Lucene search
+L

1199 matches found

Cvelist
Cvelist
added 2024/04/26 3:00 p.m.41 views

CVE-2024-32766 QTS, QuTS hero, QuTScloud

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later...

10CVSS9.9AI score0.02315EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/04/26 12:00 a.m.6 views

QNAP Systems 多款产品路径遍历漏洞

QNAP Systems QuTScloud and others are products of China's Weilian Technology QNAP Systems.QNAP Systems QuTScloud is a cloud-optimized version of the QNAP NAS operating system.QNAP Systems QTS is an operating system for entry- to mid-range QNAP NAS use. QNAP Systems QuTS hero is an operating syste...

8.7CVSS6.5AI score0.4158EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/26 12:00 a.m.9 views

QNAP 多款产品操作系统命令注入漏洞

QNAP Systems QuTScloud and others are products of China Weilian Technology QNAP Systems.QNAP Systems QuTScloud is a cloud-optimized version of the QNAP NAS operating system.QNAP Systems QTS is an operating system for entry- to mid-range QNAP NAS use. QNAP Systems QuTS hero is an operating system...

7.5CVSS7.8AI score0.01436EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/26 12:00 a.m.10 views

PT-2024-14092

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 5.1.4.2596 build 20231128 QNAP QTS versions prior to 4.5.4.2627 build 20231225 QNAP QuTS hero versions prior to h5.1.3.2578 build 20231110 QNAP QuTS hero versions prior to h4.5.4.2626 build 20231225 QNAP QuTScloud...

8.7CVSS6.2AI score0.34818EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/04/26 12:00 a.m.9 views

QNAP多款产品 命令注入漏洞

QNAP Systems QuTScloud and others are products of China Weilian Technology QNAP Systems.QNAP Systems QuTScloud is a cloud-optimized version of the QNAP NAS operating system.QNAP Systems QTS is an operating system for entry- to mid-level QNAP NAS use. QNAP Systems QuTS hero is an operating system....

10CVSS7.5AI score0.02315EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/26 12:00 a.m.6 views

QNAP Systems QTS、QuTS hero和QuTScloud 输入验证错误漏洞

QNAP Systems QuTScloud and others are products of China-based Weilian Technology QNAP Systems.QNAP Systems QuTScloud is a cloud-optimized version of the QNAP NAS operating system.QNAP Systems QTS is an operating system for entry- to mid-range QNAP NAS use. QNAP Systems QuTS hero is an operating...

8.2CVSS6.9AI score0.00456EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/26 12:00 a.m.7 views

QNAP Systems QTS 和 QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP Systems QTS version 5.1.6.2722...

8.8CVSS7.3AI score0.00759EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/26 12:00 a.m.10 views

QNAP Systems QTS和QuTS hero 安全漏洞

QNAP Systems QTS and QNAP Systems QuTS hero are both products of China's Weilian Technology QNAP Systems.QNAP Systems QTS is an operating system used by entry to mid-level QNAP NAS.QNAP Systems QuTS hero is an operating system. A security vulnerability exists in QNAP Systems QTS and QuTS hero...

8.1CVSS6.8AI score0.00419EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/04/26 12:00 a.m.10 views

QNAP Systems QTS 安全漏洞

QNAP Systems QTS is an operating system used by China Weilian Technology QNAP Systems for entry to mid-level QNAP NAS. A security vulnerability exists in QNAP Systems QTS version 5.1.6.2722 and earlier, QuTS Hero h5.1.6.2734 and earlier, which stems from a failure to check the buffer copy input...

8.8CVSS7.3AI score0.00759EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/04/25 12:00 a.m.10 views

PT-2024-3534 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.6.2722 build 20240402 QuTS hero versions prior to h5.1.6.2734 build 20240414 Description: The issue is caused by a buffer copy without checking the size of the input, which may allow authenticated users to execute co...

8.8CVSS7.6AI score0.00759EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2024/04/25 12:00 a.m.8 views

PT-2024-3535 · Qnap · Qts +1

Name of the Vulnerable Software and Affected Versions: QTS versions prior to 5.1.6.2722 build 20240402 QuTS hero versions prior to h5.1.6.2734 build 20240414 Description: The issue is caused by a buffer copy without checking the size of input, which may allow authenticated users to execute code v...

8.8CVSS7.6AI score0.00759EPSS
SaveExploits0References10
BDU FSTEC
BDU FSTEC
added 2024/04/17 12:00 a.m.11 views

The vulnerability of the Quick.cgi file allows attackers to execute arbitrary commands on QTS, QuTS hero, and QuTScloud operating systems for network devices from Qnap.

The vulnerability of the Quick.cgi file exists in operating systems such as QTS, QuTS Hero, and QuTScloud, as well as in networking devices from Qnap. This vulnerability stems from the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this...

5.8CVSS7.2AI score0.8992EPSS
SaveExploits4References4
BDU FSTEC
BDU FSTEC
added 2024/03/20 12:00 a.m.11 views

The vulnerability of QTS, QuTS hero, and QuTScloud network devices from Qnap operating systems arises from the failure to eliminate special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.

The vulnerability of QTS, QuTS hero, and QuTScloud network devices from QNAP operating systems is related to the failure to take measures to neutralize special elements used in the operating system’s command set. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands...

8.3CVSS7.5AI score0.01496EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/19 12:00 a.m.11 views

Vulnerability of QTS, QuTS hero, and QuTScloud network devices from Qnap: a vulnerability related to writing data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of QTS, QuTS Hero, and QuTScloud network devices from QNAP operating systems is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS7.7AI score0.00547EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/19 12:00 a.m.8 views

Vulnerability of QTS, QuTS hero, and QuTScloud network devices from Qnap: a vulnerability related to writing data beyond the buffer in memory, allowing an attacker to execute arbitrary code.

The vulnerability of QTS, QuTS Hero, and QuTScloud network devices from QNAP operating systems is related to writing data beyond the buffer boundaries in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

8.3CVSS7.7AI score0.00547EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/03/12 12:00 a.m.23 views

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices stems from the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

5.8CVSS7.5AI score0.01108EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2024/03/12 12:00 a.m.15 views

QNAP QuTS hero Multiple OS Command Injection Vulnerabilities (QSA-24-12)

QNAP QuTS hero is prone to multiple OS command injection vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

8.8CVSS7.4AI score0.01049EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2024/03/12 12:00 a.m.16 views

QNAP QuTS hero XSS Vulnerability (QSA-24-11)

QNAP QuTS hero is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

4.9CVSS4.9AI score0.00333EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/03/11 12:00 a.m.8 views

The vulnerability of the QTS, QuTS Hero, QuTScloud, and myQNAPcloud operating systems exists due to the lack of measures to neutralize special elements, allowing attackers to execute arbitrary commands.

The vulnerability of the QTS, QuTS Hero, QuTScloud, and myQNAPcloud operating systems exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

4.3CVSS6.9AI score0.09409EPSS
SaveExploits0References2Affected Software1
OpenVAS
OpenVAS
added 2024/03/11 12:00 a.m.29 views

QNAP QuTS hero Multiple Vulnerabilities (QSA-24-09)

QNAP QuTS hero is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qutshero"; ifdescriptio...

9.8CVSS9.7AI score0.24365EPSS
SaveExploits0References1
Rows per page
Query Builder