Known vulnerabilities in QNAP QTS - page 11

Software: QNAP QTS
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 353
Public exploits: 21
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QNAP QTS QNAP QTS is affected by 353 known vulnerabilities: 7 critical, 61 high, 121 medium, 164 low Critical High Medium Low

Vulnerabilities (353)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU84039 - Memory corruption
CVE-2023-32975
CWE-119 Low
No
No
5.0.1.2514 20230906, 5.1.2.2533 20230926 11.12.2023 SB2023121114
#VU84038 - Memory corruption
CVE-2023-32968
CWE-119 Low
No
No
5.0.1.2514 20230906, 5.1.2.2533 20230926 11.12.2023 SB2023121114
#VU84034 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-23372
CWE-79 Low
No
No
4.5.4.2467 20230718, 5.0.1.2425 20230609, 5.1.0.2444 20230629 11.12.2023 SB2023121113
#VU83003 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-23367
CWE-78 Low
No
No
5.0.1.2376 20230421 13.11.2023 SB2023111307
#VU82728 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-23369
CWE-78 High
No
No
4.2.6 20230621, 4.3.3.2420 20230621, 4.3.4.2451 20230621, 4.3.6.2441 20230621, 5.1.0.2399 20230515 06.11.2023 SB2023110611
#VU82727 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-23368
CWE-78 High
No
No
4.5.4.2374 20230416, 5.0.1.2376 20230421 06.11.2023 SB2023110609
#VU82721 - Server-Side Request Forgery (SSRF)
CVE-2023-39301
CWE-918 Medium
No
No
5.0.1.2514 20230906, 5.1.1.2491 20230815 06.11.2023 SB2023110604
#VU82021 - Memory corruption
CVE-2023-32973
CWE-119 Low
No
No
4.5.4.2467 20230718, 5.0.1.2425 20230609, 5.1.0.2444 20230629 16.10.2023 SB2023101607
#VU82017 - NULL Pointer Dereference
CVE-2023-32970
CWE-476 Low
No
No
4.5.4.2467 20230718, 5.0.1.2425 20230609, 5.1.0.2444 20230629 16.10.2023 SB2023101607
#VU82016 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-32974
CWE-22 Medium
No
No
5.1.0.2444 20230629 16.10.2023 SB2023101606
#VU81875 - Improper Authorization
CVE-2023-3961
CWE-285 High
No
No
5.1.3.2578 20231110 11.10.2023 SB2023101133
SB2023101137
SB2023101155
and 28 more
#VU81874 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4154
CWE-200 Medium
No
No
5.1.3.2578 20231110 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 17 more
#VU81872 - Permissions, Privileges, and Access Controls
CVE-2023-4091
CWE-264 Low
No
No
5.1.3.2578 20231110 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 42 more
#VU81871 - Resource Management Errors
CVE-2023-42669
CWE-399 Medium
No
No
5.1.3.2578 20231110 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 35 more
#VU81867 - Resource Management Errors
CVE-2023-42670
CWE-399 Medium
No
No
5.1.3.2578 20231110 11.10.2023 SB2023101133
SB2023101134
SB2023101137
and 16 more
#VU81704 - Memory corruption
CVE-2023-32972
CWE-119 Low
No
No
4.5.4.2467 20230718, 5.0.1.2425 20230609, 5.1.0.2444 20230629 09.10.2023 SB2023100914
#VU81702 - Memory corruption
CVE-2023-32971
CWE-119 Low
No
No
4.5.4.2467 20230718, 5.0.1.2425 20230609, 5.1.0.2444 20230629 09.10.2023 SB2023100914
#VU72298 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-20052
CWE-611 Medium
Available
No
5.0.1.2376 20230421 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 17 more
#VU72297 - Heap-based Buffer Overflow
CVE-2023-20032
CWE-122 Critical
No
No
5.0.1.2376 20230421 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 18 more
#VU71241 - Memory corruption
CVE-2006-20001
CWE-119 Medium
No
No
5.1.0.2348 20230325 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more


Showing elements 201 - 220 out of 353