Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: QNAP Systems QTS, QTS and 3 more products 4.2.6, 4.3.3.1161 and 4 more versions Clear all filters
TI-2018-14141 CVE-2018-19953 · GHSA-8h8x-7j55-4jp9

Cross-site scripting in QNAP QTS

Priority CRITICAL 86KEV

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.30527 Published 2020-10-28 Fixed in 4.4.2.1231, 4.4.1.1201 +4 CWE-79
TI-2018-14137 CVE-2018-19949 · GHSA-h9cw-v634-8jcw

Improper input validation in QNAP QTS

Priority CRITICAL 100KEV

If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.3016 Published 2020-10-28 Fixed in 4.4.2.1231, 4.4.1.1201 +4 CWE-20