Priority LOW 34
An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00588 · Published 2024-12-19 · Fixed in 5.0.1.2277, 4.5.4.2280 build 20230112 +3 CWE-400
Priority HIGH 65
A path traversal vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 8.7· Network · No auth · No interaction · EPSS 0.39663 · Published 2024-04-26 · Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-22
Priority MEDIUM 63
A path traversal vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 8.7· Network · No auth · No interaction · EPSS 0.34818 · Published 2024-04-26 · Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-22
Priority LOW 36
An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 8.2· Network · No auth · No interaction · EPSS 0.00456 · Published 2024-04-26 · Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-190
Priority LOW 38
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 7.5· Network · No auth · User interaction · EPSS 0.01436 · Published 2024-04-26 · Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-78
Priority MEDIUM 53
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.02315 · Published 2024-04-26 · Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-77
Priority MEDIUM 41
An injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.09409 · Published 2024-03-08 · Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-74
Priority HIGH 70
An improper authentication vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.24365 · Published 2024-03-08 · Fixed in 5.1.3.2578 build 20231110, 4.5.4.2627 build 20231225 +3 CWE-287
Priority LOW 22
A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00333 · Published 2024-03-08 · Fixed in c5.1.5.2651, 5.1.4.2596 build 20231128 +1 CWE-79
Priority MEDIUM 41
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1MEDIUM 5.8· Adjacent network · No auth · No interaction · EPSS 0.13523 · Published 2024-02-13 · Fixed in 5.1.5.2645 build 20240116, 4.5.4.2627 build 20231225 +7 CWE-78
Priority HIGH 79
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 8.3· Network · No auth · No interaction · EPSS 0.8992 · Published 2024-02-13 · Fixed in 5.1.5.2645 build 20240116, 4.x +3 CWE-77
Priority LOW 29
An unchecked return value vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00158 · Published 2024-02-02 · Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 CWE-252
Priority MEDIUM 41
A SQL injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00535 · Published 2024-02-02 · Fixed in 5.1.5.2645 build 20240116, 4.5.4.2627 build 20231225 +3 CWE-89
Priority LOW 34
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01108 · Published 2024-02-02 · Fixed in 5.1.5.2645 build 20240116, 4.5.4.2627 build 20231225 +3 CWE-78
Priority LOW 36
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01178 · Published 2024-02-02 · Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-78
Priority LOW 34
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0058 · Published 2024-02-02 · Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-120
Priority LOW 34
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0058 · Published 2024-02-02 · Fixed in 5.1.3.2578 build 20231110, h5.1.3.2578 build 20231110 +1 CWE-120
Priority LOW 34
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0058 · Published 2024-02-02 · Fixed in 5.1.4.2596 build 20231128, h5.1.4.2596 build 20231128 +1 CWE-120
Priority LOW 25
An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00437 · Published 2024-02-02 · Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-400
Priority LOW 25
A path traversal vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00481 · Published 2024-02-02 · Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-22
Priority MEDIUM 58
A path traversal vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1MEDIUM 5.5· Network · High privileges · No interaction · EPSS 0.00454 · Published 2024-02-02 · Fixed in 5.1.5.2645 build 20240116, h5.1.5.2647 build 20240118 +1 CWE-22
Priority MEDIUM 45
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01128 · Published 2024-02-02 · Fixed in 5.1.4.2596 build 20231128, 4.5.4.2627 build 20231225 +3 CWE-77
Priority LOW 34
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0058 · Published 2024-02-02 · Fixed in 5.1.4.2596 build 20231128, h5.1.4.2596 build 20231128 +1 CWE-120
Priority LOW 36
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00968 · Published 2024-02-02 · Fixed in 5.1.4.2596 build 20231128, h5.1.4.2596 build 20231128 +1 CWE-77
Priority LOW 34
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00968 · Published 2024-02-02 · Fixed in 5.1.4.2596 build 20231128, h5.1.4.2596 build 20231128 +1 CWE-77
Load more