Qnap

Qts

237 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-34971

  • EPSS 0.05%
  • Veröffentlicht 24.08.2023 17:15:08
  • Zuletzt bearbeitet 21.11.2024 08:07:44

An inadequate encryption strength vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to decrypt the data using brute force attacks via unspecified vectors. We have ...

6.5

CVE-2023-34972

  • EPSS 0.05%
  • Veröffentlicht 24.08.2023 17:15:08
  • Zuletzt bearbeitet 21.11.2024 08:07:45

A cleartext transmission of sensitive information vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows local network clients to read the contents of unexpected sensitive data via unspecifie...

5.3

CVE-2023-34973

  • EPSS 0.2%
  • Veröffentlicht 24.08.2023 17:15:08
  • Zuletzt bearbeitet 21.11.2024 08:07:45

An insufficient entropy vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote users to predict secret via unspecified vectors. We have already fixed the vulnerability in the followin...

2.7

CVE-2022-27597

  • EPSS 0.26%
  • Veröffentlicht 29.03.2023 07:15:08
  • Zuletzt bearbeitet 21.11.2024 06:56:00

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QT...

2.7

CVE-2022-27598

  • EPSS 0.29%
  • Veröffentlicht 29.03.2023 07:15:08
  • Zuletzt bearbeitet 21.11.2024 06:56:00

A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authenticated administrators to get secret values. The vulnerability affects the following QNAP operating systems: QT...

7.2

CVE-2023-23355

  • EPSS 0.33%
  • Veröffentlicht 29.03.2023 05:15:07
  • Zuletzt bearbeitet 21.11.2024 07:46:01

An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated administrators to execute commands via unspecified vectors. QES is not affected. We have a...

9.8

CVE-2022-27596

  • EPSS 26.01%
  • Veröffentlicht 30.01.2023 02:15:08
  • Zuletzt bearbeitet 21.11.2024 06:56:00

A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QuTS hero, QTS: Q...

8.8

CVE-2021-44051

  • EPSS 1.8%
  • Veröffentlicht 05.05.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 06:30:18

A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following...

8.1

CVE-2021-44052

  • EPSS 0.42%
  • Veröffentlicht 05.05.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 06:30:18

An improper link resolution before file access ('Link Following') vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS. If exploited, this vulnerability allows remote attackers to traverse the file system to uni...

6.1

CVE-2021-44053

  • EPSS 0.42%
  • Veröffentlicht 05.05.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 06:30:18

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in th...