Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
QnapQts

6 matches found

cve
cve•added 2024/03/08 5:15 p.m.•80 views

CVE-2024-21901

A SQL injection vulnerability has been reported to affect myQNAPcloud. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions:myQNAPcloud 1.0.52 ( 2023/11/24 ) and laterQTS 4....

4.7CVSS5AI score0.05105EPSS
cve
cve•added 2024/09/06 5:15 p.m.•63 views

CVE-2024-21906

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.8.2823 buil...

4.7CVSS5.2AI score0.00586EPSS
cve
cve•added 2024/09/06 5:15 p.m.•54 views

CVE-2023-50366

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.6...

4.8CVSS4.4AI score0.00071EPSS
cve
cve•added 2023/10/13 8:15 p.m.•46 views

CVE-2023-32970

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network.QES is not affected. We have already fixed the vulnerability...

4.9CVSS5.1AI score0.00095EPSS
cve
cve•added 2019/12/04 5:16 p.m.•41 views

CVE-2019-7197

A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability may allow an attacker to inject and execute scripts on the administrator console. To fix this vulnerability, QNAP recommend updating QTS to the latest version.

4.8CVSS4.9AI score0.0031EPSS
cve
cve•added 2023/11/03 5:15 p.m.•34 views

CVE-2023-39301

A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network. We have already fixed the vulnerability in the following versions:QTS 5.0.1....

4.3CVSS4.2AI score0.00195EPSS