Known vulnerabilities in QNAP QTS 4.3.3.0229 Build 20170624 - page 3

Software: QNAP QTS
Version: 4.3.3.0229 Build 20170624
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 57
Public exploits: 9
Known exploited (KEV): 8
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting QNAP QTS version 4.3.3.0229 Build 20170624 QNAP QTS 4.3.3.0229 Build 20170624 is affected by 57 vulnerabilities: 23 high, 21 medium, 13 low Critical High Medium Low

Vulnerabilities (57)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28117 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2019-7195
CWE-610 High
Public exploit available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU28116 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2019-7194
CWE-610 High
Public exploit available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU16770 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0713
CWE-79 Low
No
No
4.3.6.0805 20181228 02.01.2019 SB2018122806
#VU16769 - Command injection
CVE-2018-0730
CWE-77 Low
No
No
4.3.6.0805 20181228 02.01.2019 SB2018122806
#VU16039 - Buffer overflow
CVE-2018-14749
CWE-120 High
No
No
4.2.6 20181026, 4.3.3 20181029, 4.3.4 20181026, 4.3.5 20181110 23.11.2018 SB2018112312
#VU16038 - Permissions, Privileges, and Access Controls
CVE-2018-14748
CWE-264 Low
No
No
4.2.6 20181026, 4.3.3 20181029, 4.3.4 20181026, 4.3.5 20181110 23.11.2018 SB2018112312
#VU16037 - Permissions, Privileges, and Access Controls
CVE-2018-14747
CWE-264 Low
No
No
4.2.6 20181026, 4.3.3 20181029, 4.3.4 20181026, 4.3.5 20181110 23.11.2018 SB2018112312
#VU16036 - Command injection
CVE-2018-14746
CWE-77 Low
No
No
4.2.6 20181026, 4.3.3 20181029, 4.3.4 20181026, 4.3.5 20181110 23.11.2018 SB2018112312
#VU14321 - Command injection
CVE-2018-0714
CWE-77 Low
No
No
4.2.6 20180711, 4.3.3 20180716, 4.3.4 20180710 13.08.2018 SB2018081304
#VU13396 - Command injection
CVE-2018-0712
CWE-77 Low
No
No
4.2.6 20180504, 4.3.3 20180504, 4.3.4 20180501 20.06.2018 SB2018062004
#VU9680 - Memory corruption
CVE-2017-17033
CWE-119 High
No
No
- 18.12.2017 SB2017121505
#VU9679 - Memory corruption
CVE-2017-17032
CWE-119 High
No
No
- 18.12.2017 SB2017121505
#VU9678 - Memory corruption
CVE-2017-17031
CWE-119 High
No
No
- 18.12.2017 SB2017121505
#VU9677 - Memory corruption
CVE-2017-17030
CWE-119 High
No
No
- 18.12.2017 SB2017121505
#VU9676 - Memory corruption
CVE-2017-17029
CWE-119 High
No
No
- 18.12.2017 SB2017121505
#VU9675 - Memory corruption
CVE-2017-17028
CWE-119 High
No
No
- 18.12.2017 SB2017121505
#VU9674 - Memory corruption
CVE-2017-17027
CWE-119 High
No
No
- 16.12.2017 SB2017121505


Showing elements 41 - 60 out of 57