Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
QnapQts

25 matches found

CVE
CVE•added 2020/10/28 6:15 p.m.•945 views

CVE-2018-19953

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build ...

6.1CVSS6AI score0.40146EPSS
CVE
CVE•added 2022/05/05 5:15 p.m.•90 views

CVE-2021-44054

An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QuTSclou...

6.1CVSS5.2AI score0.00208EPSS
CVE
CVE•added 2024/03/08 5:15 p.m.•81 views

CVE-2024-21900

An injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.3.2578 build 20231110 and later...

6.5CVSS5.5AI score0.08842EPSS
CVE
CVE•added 2022/05/05 5:15 p.m.•79 views

CVE-2021-44053

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and QuTScl...

6.1CVSS5.7AI score0.00332EPSS
CVE
CVE•added 2024/09/06 5:15 p.m.•77 views

CVE-2024-21903

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.6.2722 buil...

6.6CVSS5.9AI score0.00586EPSS
CVE
CVE•added 2020/12/10 4:15 a.m.•72 views

CVE-2020-2495

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and...

6.1CVSS6.6AI score0.0027EPSS
CVE
CVE•added 2021/04/16 1:15 a.m.•65 views

CVE-2018-19942

A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 build 20210202 (and later) Q...

6.1CVSS6AI score0.0027EPSS
CVE
CVE•added 2020/12/10 4:15 a.m.•65 views

CVE-2020-2496

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and...

6.1CVSS6.6AI score0.0027EPSS
CVE
CVE•added 2020/12/10 4:15 a.m.•61 views

CVE-2020-2498

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in certificate configuration. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build...

6.1CVSS6.2AI score0.00145EPSS
CVE
CVE•added 2021/07/01 2:15 a.m.•61 views

CVE-2020-36194

An XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.2.1566 Build 20210202. QNAP Systems Inc. QuTS hero versions prior to h4.5....

6.1CVSS6AI score0.00317EPSS
CVE
CVE•added 2020/12/10 4:15 a.m.•60 views

CVE-2020-2497

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in System Connection Logs. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20...

6.1CVSS6.2AI score0.0027EPSS
CVE
CVE•added 2024/09/06 5:15 p.m.•56 views

CVE-2024-21904

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions:QT...

6.5CVSS5.8AI score0.0017EPSS
CVE
CVE•added 2018/04/30 1:29 p.m.•54 views

CVE-2018-0711

Cross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build 20180315, and their earlier versions could allow remote attackers to inject arbitrary web script or HTML.

6.1CVSS6AI score0.00229EPSS
CVE
CVE•added 2022/01/07 2:15 a.m.•53 views

CVE-2021-38674

A cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and QuTScloud: QuTS hero h4.5....

6.1CVSS5.1AI score0.0019EPSS
CVE
CVE•added 2023/08/24 5:15 p.m.•51 views

CVE-2023-34972

A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the vulnerabilit...

6.5CVSS4.8AI score0.00052EPSS
CVE
CVE•added 2021/09/10 4:15 a.m.•43 views

CVE-2018-19957

A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability allows remote attackers to launch privacy and security attacks. We have already fixed this vulnerability in the following versions: QTS 4.5.4.1...

6.1CVSS6.3AI score0.00223EPSS
CVE
CVE•added 2018/03/27 9:29 p.m.•40 views

CVE-2017-7631

Cross-site scripting (XSS) vulnerability in the share link function of File Station of QNAP 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML.

6.1CVSS6.1AI score0.0025EPSS
CVE
CVE•added 2018/11/30 2:29 p.m.•40 views

CVE-2018-0716

Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.

6.1CVSS6.2AI score0.00272EPSS
CVE
CVE•added 2024/09/06 5:15 p.m.•40 views

CVE-2023-51368

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to launch a denial-of-service (DoS) attack via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.6.2722 b...

6.5CVSS5.6AI score0.00184EPSS
CVE
CVE•added 2018/06/21 1:29 p.m.•39 views

CVE-2017-13072

Cross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20171213, QTS 4.3.4 build 20171223, and their earlier versions could allow remote attackers to inject Javascript code.

6.1CVSS6AI score0.00272EPSS
CVE
CVE•added 2023/12/08 4:15 p.m.•39 views

CVE-2023-23372

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to inject malicious code via a network. We have already fixed the vulnerability in the following versions:QTS 5.0.1.2425 build 20230609 an...

6.5CVSS5.9AI score0.00294EPSS
CVE
CVE•added 2018/03/27 9:29 p.m.•38 views

CVE-2017-7632

Cross-site scripting (XSS) vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to inject arbitrary web script or HTML.

6.1CVSS6AI score0.0025EPSS
CVE
CVE•added 2016/07/03 2:59 p.m.•36 views

CVE-2015-5664

Cross-site scripting (XSS) vulnerability in File Station in QNAP QTS before 4.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

6.1CVSS6AI score0.00309EPSS
CVE
CVE•added 2024/02/02 4:15 p.m.•29 views

CVE-2023-50359

An unchecked return value vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated administrators to place the system in a state that could lead to a crash or other unintended behaviors via unspecified vectors....

6.7CVSS6.4AI score0.00025EPSS
CVE
CVE•added 2024/02/02 4:15 p.m.•26 views

CVE-2023-32967

An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network.QTS 5.x, QuTS hero are not affected. We have already fixed the vulnerabil...

6.5CVSS6.5AI score0.00035EPSS