Known vulnerabilities in QNAP QTS 4.2.6 build 20181026 - page 2

Software: QNAP QTS
Version: 4.2.6 build 20181026
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 31
Public exploits: 8
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting QNAP QTS version 4.2.6 build 20181026 QNAP QTS 4.2.6 build 20181026 is affected by 31 vulnerabilities: 12 high, 13 medium, 6 low Critical High Medium Low

Vulnerabilities (31)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28117 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2019-7195
CWE-610 High
Public exploit available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU28116 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2019-7194
CWE-610 High
Public exploit available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU28115 - Improper input validation
CVE-2019-7193
CWE-20 High
Public exploit available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU28114 - Improper Access Control
CVE-2019-7192
CWE-284 High
Public exploit available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU26104 - NULL Pointer Dereference
CVE-2019-19269
CWE-476 Medium
No
No
4.2.6 20200821, 4.3.3.1386 20200821, 4.3.6.1411 20200825, 4.4.3.1400 20200817 17.03.2020 SB2020022519
SB2020031705
SB2020083115
and 5 more
#VU30580 - Improper Certificate Validation
CVE-2019-19271
CWE-295 Medium
No
No
4.2.6 20200821, 4.3.3.1386 20200821, 4.3.6.1411 20200825, 4.4.3.1400 20200817 26.11.2019 SB2019112628
SB2020083115
SB2019112925
#VU30581 - NULL Pointer Dereference
CVE-2019-19272
CWE-476 Medium
No
No
4.2.6 20200821, 4.3.3.1386 20200821, 4.3.6.1411 20200825, 4.4.3.1400 20200817 26.11.2019 SB2019112628
SB2020083115
SB2019112925
#VU35035 - Improper Certificate Validation
CVE-2019-19270
CWE-295 Medium
No
No
4.2.6 20200821, 4.3.3.1386 20200821, 4.3.6.1411 20200825, 4.4.3.1400 20200817 26.11.2019 SB2016040501
SB2020083115
SB2020011349
and 3 more
#VU22564 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-18217
CWE-835 Medium
No
No
4.2.6 20200821, 4.3.3.1386 20200821, 4.3.6.1411 20200825, 4.4.3.1400 20200817 06.11.2019 SB2019110639
SB2019110640
SB2020021217
and 8 more
#VU16770 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0713
CWE-79 Low
No
No
4.3.6.0805 20181228 02.01.2019 SB2018122806
#VU16769 - Command injection
CVE-2018-0730
CWE-77 Low
No
No
4.3.6.0805 20181228 02.01.2019 SB2018122806


Showing elements 21 - 40 out of 31