Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

62 records

Priority LOW 34

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00588 Published 2024-12-19 Fixed in 5.0.1.2277, 4.5.4.2280 build 20230112 +3 CWE-400
TI-2023-28022 CVE-2023-51364 · GHSA-pvq7-259f-j6f4

Path traversal in QNAP QTS

Priority HIGH 65

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.39663 Published 2024-04-26 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-22
TI-2023-28023 CVE-2023-51365 · GHSA-p7j9-7qwr-c4hr

Path traversal in QNAP QTS

Priority MEDIUM 63

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.34818 Published 2024-04-26 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-22
TI-2024-14565 CVE-2024-21905 · GHSA-22fc-mghg-jrwm

Integer overflow in QNAP QTS

Priority LOW 36

An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00456 Published 2024-04-26 Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-190
TI-2024-17980 CVE-2024-27124 · GHSA-w88f-3vrf-56wm

OS command injection in QNAP QTS

Priority LOW 38

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.5 Network No auth User interaction EPSS 0.01436 Published 2024-04-26 Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-78
TI-2024-21640 CVE-2024-32766 · GHSA-j64h-79xv-rx9g

Command injection in QNAP QTS

Priority MEDIUM 53

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.02315 Published 2024-04-26 Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-77
TI-2024-14560 CVE-2024-21900 · GHSA-hx9j-hf4h-q659

Injection in QNAP QTS

Priority MEDIUM 41

An injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.09409 Published 2024-03-08 Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-74
TI-2024-14559 CVE-2024-21899 · GHSA-mfjq-7ffc-qgmv

Improper authentication in QNAP QTS

Priority HIGH 70

An improper authentication vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.24365 Published 2024-03-08 Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-287
TI-2023-16157 CVE-2023-32969 · GHSA-j32g-85qg-wf4w

Network & Virtual Switch

Priority LOW 22

A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00333 Published 2024-03-08 Fixed in c5.1.5.2651, 5.1.4.2596 build 20231128 +1 CWE-79
TI-2023-27546 CVE-2023-50358 · GHSA-975j-m6j8-qh4v

OS command injection in QNAP QTS

Priority MEDIUM 41

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 5.8 Adjacent network No auth No interaction EPSS 0.13523 Published 2024-02-13 Fixed in 5.1.5.2645 build 20240116, 4.5.4.2627 build 20231225 +7 CWE-78
TI-2023-25536 CVE-2023-47218 · GHSA-j269-5p85-wxpq

Command injection in QNAP QTS

Priority HIGH 79

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.8992 Published 2024-02-13 Fixed in 5.1.5.2645 build 20240116, 4.x +3 CWE-77
TI-2023-25736 CVE-2023-47568 · GHSA-phfj-2mq7-qmg7

SQL injection in QNAP QTS

Priority MEDIUM 41

A SQL injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00535 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, 4.5.4.2627 build 20231225 +3 CWE-89
TI-2023-25735 CVE-2023-47567 · GHSA-996q-vfw9-5cfp

OS command injection in QNAP QTS

Priority LOW 34

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01108 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, 4.5.4.2627 build 20231225 +3 CWE-78
TI-2023-25734 CVE-2023-47566 · GHSA-grjm-vqpg-p65p

OS command injection in QNAP QTS

Priority LOW 36

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01178 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-78
TI-2023-24085 CVE-2023-45037 · GHSA-23v9-73rv-qxqj

Buffer overflow in QNAP QTS

Priority LOW 34

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0058 Published 2024-02-02 Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-120
TI-2023-24084 CVE-2023-45036 · GHSA-gq9v-6frh-4qfx

Buffer overflow in QNAP QTS

Priority LOW 34

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0058 Published 2024-02-02 Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-120
TI-2023-24083 CVE-2023-45035 · GHSA-7w35-q47q-mvqv

Buffer overflow in QNAP QTS

Priority LOW 34

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0058 Published 2024-02-02 Fixed in 5.1.4.2596 build 20231128, h5.1.4.2596 build 20231128 +1 CWE-120
Priority LOW 25

An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00437 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-400
TI-2023-24081 CVE-2023-45027 · GHSA-g9v3-2ccp-qjx4

Path traversal in QNAP QTS

Priority LOW 25

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00481 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-22
TI-2023-24080 CVE-2023-45026 · GHSA-vg4f-g292-cmwp

Path traversal in QNAP QTS

Priority MEDIUM 58

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00454 Published 2024-02-02 Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-22
TI-2023-24079 CVE-2023-45025 · GHSA-w4qh-vg3x-929v

Command injection in QNAP QTS

Priority MEDIUM 45

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01128 Published 2024-02-02 Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-77
TI-2023-21893 CVE-2023-41292 · GHSA-cj8g-f3w9-gg24

Buffer overflow in QNAP QTS

Priority LOW 34

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0058 Published 2024-02-02 Fixed in 5.1.4.2596 build 20231128, h5.1.4.2596 build 20231128 +1 CWE-120
TI-2023-21885 CVE-2023-41283 · GHSA-5g8q-6f25-m4g2

Command injection in QNAP QTS

Priority LOW 36

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00968 Published 2024-02-02 Fixed in 5.1.4.2596 build 20231128, h5.1.4.2596 build 20231128 +1 CWE-77
TI-2023-21884 CVE-2023-41282 · GHSA-xxpm-69vv-79hr

Command injection in QNAP QTS

Priority LOW 34

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00968 Published 2024-02-02 Fixed in 5.1.4.2596 build 20231128, h5.1.4.2596 build 20231128 +1 CWE-77
Load more