Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: QNAP Systems QTS, QuTS hero 5.1.8.2823 build 20240712, h5.1.8.2823 build 20240712 Clear all filters
TI-2024-25876 CVE-2024-38641 · GHSA-crwj-f9hc-c6g4

Command injection in QNAP QTS

Priority LOW 35

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 7.3 Physical No auth User interaction EPSS 0.00541 Published 2024-09-06 Fixed in 5.1.8.2823 build 20240712, h5.1.8.2823 build 20240712 CWE-77
TI-2024-21637 CVE-2024-32763 · GHSA-p6pf-4j65-mvw8

Buffer overflow in QNAP QTS

Priority LOW 25

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00576 Published 2024-09-06 Fixed in 5.1.8.2823 build 20240712, h5.1.8.2823 build 20240712 CWE-120
TI-2024-14566 CVE-2024-21906 · GHSA-2853-84mf-g278

OS command injection in QNAP QTS

Priority LOW 23

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.00815 Published 2024-09-06 Fixed in 5.1.8.2823 build 20240712, h5.1.8.2823 build 20240712 CWE-78