Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
QnapQts

28 matches found

CVE
CVE•added 2021/04/17 4:15 a.m.•1154 views

CVE-2020-2509

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 Build 20210202 and later ...

9.8CVSS9.8AI score0.74036EPSS
In wild
CVE
CVE•added 2020/10/28 6:15 p.m.•981 views

CVE-2018-19949

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20200302; QTS 4.4.1.1201 on build 20200130; QTS 4.3.6.1218 on build 20200214; QTS 4.3.4.1190 on build 20...

9.8CVSS9.6AI score0.57621EPSS
In wild
CVE
CVE•added 2021/04/17 4:15 a.m.•286 views

CVE-2020-36195

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote attackers to obtain application information. QNAP has already fixed this vulnerability in the following versions of Multimedia ...

9.8CVSS9.7AI score0.02018EPSS
In wild
CVE
CVE•added 2023/11/03 5:15 p.m.•172 views

CVE-2023-23368

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions:QTS 5.0.1.2376 build 20230421 and laterQTS...

9.8CVSS9.7AI score0.03562EPSS
CVE
CVE•added 2024/03/08 5:15 p.m.•120 views

CVE-2024-21899

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.3.2578 bui...

9.8CVSS9.4AI score0.10587EPSS
In wild
CVE
CVE•added 2023/01/30 2:15 a.m.•116 views

CVE-2022-27596

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code.We have already fixed this vulnerability in the following versions of QuTS hero, QTS:QuTS hero h5.0.1.2248 build 20221215 and laterQTS 5....

9.8CVSS9.4AI score0.26008EPSS
CVE
CVE•added 2017/12/21 3:29 p.m.•65 views

CVE-2017-17033

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

9.8CVSS9.9AI score0.01888EPSS
Web
CVE
CVE•added 2021/07/01 2:15 a.m.•62 views

CVE-2021-28802

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc. ...

9.8CVSS10AI score0.01062EPSS
CVE
CVE•added 2021/07/01 2:15 a.m.•61 views

CVE-2021-28804

A command injection vulnerabilities have been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.1.1540 build 20210107. QNAP Systems Inc. ...

9.8CVSS10AI score0.01062EPSS
CVE
CVE•added 2023/11/03 5:15 p.m.•61 views

CVE-2023-23369

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions:Multimedia Console 2.1.2 ( 2023/05/04 ) an...

9.8CVSS9.6AI score0.14766EPSS
CVE
CVE•added 2020/12/10 4:15 a.m.•59 views

CVE-2019-7198

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5.1.1456 build 20201015 and later QTS 4.4...

9.8CVSS9.9AI score0.03068EPSS
CVE
CVE•added 2017/09/14 3:29 p.m.•56 views

CVE-2017-13067

QNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all versions prior to QTS 4.2.6 build 20170905 and QTS 4.3.3.0299 build 20170901. This particular vulnerability allows a remote attacker to execute commands on a QNAP NAS using a transcoding service on port 92...

9.8CVSS9.8AI score0.51069EPSS
Web
CVE
CVE•added 2017/12/21 3:29 p.m.•56 views

CVE-2017-17027

A buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

9.8CVSS9.9AI score0.03236EPSS
CVE
CVE•added 2024/02/02 4:15 p.m.•52 views

CVE-2023-45025

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.4.2596 build 20231128 and laterQTS...

9.8CVSS9.7AI score0.0018EPSS
CVE
CVE•added 2018/11/28 4:29 p.m.•51 views

CVE-2018-14749

Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could have unspecified impact on the NAS.

9.8CVSS9.7AI score0.00543EPSS
CVE
CVE•added 2023/09/22 4:15 a.m.•51 views

CVE-2023-23363

A buffer copy without checking size of input vulnerability has been reported to affect QNAP operating system. If exploited, the vulnerability possibly allows remote users to execute code via unspecified vectors. We have already fixed the vulnerability in the following versions:QTS 4.3.6.2441 build ...

9.8CVSS9.3AI score0.01279EPSS
CVE
CVE•added 2020/12/31 5:15 p.m.•50 views

CVE-2018-19945

A vulnerability has been reported to affect earlier QNAP devices running QTS 4.3.4 to 4.3.6. Caused by improper limitations of a pathname to a restricted directory, this vulnerability allows for renaming arbitrary files on the target system, if exploited. QNAP have already fixed this vulnerability ...

9.1CVSS9.3AI score0.00399EPSS
CVE
CVE•added 2017/12/21 3:29 p.m.•49 views

CVE-2017-17030

A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

9.8CVSS9.9AI score0.03236EPSS
CVE
CVE•added 2017/12/21 3:29 p.m.•47 views

CVE-2017-17029

A buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

9.8CVSS9.9AI score0.03236EPSS
CVE
CVE•added 2019/12/05 5:15 p.m.•45 views

CVE-2019-7183

This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions.

9.8CVSS9.3AI score0.01246EPSS
CVE
CVE•added 2017/12/21 3:29 p.m.•44 views

CVE-2017-17028

A buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

9.8CVSS9.8AI score0.03236EPSS
CVE
CVE•added 2017/12/21 3:29 p.m.•44 views

CVE-2017-17032

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

9.8CVSS9.9AI score0.03236EPSS
CVE
CVE•added 2018/06/21 1:29 p.m.•44 views

CVE-2018-0712

Command injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build 20180402, QTS 4.3.4 build 20180413 and their earlier versions could allow remote attackers to run arbitrary commands or install malware on the NAS.

9.8CVSS9.7AI score0.02732EPSS
CVE
CVE•added 2015/10/16 1:59 a.m.•42 views

CVE-2015-6003

Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

9.3CVSS7AI score0.02509EPSS
CVE
CVE•added 2017/12/21 3:29 p.m.•41 views

CVE-2017-17031

A buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4.3.3.0378 build 20171117, 4.3.4.0387 (Beta 2) build 20171116 and earlier could allow remote attackers to execute arbitrary code on NAS devices.

9.8CVSS9.9AI score0.03236EPSS
CVE
CVE•added 2019/12/04 5:16 p.m.•38 views

CVE-2018-0730

This command injection vulnerability in File Station allows attackers to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.

9.8CVSS9.7AI score0.01203EPSS
CVE
CVE•added 2024/02/02 4:15 p.m.•36 views

CVE-2023-39303

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions:QTS 5.1.3.2578 bui...

9.8CVSS9.3AI score0.00256EPSS
CVE
CVE•added 2021/06/24 7:15 a.m.•35 views

CVE-2021-28800

A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. This issue affects: QNAP Systems Inc. QTS versions prior to 4.3.6.1663 Build 20210504;...

9.8CVSS9.4AI score0.00784EPSS