Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

7 records

TI-2024-14563 CVE-2024-21903 · GHSA-mg39-cgxc-7mgj

Command injection in QNAP QTS

Priority LOW 31

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00801 Published 2024-09-06 Fixed in 5.1.6.2722 build 20240402, h5.1.6.2734 build 20240414 CWE-77
TI-2024-14558 CVE-2024-21898 · GHSA-h3vx-pj44-h43r

OS command injection in QNAP QTS

Priority MEDIUM 42

An OS command injection vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01214 Published 2024-09-06 Fixed in 5.1.6.2722 build 20240402, h5.1.6.2734 build 20240414 CWE-78
TI-2024-14557 CVE-2024-21897 · GHSA-6gf3-qc4m-f686

Cross-site scripting in QNAP QTS

Priority LOW 38

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.9 Network Low privileges User interaction EPSS 0.00326 Published 2024-09-06 Fixed in 5.1.6.2722 build 20240402, h5.1.6.2734 build 20240414 CWE-79
TI-2023-28026 CVE-2023-51368 · GHSA-rvfh-6hc5-7vqc

NULL pointer dereference in QNAP QTS

Priority LOW 29

A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0031 Published 2024-09-06 Fixed in 5.1.6.2722 build 20240402, h5.1.6.2734 build 20240414 CWE-476
TI-2023-28025 CVE-2023-51367 · GHSA-x9c2-9mp9-fq3m

Buffer overflow in QNAP QTS

Priority LOW 38

A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00391 Published 2024-09-06 Fixed in 5.1.6.2722 build 20240402, h5.1.x CWE-120
TI-2023-28024 CVE-2023-51366 · GHSA-vpgf-5c72-x83x

Path traversal in QNAP QTS

Priority LOW 38

A path traversal vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1HIGH 8.7 Network No auth No interaction EPSS 0.00472 Published 2024-09-06 Fixed in 5.1.6.2722 build 20240402, h5.1.x CWE-22
TI-2023-27553 CVE-2023-50366 · GHSA-mq59-j27v-h664

Cross-site scripting in QNAP QTS

Priority LOW 22

A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00243 Published 2024-09-06 Fixed in 5.1.6.2722 build 20240402, h5.1.6.2734 build 20240414 CWE-79