Qnap

Quts Hero

187 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2018-19941

  • EPSS 0.15%
  • Veröffentlicht 31.12.2020 17:15:12
  • Zuletzt bearbeitet 21.11.2024 03:58:51

A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information stored in cleartext inside cookies via certain widely-available tools. QNAP have already fixed this vulnerabilit...

8.8

CVE-2020-25847

  • EPSS 1.5%
  • Veröffentlicht 29.12.2020 07:15:13
  • Zuletzt bearbeitet 21.11.2024 05:18:53

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero.

6.1

CVE-2020-2498

  • EPSS 0.15%
  • Veröffentlicht 10.12.2020 04:15:12
  • Zuletzt bearbeitet 21.11.2024 05:25:21

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in certificate configuration. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1...

9.8

CVE-2019-7198

  • EPSS 3.07%
  • Veröffentlicht 10.12.2020 04:15:11
  • Zuletzt bearbeitet 21.11.2024 04:47:45

This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed this vulnerability in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and late...

6.1

CVE-2020-2495

  • EPSS 0.27%
  • Veröffentlicht 10.12.2020 04:15:11
  • Zuletzt bearbeitet 21.11.2024 05:25:20

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 202...

6.1

CVE-2020-2496

  • EPSS 0.33%
  • Veröffentlicht 10.12.2020 04:15:11
  • Zuletzt bearbeitet 21.11.2024 05:25:20

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 202...

6.1

CVE-2020-2497

  • EPSS 0.33%
  • Veröffentlicht 10.12.2020 04:15:11
  • Zuletzt bearbeitet 21.11.2024 05:25:20

If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code in System Connection Logs. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472...