cause details are not explicitly specified beyon...

CVE-2024-21898 QTS, QuTS hero

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build...

CVE-2024-21897

CVE-2024-21897 is an XSS vulnerability affecting QNAP QTS and QuTS hero. It could allow authenticated users to inject malicious code over the network. Remediated in QTS 5.1.6.2722 build 20240402 and later and QuTS hero h5.1.6.2734 build 20240414 and later.

CVE-2023-51368 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722...

CVE-2023-51368 QTS, QuTS hero

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to launch a denial-of-service DoS attack via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722...

CVE-2023-51368

CVE-2023-51368 describes a NULL pointer dereference in QNAP QTS and QuTS hero that can enable a network-exposed DoS. Affected software: QTS (5.1.6.x) and QuTS hero (h5.1.6.x) prior to the fixed builds. Root cause: NULL pointer dereference vulnerability (details in the Initial description). Impact...

CVE-2023-51367 QTS, QuTS hero

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build...

CVE-2023-51366

CVE-2023-51366 concerns a path traversal vulnerability in QNAP’s QTS and QuTS hero OSes. The issue allows unauthorized access to read contents of files over the network on affected builds. Public material in the connected docs confirms the vulnerability impacts QTS and QuTS hero, with the underly...

CVE-2023-51366 QTS, QuTS hero

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions:...

CVE-2023-50366 QTS, QuTS hero

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS...

CVE-2023-50366 QTS, QuTS hero

A cross-site scripting XSS vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS...

CVE-2024-8517 SPIP Bigup Multipart File Upload OS Command Injection

SPIP before 4.3.2, 4.2.16, and 4.1.18 is vulnerable to a command injection issue. A remote and unauthenticated attacker can execute arbitrary operating system commands by sending a crafted multipart file upload HTTP request...

PT-2024-14094 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.1.6.2722 build 20240402 QNAP QuTS hero versions prior to h5.1.6.2734 build 20240414 Description: A buffer copy without checking the size of input issue has been reported to affect several QNAP operating system...

PT-2024-5949 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 4.5.4.2790 build 20240605 QuTS hero versions prior to h4.5.4.2626 build 20231225 Description: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the...

PT-2024-28095 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.1.8.2823 build 20240712 QNAP QuTS hero versions prior to h5.1.8.2823 build 20240712 Description: An OS command injection issue has been reported to affect several QNAP operating system versions. If exploited, the...

QNAP QTS 和QuTS hero 跨站脚本漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A cross-site scripting vulnerability exists in QNAP QTS version...

PT-2024-19116 · Qnap · Qnap Qts +1

Name of the Vulnerable Software and Affected Versions: QNAP QTS versions prior to 5.1.6.2722 build 20240402 QNAP QuTS hero versions prior to h5.1.6.2734 build 20240414 Description: An OS command injection issue has been reported to affect several QNAP operating system versions. If exploited, the...

QNAP QTS和QuTS hero 路径遍历漏洞

QNAP QTS is a NAS operating system developed by QNAPSystems, Inc. designed for network attached storage devices, providing data management, backup, multimedia entertainment, etc. QNAP QuTS hero is an enterprise-grade operating system developed by QNAP for its networked storage devices NAS, which ...