Priority LOW 31
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1MEDIUM 6.6· Network · High privileges · No interaction · EPSS 0.00801 · Published 2024-09-06 · Fixed in 5.1.6.2722 build 20240402, h5.1.6.2734 build 20240414 CWE-77
Priority MEDIUM 42
An OS command injection vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01214 · Published 2024-09-06 · Fixed in 5.1.6.2722 build 20240402, h5.1.6.2734 build 20240414 CWE-78
Priority LOW 38
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 8.9· Network · Low privileges · User interaction · EPSS 0.00326 · Published 2024-09-06 · Fixed in 5.1.6.2722 build 20240402, h5.1.6.2734 build 20240414 CWE-79
Priority LOW 29
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.0031 · Published 2024-09-06 · Fixed in 5.1.6.2722 build 20240402, h5.1.6.2734 build 20240414 CWE-476
Priority LOW 38
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00391 · Published 2024-09-06 · Fixed in 5.1.6.2722 build 20240402, h5.1.x CWE-120
Priority LOW 38
A path traversal vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1HIGH 8.7· Network · No auth · No interaction · EPSS 0.00472 · Published 2024-09-06 · Fixed in 5.1.6.2722 build 20240402, h5.1.x CWE-22
Priority LOW 22
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00243 · Published 2024-09-06 · Fixed in 5.1.6.2722 build 20240402, h5.1.6.2734 build 20240414 CWE-79