Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

qnap qts 4.3.3.1315 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2

CVE-2020-36195

An SQL injection vulnerability has been reported to affect QNAP NAS running Multimedia Console or the Media Streaming add-on. If exploited, the vulnerability allows remote malicious users to obtain application information. QNAP has already fixed this vulnerability in the followin...
Qnap Qts 4.3.3.0229Qnap Qts 4.3.3Qnap Qts 4.3.3.0570Qnap Qts 4.3.3.0546Qnap Qts 4.3.3.0514Qnap Qts 4.3.6.1033Qnap Qts 4.3.6.1013Qnap Qts 4.3.6.0993Qnap Qts 4.3.6.0979Qnap Qts 4.3.6.0959Qnap Qts 4.3.6.0944Qnap Qts 4.3.6.0923Qnap Qts 4.3.6.0907Qnap Qts 4.3.6.0895Qnap Qts 4.3.3.0998Qnap Qts 4.3.3.0868Qnap Qts 4.3.3.1315Qnap Qts 4.3.3.1386Qnap Qts 4.3.3.0095Qnap Qts 4.3.3.0096Qnap Qts 4.3.3.0136Qnap Qts 4.3.3.0154
7.5
CVSSv2

CVE-2020-2509

A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows malicious users to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 ...
Qnap Qts 4.3.4.0387Qnap Qts 4.3.4.0370Qnap Qts 4.3.4.0372Qnap Qts 4.3.4.0374Qnap Qts 4.3.4.0358Qnap Qts 4.3.4.0604Qnap Qts 4.3.4.0597Qnap Qts 4.3.4.0593Qnap Qts 4.3.4.0569Qnap Qts 4.3.4.0561Qnap Qts 4.3.4.0516Qnap Qts 4.3.4.0526Qnap Qts 4.3.4.0551Qnap Qts 4.3.4.0557Qnap Qts 4.3.6.1033Qnap Qts 4.3.6.1013Qnap Qts 4.3.6.0993Qnap Qts 4.3.6.0979Qnap Qts 4.3.6.0959Qnap Qts 4.3.6.0944Qnap Qts 4.3.6.0923Qnap Qts 4.3.6.0907
4.3
CVSSv2

CVE-2018-19942

A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station. If exploited, this vulnerability allows remote malicious users to inject malicious code. We have already fixed this vulnerability in the following versions: QTS 4.5.2.1566 bui...
Qnap Qts 4.3.3.0229Qnap Qts 4.3.3Qnap Qts 4.3.4Qnap Qts 4.3.4.0387Qnap Qts 4.3.4.0370Qnap Qts 4.3.4.0372Qnap Qts 4.3.4.0374Qnap Qts 4.3.4.0358Qnap Qts 4.3.4.0604Qnap Qts 4.3.3.0570Qnap Qts 4.3.4.0597Qnap Qts 4.3.4.0593Qnap Qts 4.3.3.0546Qnap Qts 4.3.4.0569Qnap Qts 4.3.4.0561Qnap Qts 4.3.4.0516Qnap Qts 4.3.3.0514Qnap Qts 4.3.4.0526Qnap Qts 4.3.4.0551Qnap Qts 4.3.4.0557Qnap Qts 4.3.6.1033Qnap Qts 4.3.6.1013
NA

CVE-2023-23369

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: Multimedia Console 2.1...
Qnap Qts 5.1.0.2348Qnap Qts 4.3.6.1831Qnap Qts 4.3.6.1750Qnap Qts 4.3.6.1711Qnap Qts 4.3.6.1663Qnap Qts 4.3.6.2050Qnap Qts 4.3.6.1965Qnap Qts 4.3.6.1907Qnap Qts 4.3.6.2232Qnap Qts 4.3.6.1620Qnap Qts 4.3.6.1446Qnap Qts 4.3.6.1411Qnap Qts 4.3.6.1333Qnap Qts 4.3.6.1286Qnap Qts 4.3.6.1263Qnap Qts 4.3.6.1218Qnap Qts 4.3.6.1154Qnap Qts 4.3.6.1070Qnap Qts 4.3.6.1033Qnap Qts 4.3.6.1013Qnap Qts 4.3.6.0993Qnap Qts 4.3.6.0979
4.3
CVSSv2

CVE-2020-2495

If exploited, this cross-site scripting vulnerability could allow remote malicious users to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5....
Qnap Quts HeroQnap Qts
4.3
CVSSv2

CVE-2020-2498

If exploited, this cross-site scripting vulnerability could allow remote malicious users to inject malicious code in certificate configuration. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and l...
Qnap Quts HeroQnap Qts
4.3
CVSSv2

CVE-2020-2496

If exploited, this cross-site scripting vulnerability could allow remote malicious users to inject malicious code in File Station. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and later QTS 4.5....
Qnap Quts HeroQnap Qts
4.3
CVSSv2

CVE-2020-2497

If exploited, this cross-site scripting vulnerability could allow remote malicious users to inject malicious code in System Connection Logs. QANP have already fixed these vulnerabilities in the following versions of QTS and QuTS hero. QuTS hero h4.5.1.1472 build 20201031 and late...
Qnap Quts HeroQnap Qts
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-38627CVE-2022-45803CVE-2024-38319cameratemplate injectionCVE-2024-27801CVE-2024-0762CVE-2024-5791unauthorized
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook