Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

qnap qts 4.3.6.0895 vulnerabilities and exploits

(subscribe to this query)
9.8
CVSSv3
CVE-2019-7193
This improper input validation vulnerability allows remote malicious users to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
Qnap Qts 4.3.6.0895Qnap Qts 4.3.6.0907Qnap Qts 4.3.6.0923Qnap Qts 4.3.6.0944Qnap Qts 4.3.6.0959Qnap Qts 4.3.6.0979Qnap Qts 4.3.6.0993Qnap Qts 4.3.6.1013Qnap Qts 4.3.6.1033Qnap Qts 4.4.1.0948Qnap Qts 4.4.1.0949Qnap Qts 4.4.1.0978Qnap Qts 4.4.1.0998Qnap Qts 4.4.1.0999Qnap Qts 4.4.1.1031Qnap Qts 4.4.1.1033
9.8
CVSSv3
CVE-2019-7183
This improper link resolution vulnerability allows remote malicious users to access system files. To fix this vulnerability, QNAP recommend updating QTS to their latest versions.
Qnap Qts 4.2.6Qnap Qts 4.3.3.0868Qnap Qts 4.3.3.0998Qnap Qts 4.3.4.0899Qnap Qts 4.3.4.1029Qnap Qts 4.3.6.0895Qnap Qts 4.3.6.0907Qnap Qts 4.3.6.0923Qnap Qts 4.3.6.0944Qnap Qts 4.3.6.0959Qnap Qts 4.3.6.0979Qnap Qts 4.3.6.0993Qnap Qts 4.3.6.1013Qnap Qts 4.3.6.1033Qnap Qts 4.4.1.0948Qnap Qts 4.4.1.0949Qnap Qts 4.4.1.0978Qnap Qts 4.4.1.0998Qnap Qts 4.4.1.0999Qnap Qts 4.4.1.1031Qnap Qts 4.4.1.1033Qnap Qts 4.4.1.1064
9.8
CVSSv3
CVE-2018-0730
This command injection vulnerability in File Station allows malicious users to execute commands on the affected device. To fix the vulnerability, QNAP recommend updating QTS to their latest versions.
Qnap Qts 4.2.6Qnap Qts 4.3.3.0868Qnap Qts 4.3.3.0998Qnap Qts 4.3.4.0899Qnap Qts 4.3.4.1029Qnap Qts 4.3.6.0895Qnap Qts 4.3.6.0907Qnap Qts 4.3.6.0923Qnap Qts 4.3.6.0944Qnap Qts 4.3.6.0959Qnap Qts 4.3.6.0979Qnap Qts 4.3.6.0993Qnap Qts 4.3.6.1013Qnap Qts 4.3.6.1033Qnap Qts 4.4.1.0948Qnap Qts 4.4.1.0949Qnap Qts 4.4.1.0978Qnap Qts 4.4.1.0998Qnap Qts 4.4.1.0999Qnap Qts 4.4.1.1031Qnap Qts 4.4.1.1033Qnap Qts 4.4.1.1064
9.8
CVSSv3
CVE-2020-36195
An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote malicious users to obtain application information. QNAP has already fixed this vulnerability in the followin...
Qnap QtsQnap Qts 4.3.3Qnap Qts 4.3.3.0095Qnap Qts 4.3.3.0096Qnap Qts 4.3.3.0136Qnap Qts 4.3.3.0154Qnap Qts 4.3.3.0174Qnap Qts 4.3.3.0188Qnap Qts 4.3.3.0210Qnap Qts 4.3.3.0229Qnap Qts 4.3.3.0238Qnap Qts 4.3.3.0262Qnap Qts 4.3.3.0299Qnap Qts 4.3.3.0351Qnap Qts 4.3.3.0353Qnap Qts 4.3.3.0361Qnap Qts 4.3.3.0369Qnap Qts 4.3.3.0378Qnap Qts 4.3.3.0396Qnap Qts 4.3.3.0404Qnap Qts 4.3.3.0416Qnap Qts 4.3.3.0418
9.8
CVSSv3
CVE-2020-2509
A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows malicious users to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 ...
Qnap Qts 4.3.4.0387Qnap Qts 4.3.4.0370Qnap Qts 4.3.4.0372Qnap Qts 4.3.4.0374Qnap Qts 4.3.4.0358Qnap Qts 4.3.4.0604Qnap Qts 4.3.4.0597Qnap Qts 4.3.4.0593Qnap Qts 4.3.4.0569Qnap Qts 4.3.4.0561Qnap Qts 4.3.4.0516Qnap Qts 4.3.4.0526Qnap Qts 4.3.4.0551Qnap Qts 4.3.4.0557Qnap Qts 4.3.6.1033Qnap Qts 4.3.6.1013Qnap Qts 4.3.6.0993Qnap Qts 4.3.6.0979Qnap Qts 4.3.6.0959Qnap Qts 4.3.6.0944Qnap Qts 4.3.6.0923Qnap Qts 4.3.6.0907
6.1
CVSSv3
CVE-2018-19942
A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station. If exploited, this vulnerability allows remote malicious users to inject malicious code. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 bui...
Qnap Quts HeroQnap Quts Hero H4.5.1Qnap QtsQnap Qts 4.2.6Qnap Qts 4.3.3Qnap Qts 4.3.3.0095Qnap Qts 4.3.3.0096Qnap Qts 4.3.3.0136Qnap Qts 4.3.3.0154Qnap Qts 4.3.3.0174Qnap Qts 4.3.3.0188Qnap Qts 4.3.3.0210Qnap Qts 4.3.3.0229Qnap Qts 4.3.3.0238Qnap Qts 4.3.3.0262Qnap Qts 4.3.3.0299Qnap Qts 4.3.3.0351Qnap Qts 4.3.3.0353Qnap Qts 4.3.3.0361Qnap Qts 4.3.3.0369Qnap Qts 4.3.3.0378Qnap Qts 4.3.3.0396
9.8
CVSSv3
CVE-2023-23369
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1...
Qnap Qts 5.1.0.2348Qnap Qts 4.3.6.1831Qnap Qts 4.3.6.1750Qnap Qts 4.3.6.1711Qnap Qts 4.3.6.1663Qnap Qts 4.3.6.2050Qnap Qts 4.3.6.1965Qnap Qts 4.3.6.1907Qnap Qts 4.3.6.2232Qnap Qts 4.3.6.1620Qnap Qts 4.3.6.1446Qnap Qts 4.3.6.1411Qnap Qts 4.3.6.1333Qnap Qts 4.3.6.1286Qnap Qts 4.3.6.1263Qnap Qts 4.3.6.1218Qnap Qts 4.3.6.1154Qnap Qts 4.3.6.1070Qnap Qts 4.3.6.1033Qnap Qts 4.3.6.1013Qnap Qts 4.3.6.0993Qnap Qts 4.3.6.0979
9.1
CVSSv3
CVE-2018-19945
A vulnerability has been reported to affect earlier QNAP devices running QTS 4.3.4 to 4.3.6. Caused by improper limitations of a pathname to a restricted directory, this vulnerability allows for renaming arbitrary files on the target system, if exploited. QNAP have already fixed ...
Qnap Qts
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook