PT-2025-10109

Name of the Vulnerable Software and Affected Versions QuLog Center versions prior to 1.7.0.829 QuLog Center versions prior to 1.8.0.888 QTS versions prior to 4.5.4.2957 build 20241119 QuTS hero versions prior to 4.5.4.2956 build 20241119 Description A server-side request forgery SSRF issue has be...

QNAP Systems QTS和QNAP Systems QuTS hero 资源管理错误漏洞

QNAP QTS is a Linux-based NAS operating system launched by QNAP, providing an intuitive and easy-to-use graphical interface and powerful data management features. QNAP QuTS hero is an operating system launched by QNAP specifically for enterprise-level applications, adopting the ZFS file system,...

PT-2025-10105

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description A command injection issue has been reported, potentially allowing remote attackers with administrator access to execut...

QNAP Systems QTS和QNAP Systems QuTS hero 代码注入漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems, Inc.QNAP Systems QTS is an entry operating system.QNAP Systems QuTS hero is an operating system. QNAP Systems QTS and QNAP Systems QuTS hero have a code injection vulnerability that stems from...

PT-2025-10104

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description The issue is related to an improper neutralization of CRLF sequences, also known as 'CRLF Injection'. This could allow...

QNAP Systems QTS、QNAP Systems QuTS hero和QNAP Systems QuLog Center 代码问题漏洞

QNAP Systems QuLog Center and others are products of QNAP Systems, Inc.QNAP Systems QuLog Center is a report field that records events reported by the system.QNAP Systems QTS is an entry-level operating system.QNAP Systems QuTS hero is an operating system. Systems QuTS hero is an operating system...

PT-2025-10111

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description A double free issue has been reported, potentially allowing remote attackers with administrator access to modify memor...

PT-2025-10110

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.2.3.3006 build 20250108 QNAP QuTS hero versions prior to h5.2.3.3006 build 20250108 Description An out-of-bounds write issue has been reported, potentially allowing remote attackers with administrator access to...

QNAP Systems QTS和QNAP Systems QuTS hero 信息泄露漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China's Weilian Technology QNAP Systems.QNAP Systems QTS is an entry operating system.QNAP Systems QuTS hero is an operating system. QNAP Systems QTS and QNAP Systems QuTS hero have an information disclosure vulnerability that...

CVE-2024-53699: Out-of-bounds Write

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the vulnerability in the following versions...

CVE-2024-53698: Double Free

A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify memory. We have already fixed the vulnerability in the following versions: QTS 5.2.3.3006 bui...

CVE-2024-53697: Out-of-bounds Write

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to modify or corrupt memory. We have already fixed the vulnerability in the following versions...

CVE-2024-53692: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to execute arbitrary commands. We have already fixed the vulnerability in the following versions:...

CVE-2024-13086: Exposure of Sensitive Information to an Unauthorized Actor

An exposure of sensitive information vulnerability has been reported to affect product. If exploited, the vulnerability could allow remote attackers to compromise the security of the system. We have already fixed the vulnerability in the following version: QTS 5.2.0.2851 build 20240808 and later...

CVE-2023-50358

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.5.2645 build 20240116 and later...

Qnap Certificate Validation DoS

The vulnerability of the QuTS operating systems and QTS network devices involves errors in the certificate validation process. Exploiting this vulnerability allows a malicious actor to cause service failures...

QuTS Operating Systems Network Devices Privilege Escalation

The vulnerability of the QuTS operating systems and QTS network devices involves insufficient handling of the format string. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information with root privileges...

QuTS Operating Systems Network Devices Privilege Escalation

The vulnerability of the QuTS operating systems and QTS network devices involves insufficient handling of the format string. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information with root privileges...

Qnap Authentication Bypass

The vulnerability of the QuTS operating systems and QTS network devices involves deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to compromise the target system remotely...

QTS Network Device Code Execution

The vulnerability of the QuTS operating systems and QTS network devices involves improper handling of data with URL encoding. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...