Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
QnapQts

25 matches found

CVE
CVE•added 2020/10/28 6:15 p.m.•946 views

CVE-2018-19943

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20200410 and later QTS 4.4.1.1261 build 20200330 and later QTS 4.3.6.1263 build 20200330 and later QTS...

8CVSS5.5AI score0.05768EPSS
CVE
CVE•added 2024/05/21 4:15 p.m.•171 views

CVE-2024-27130

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following version:QTS 5.1.7.2770 build 20240...

8.8CVSS7.2AI score0.81292EPSS
CVE
CVE•added 2020/12/29 7:15 a.m.•105 views

CVE-2020-25847

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero.

8.8CVSS9.1AI score0.03053EPSS
CVE
CVE•added 2024/09/06 5:15 p.m.•102 views

CVE-2024-21898

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network.We have already fixed the vulnerability in the following versions:QTS 5.1.6.2722 build 20240402...

8.8CVSS8.9AI score0.01688EPSS
CVE
CVE•added 2022/05/05 5:15 p.m.•98 views

CVE-2021-44051

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS: QuTScl...

8.8CVSS8.9AI score0.01801EPSS
CVE
CVE•added 2024/05/21 4:15 p.m.•83 views

CVE-2024-21902

An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the fol...

8.1CVSS6.6AI score0.0046EPSS
CVE
CVE•added 2023/08/24 5:15 p.m.•79 views

CVE-2023-34971

An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to decrypt the data using brute force attacks via unspecified vectors. We have already fixed the vulnerability in the following v...

8.8CVSS7.6AI score0.00052EPSS
CVE
CVE•added 2024/09/06 5:15 p.m.•73 views

CVE-2023-51366

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions:QT...

8.7CVSS7.2AI score0.0012EPSS
CVE
CVE•added 2024/09/06 5:15 p.m.•69 views

CVE-2024-21897

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.6.2722 bui...

8.9CVSS6.4AI score0.00235EPSS
CVE
CVE•added 2024/05/21 4:15 p.m.•69 views

CVE-2024-27128

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version:QTS 5.1.7.27...

8.8CVSS6.9AI score0.00317EPSS
CVE
CVE•added 2024/05/21 4:15 p.m.•69 views

CVE-2024-27129

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version:QTS 5.1.7.27...

8.8CVSS6.9AI score0.00317EPSS
CVE
CVE•added 2022/05/05 5:15 p.m.•68 views

CVE-2021-44052

An improper link resolution before file access ('Link Following') vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS. If exploited, this vulnerability allows remote attackers to traverse the file system to unintended locations and read or overwrite the conte...

8.1CVSS7AI score0.00289EPSS
CVE
CVE•added 2024/09/06 5:15 p.m.•65 views

CVE-2024-32763

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.8.2...

8.8CVSS8.7AI score0.00687EPSS
CVE
CVE•added 2021/09/10 4:15 a.m.•63 views

CVE-2021-28816

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QTS, QuTScloud, QuTS hero: QTS 4.5.4.17...

8.8CVSS8.6AI score0.00697EPSS
CVE
CVE•added 2021/05/21 3:15 a.m.•61 views

CVE-2021-28798

A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.2.1630 Build 20210406...

8.8CVSS7.8AI score0.00399EPSS
CVE
CVE•added 2024/05/21 4:15 p.m.•53 views

CVE-2024-27127

A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute arbitrary code via a network. We have already fixed the vulnerability in the following version:QTS 5.1.7.2770 build 20240520 and...

8.8CVSS7.4AI score0.00363EPSS
CVE
CVE•added 2024/04/26 3:15 p.m.•51 views

CVE-2023-50362

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.6.2...

8.8CVSS7.1AI score0.00348EPSS
CVE
CVE•added 2024/04/26 3:15 p.m.•50 views

CVE-2023-50364

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.6.2...

8.8CVSS7.1AI score0.00172EPSS
CVE
CVE•added 2023/09/22 4:15 a.m.•47 views

CVE-2023-23362

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to execute commands via susceptible QNAP devices. We have already fixed the vulnerability in the following versions:QTS 5.0.1.2376 build 202304...

8.8CVSS8.8AI score0.00433EPSS
CVE
CVE•added 2024/09/06 5:15 p.m.•47 views

CVE-2023-34974

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.QuTScloud, QVR, QES are not affected. We have already fixed the vulnerability in the following versions:QTS 4...

8.8CVSS9AI score0.0015EPSS
CVE
CVE•added 2024/04/26 3:15 p.m.•47 views

CVE-2023-50361

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.6.2...

8.8CVSS7.1AI score0.00348EPSS
CVE
CVE•added 2024/09/06 5:15 p.m.•43 views

CVE-2023-51367

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.6.2722 build 2024...

8.8CVSS6.6AI score0.00422EPSS
CVE
CVE•added 2024/04/26 3:15 p.m.•42 views

CVE-2023-50363

An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network. We have already fixed the vulnerability in the following versions:QTS 5....

8.1CVSS7.2AI score0.00017EPSS
CVE
CVE•added 2024/02/02 4:15 p.m.•36 views

CVE-2023-39297

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.4.2596 build 2023112...

8.8CVSS9.3AI score0.00301EPSS
CVE
CVE•added 2024/02/02 4:15 p.m.•34 views

CVE-2023-47568

A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.5.2645 build 20240116 a...

8.8CVSS8.7AI score0.00113EPSS