Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

TI-2024-35897 CVE-2024-53699 · GHSA-3p6v-922c-mrw6

Out-of-bounds write in QNAP QTS

Priority LOW 12

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00503 Published 2025-03-07 Fixed in 5.2.3.3006 build 20250108, h5.2.3.3006 build 20250108 CWE-787
TI-2024-35896 CVE-2024-53698 · GHSA-42qm-8j3v-68c9

Double free in QNAP QTS

Priority LOW 11

A double free vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00389 Published 2025-03-07 Fixed in 5.2.3.3006 build 20250108, h5.2.3.3006 build 20250108 CWE-415
TI-2024-35895 CVE-2024-53697 · GHSA-24g2-6vx6-3vf6

Out-of-bounds write in QNAP QTS

Priority LOW 12

An out-of-bounds write vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0LOW 2.1 Network High privileges No interaction EPSS 0.00503 Published 2025-03-07 Fixed in 5.2.3.3006 build 20250108, h5.2.3.3006 build 20250108 CWE-787
Priority LOW 32

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00494 Published 2025-03-07 Fixed in 5.2.3.3006 build 20250108, h5.2.3.3006 build 20250108 CWE-400
TI-2024-35890 CVE-2024-53692 · GHSA-6r8h-8x56-2jqr

Command injection in QNAP QTS

Priority LOW 25

A command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.0083 Published 2025-03-07 Fixed in 5.2.3.3006 build 20250108, h5.2.3.3006 build 20250108 CWE-77
TI-2024-33838 CVE-2024-50405 · GHSA-744j-f9r9-w6h7

Code injection in QNAP QTS

Priority LOW 23

An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00412 Published 2025-03-07 Fixed in 5.2.3.3006 build 20250108, h5.2.3.3006 build 20250108 CWE-93