Skip to content

Qnap Qts vulnerabilities

qnap qsync central, qts +1 moreCross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2,...CVE-2018-07166.1 MediumNovember 30, 2018
qnap qtsBuffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3...CVE-2018-147499.8 CriticalNovember 28, 2018
qnap qtsImproper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4...CVE-2018-147487.5 HighNovember 28, 2018
qnap qtsNULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS...CVE-2018-147477.5 HighNovember 28, 2018
qnap qtsCommand Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3...CVE-2018-147469.8 CriticalNovember 28, 2018
qnap qtsSecurity Advisory for Vulnerabilities in QTSCVE-2018-07217.7 HighNovember 27, 2018
qnap qtsSecurity Advisory for Vulnerabilities in QTSCVE-2018-07195.5 MediumNovember 27, 2018
qnap helpdesk, helpdesk in qts +1 moreCommand injection vulnerability in Helpdesk versions 1.1.21 and earlier in QNAP QTS 4.2.6 build...CVE-2018-07149.8 CriticalAugust 13, 2018
qnap qts, ldap server in qts +1 moreCommand injection vulnerability in LDAP Server in QNAP QTS 4.2.6 build 20171208, QTS 4.3.3 build...CVE-2018-07129.8 CriticalJune 21, 2018
qnap qts, app center in qts +1 moreCross-site scripting (XSS) vulnerability in App Center in QNAP QTS 4.2.6 build 20171208, QTS 4.3...CVE-2017-130726.1 MediumJune 21, 2018
qnap qtsCross-site scripting (XSS) vulnerability in QNAP QTS 4.3.3 build 20180126, QTS 4.3.4 build...CVE-2018-07116.1 MediumApril 30, 2018
qnap qtsCross-site scripting (XSS) vulnerability in File Station of QNAP QTS 4.2.6 build 20171026, QTS 4...CVE-2017-76326.1 MediumMarch 27, 2018
qnap qtsCross-site scripting (XSS) vulnerability in the share link function of File Station of QNAP 4.2.6...CVE-2017-76316.1 MediumMarch 27, 2018
qnap qtsQNAP QTS 4.2.6 build 20171026, QTS 4.3.3 build 20170727 and earlier allows remote attackers to...CVE-2017-76305.3 MediumMarch 27, 2018
qnap qts, qts notification function +1 moreA buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4...CVE-2017-170339.8 CriticalDecember 21, 2017
qnap qts, qts password function +1 moreA buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4...CVE-2017-170329.8 CriticalDecember 21, 2017
qnap qts, qts password function +1 moreA buffer overflow vulnerability in password function in QNAP QTS version 4.2.6 build 20171026, 4...CVE-2017-170319.8 CriticalDecember 21, 2017
qnap qts, qts login function +1 moreA buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3...CVE-2017-170309.8 CriticalDecember 21, 2017
qnap qts, qts login function +1 moreA buffer overflow vulnerability in login function in QNAP QTS version 4.2.6 build 20171026, 4.3.3...CVE-2017-170299.8 CriticalDecember 21, 2017
qnap qts, qts external device function +1 moreA buffer overflow vulnerability in external device function in QNAP QTS version 4.2.6 build...CVE-2017-170289.8 CriticalDecember 21, 2017
qnap qts, qts ftp service +1 moreA buffer overflow vulnerability in FTP service in QNAP QTS version 4.2.6 build 20171026, 4.3.3...CVE-2017-170279.8 CriticalDecember 21, 2017
qnap helpdesk app, qts helpdesk +1 moreQNAP has already patched this vulnerability. This security concern allows a remote attacker to...CVE-2017-13068Public exploit7.5 HighOctober 6, 2017
qnap qtsIn the medialibrary component in QNAP NAS 4.3.3.0229, an un-authenticated, remote attacker can...CVE-2017-107009.8 CriticalSeptember 19, 2017
qnap qts, qts media libary product +1 moreQNAP has patched a remote code execution vulnerability affecting the QTS Media Library in all...CVE-2017-13067Public exploitEPSS 16.7%9.8 CriticalSeptember 14, 2017
qnap qtsThis command injection vulnerability in QTS allows attackers to run arbitrary commands in the...CVE-2017-787610.0 CriticalJune 15, 2017
qnap qtsQNAP QTS before 4.2.6 build 20170517 has a flaw in the change password function.CVE-2017-76297.5 HighJune 15, 2017
qnap qtsQNAP QTS before 4.2.4 Build 20170313 allows attackers to execute arbitrary commands via...CVE-2017-6361Public exploitEPSS 56.8%9.8 CriticalMarch 23, 2017
qnap qtsQNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and obtain...CVE-2017-6360Public exploitEPSS 66.1%9.8 CriticalMarch 23, 2017
qnap qtsQNAP QTS before 4.2.4 Build 20170313 allows attackers to gain administrator privileges and...CVE-2017-6359Public exploitEPSS 26.9%9.8 CriticalMarch 23, 2017
qnap qtsQNAP QTS before 4.2.4 Build 20170313 allows local users to obtain sensitive Domain Administrator...CVE-2017-5227Public exploit7.5 HighMarch 23, 2017
qnap qtsCross-site scripting (XSS) vulnerability in File Station in QNAP QTS before 4.2.0 allows remote...CVE-2015-56646.1 MediumJuly 3, 2016
qnap qtsDirectory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2...CVE-2015-60039.3 HighOctober 16, 2015
gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function...CVE-2014-7169In KEVPublic exploitFix availableEPSS 99.9%9.8 CriticalSeptember 25, 2014
gnu bash, apple mac os x, arista eos +71 more +73 moreGNU Bash through 4.3 processes trailing strings after function definitions in the values of...CVE-2014-6271In KEVPublic exploitFix availableEPSS 100.0%9.8 CriticalSeptember 24, 2014
qnap qtsAbsolute path traversal vulnerability in cgi-bin/jc.cgi in QNAP QTS before 4.1.0 allows remote...CVE-2013-71747.8 HighJanuary 9, 2014