Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
QnapQuts Hero*

14 matches found

CVE
CVE•added 2023/01/30 2:15 a.m.•115 views

CVE-2022-27596

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code.We have already fixed this vulnerability in the following versions of QuTS hero, QTS:QuTS hero h5.0.1.2248 build 20221215 and laterQTS 5....

9.8CVSS9.4AI score0.26008EPSS
CVE
CVE•added 2023/03/29 5:15 a.m.•92 views

CVE-2023-23355

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated administrators to execute commands via unspecified vectors.QES is not affected. We have already fixed the vulnerability in the following ver...

7.2CVSS6.9AI score0.0033EPSS
CVE
CVE•added 2023/08/24 5:15 p.m.•79 views

CVE-2023-34971

An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to decrypt the data using brute force attacks via unspecified vectors. We have already fixed the vulnerability in the following v...

8.8CVSS7.6AI score0.00052EPSS
CVE
CVE•added 2023/03/29 7:15 a.m.•55 views

CVE-2022-27598

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)...

2.7CVSS3.2AI score0.00264EPSS
CVE
CVE•added 2023/03/29 7:15 a.m.•53 views

CVE-2022-27597

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QTS, QuTS hero, QuTScloud, QVP (QVR Pro appliances)...

2.7CVSS3.2AI score0.00235EPSS
CVE
CVE•added 2023/08/24 5:15 p.m.•51 views

CVE-2023-34972

A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecified vectors. We have already fixed the vulnerabilit...

6.5CVSS4.8AI score0.00052EPSS
CVE
CVE•added 2023/10/06 5:15 p.m.•49 views

CVE-2023-32971

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:QT...

7.2CVSS5.7AI score0.00081EPSS
CVE
CVE•added 2023/09/22 4:15 a.m.•47 views

CVE-2023-23362

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to execute commands via susceptible QNAP devices. We have already fixed the vulnerability in the following versions:QTS 5.0.1.2376 build 202304...

8.8CVSS8.8AI score0.00433EPSS
CVE
CVE•added 2023/10/13 8:15 p.m.•47 views

CVE-2023-32974

A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions:QT...

7.5CVSS7.2AI score0.00305EPSS
CVE
CVE•added 2023/10/13 8:15 p.m.•46 views

CVE-2023-32970

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to launch a denial-of-service (DoS) attack via a network.QES is not affected. We have already fixed the vulnerability...

4.9CVSS5.1AI score0.00095EPSS
CVE
CVE•added 2023/08/24 5:15 p.m.•46 views

CVE-2023-34973

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors. We have already fixed the vulnerability in the following versions:QTS 5.0.1.2425 build 20230609 and later...

5.3CVSS4.6AI score0.00197EPSS
CVE
CVE•added 2023/10/13 8:15 p.m.•44 views

CVE-2023-32973

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:QT...

7.2CVSS5.7AI score0.00081EPSS
CVE
CVE•added 2023/10/06 5:15 p.m.•34 views

CVE-2023-32972

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions:QT...

7.2CVSS5.7AI score0.00081EPSS
CVE
CVE•added 2023/11/03 5:15 p.m.•34 views

CVE-2023-39301

A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read application data via a network. We have already fixed the vulnerability in the following versions:QTS 5.0.1....

4.3CVSS4.2AI score0.00195EPSS