Read the docs

QNAP

Records682All Threatist records
Exploited (KEV)14In CISA KEV
CVSS critical101CVSS 9.0–10.0
CVSS high234CVSS 7.0–8.9

Exploited now

QNAP records in CISA KEV
TI-2023-25733 QNAP VioStor NVR OS Command Injection Vulnerability Priority CRITICAL 97KEV 2023-12-21TI-2022-10581 QNAP Photo Station Externally Controlled Reference Vulnerability Priority CRITICAL 100KEV 2022-09-08TI-2019-05100 QNAP Photo Station Improper Access Control Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05101 QNAP QTS Improper Input Validation Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05102 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08TI-2019-05103 QNAP Photo Station Path Traversal Vulnerability Priority CRITICAL 100KEV 2022-06-08

Components

Products in the NVD configurations · select one to filter the records
Qts 283 records CRITICAL Quts Hero 234 records CRITICAL Qsync Central 62 records MEDIUM Qutscloud 62 records HIGH File Station 57 records LOW Photo Station 26 records CRITICAL Video Station 21 records MEDIUM Media Streaming Add-on 13 records MEDIUM

Records

62 records in Qutscloud · all components

TI-2023-25536 CVE-2023-47218 · GHSA-j269-5p85-wxpq

Command injection in QNAP QTS

Priority HIGH 79

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.8992 Published 2024-02-13 Fixed in 5.1.5.2645 build 20240116, 4.x +3 CWE-77
TI-2024-14559 CVE-2024-21899 · GHSA-mfjq-7ffc-qgmv

Improper authentication in QNAP QTS

Priority HIGH 70

An improper authentication vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24365 Published 2024-03-08 Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-287
TI-2023-09214 CVE-2023-23368 · GHSA-vccx-mhx2-8xvf

OS command injection in QNAP QTS

Priority HIGH 67

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.18363 Published 2023-11-03 Fixed in 5.0.1.2376 build 20230421, 4.5.4.2374 build 20230416 +3 CWE-78
TI-2023-28022 CVE-2023-51364 · GHSA-pvq7-259f-j6f4

Path traversal in QNAP QTS

Priority HIGH 65

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.39663 Published 2024-04-26 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-22
TI-2023-28023 CVE-2023-51365 · GHSA-p7j9-7qwr-c4hr

Path traversal in QNAP QTS

Priority MEDIUM 63

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.34818 Published 2024-04-26 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-22
TI-2023-24080 CVE-2023-45026 · GHSA-vg4f-g292-cmwp

Path traversal in QNAP QTS

Priority MEDIUM 58

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00454 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-22
TI-2024-21640 CVE-2024-32766 · GHSA-j64h-79xv-rx9g

Command injection in QNAP QTS

Priority MEDIUM 53

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02315 Published 2024-04-26 Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-77
TI-2023-20447 CVE-2023-39303 · GHSA-pg7w-g93j-pc6j

Improper authentication in QNAP QTS

Priority MEDIUM 48

An improper authentication vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00469 Published 2024-02-02 Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-287
TI-2023-24079 CVE-2023-45025 · GHSA-w4qh-vg3x-929v

Command injection in QNAP QTS

Priority MEDIUM 45

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01128 Published 2024-02-02 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-77
TI-2023-20441 CVE-2023-39297 · GHSA-x96x-gwv6-4324

OS command injection in QNAP QTS

Priority MEDIUM 43

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01405 Published 2024-02-02 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-78
TI-2023-09208 CVE-2023-23362 · GHSA-vw76-r5h7-p4w9

OS command injection in QNAP QTS

Priority MEDIUM 43

An OS command injection vulnerability has been reported to affect QNAP operating systems.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01597 Published 2023-09-22 Fixed in 5.0.1.2376 build 20230421, 4.5.4.2374 build 20230416 +3 CWE-78
TI-2024-14560 CVE-2024-21900 · GHSA-hx9j-hf4h-q659

Injection in QNAP QTS

Priority MEDIUM 41

An injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.09409 Published 2024-03-08 Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-74
TI-2023-27546 CVE-2023-50358 · GHSA-975j-m6j8-qh4v

OS command injection in QNAP QTS

Priority MEDIUM 41

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 5.8 Adjacent network No auth No interaction EPSS 0.13523 Published 2024-02-13 Fixed in 5.1.5.2645 build 20240116, 4.5.4.2627 build 20231225 +7 CWE-78
TI-2023-25736 CVE-2023-47568 · GHSA-phfj-2mq7-qmg7

SQL injection in QNAP QTS

Priority MEDIUM 41

A SQL injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00535 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, 4.5.4.2627 build 20231225 +3 CWE-89
TI-2021-19800 CVE-2021-44051 · GHSA-hp68-q6cw-rc79

Command injection in QNAP QuTScloud

Priority MEDIUM 41

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01659 Published 2022-05-05 Fixed in c5.0.1.1949, h5.0.0.1986 build 20220324 +1 CWE-77
TI-2023-16162 CVE-2023-32974 · GHSA-5488-g25c-556m

Path traversal in QNAP QTS

Priority MEDIUM 40

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00729 Published 2023-10-13 Fixed in 5.1.0.2444 build 20230629, h5.1.0.2424 build 20230609 +1 CWE-22
TI-2021-09807 CVE-2021-28816 · GHSA-pp5r-cwfq-7whf

Stack Buffer Overflow Vulnerabilities in QTS, QuTS hero, and QuTScloud

Priority MEDIUM 40

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00928 Published 2021-09-10 Fixed in 4.5.4.1715 build 20210630, 5.0.0.1716 build 20210701 +4 CWE-787
TI-2024-17980 CVE-2024-27124 · GHSA-w88f-3vrf-56wm

OS command injection in QNAP QTS

Priority LOW 38

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01436 Published 2024-04-26 Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-78
TI-2021-19801 CVE-2021-44052 · GHSA-q4mx-gr8m-q3rr

Arbitrary file read in QNAP QuTScloud

Priority LOW 38

An improper link resolution before file access ('Link Following') vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01591 Published 2022-05-05 Fixed in c5.0.1.1998, h4.5.4.1971 build 20220310 +7 CWE-59
TI-2023-09213 CVE-2023-23367 · GHSA-p49w-7qqv-rf9v

OS command injection in QNAP QTS

Priority LOW 37

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01496 Published 2023-11-10 Fixed in 5.0.1.2376 build 20230421, h5.0.1.2376 build 20230421 +1 CWE-78
TI-2024-14565 CVE-2024-21905 · GHSA-22fc-mghg-jrwm

Integer overflow in QNAP QTS

Priority LOW 36

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00456 Published 2024-04-26 Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-190
TI-2023-25734 CVE-2023-47566 · GHSA-grjm-vqpg-p65p

OS command injection in QNAP QTS

Priority LOW 36

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01178 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-78
TI-2023-21885 CVE-2023-41283 · GHSA-5g8q-6f25-m4g2

Command injection in QNAP QTS

Priority LOW 36

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00968 Published 2024-02-02 Fixed in 5.1.4.2596 build 20231128, h5.1.4.2596 build 20231128 +1 CWE-77
TI-2021-13385 CVE-2021-34343 · GHSA-h5w8-c4g8-8ch6

Buffer Overflow Vulnerability in QTS, QuTS hero, and QuTScloud

Priority LOW 36

A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0195 Published 2021-09-10 Fixed in 4.5.4.1715 build 20210630, 5.0.0.1716 build 20210701 +2 CWE-787
TI-2023-25735 CVE-2023-47567 · GHSA-996q-vfw9-5cfp

OS command injection in QNAP QTS

Priority LOW 34

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01108 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, 4.5.4.2627 build 20231225 +3 CWE-78
Load more
Open these records in search →