Known vulnerabilities in QNAP QTS - page 12

Software: QNAP QTS
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 353
Public exploits: 21
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QNAP QTS QNAP QTS is affected by 353 known vulnerabilities: 7 critical, 61 high, 121 medium, 164 low Critical High Medium Low

Vulnerabilities (353)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81082 - Memory corruption
CVE-2023-23363
CWE-119 Medium
No
No
4.2.6 20230621, 4.3.3.2420 20230621, 4.3.4.2451 20230621, 4.3.6.2441 20230621 25.09.2023 SB2023092513
#VU80846 - Out-of-bounds write
CVE-2023-23359
CWE-787 Medium
No
No
4.5.4.2374 20230416, 5.0.1.2346 20230322 18.09.2023 SB2023091809
#VU80844 - Out-of-bounds write
CVE-2023-23358
CWE-787 Medium
No
No
4.5.4.2374 20230416, 5.0.1.2346 20230322 18.09.2023 SB2023091809
#VU80843 - NULL Pointer Dereference
CVE-2023-23361
CWE-476 Medium
No
No
4.5.4.2374 20230416, 5.0.1.2346 20230322 18.09.2023 SB2023091809
#VU80841 - NULL Pointer Dereference
CVE-2023-23360
CWE-476 Medium
No
No
4.5.4.2374 20230416, 5.0.1.2346 20230322 18.09.2023 SB2023091809
#VU80837 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-23362
CWE-78 Medium
No
No
4.5.4.2374 20230416, 5.0.1.2376 20230421 18.09.2023 SB2023091808
#VU80562 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-23357
CWE-79 Low
No
No
4.5.4, 5.0.1 08.09.2023 SB2023090830
#VU80561 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-23354
CWE-79 Low
No
No
4.5.4, 5.0.1 08.09.2023 SB2023090830
#VU80414 - Cleartext Transmission of Sensitive Information
CVE-2023-34972
CWE-319 Low
No
No
5.0.1.2425 20230609, 5.1.0.2444 20230629 05.09.2023 SB2023090526
#VU80413 - Insufficient Entropy
CVE-2023-34973
CWE-331 Low
No
No
5.1.0.2444 20230629 05.09.2023 SB2023090525
#VU80412 - Inadequate Encryption Strength
CVE-2023-34971
CWE-326 Low
No
No
4.5.4.2467 20230718, 5.0.1.2425 20230609, 5.1.0.2444 20230629 05.09.2023 SB2023090524
#VU78741 - Resource exhaustion
CVE-2022-27600
CWE-400 Low
No
No
4.5.4.2280 20230112, 5.0.1.2277 20230112 28.07.2023 SB2023072811
#VU74195 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27598
CWE-200 Medium
No
No
5.0.1.2346 20230322 30.03.2023 SB2023033031
#VU74194 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27597
CWE-200 Medium
No
No
5.0.1.2346 20230322 30.03.2023 SB2023033031
#VU71332 - Improper input validation
CVE-2023-22809
CWE-20 Low
Available
No
5.0.1.2346 20230322 18.01.2023 SB20230118100
SB20230118104
SB20230118105
and 55 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436
CWE-113 Medium
No
No
5.1.0.2348 20230325 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760
CWE-444 Medium
No
No
5.1.0.2348 20230325 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU69337 - Integer overflow
CVE-2022-42898
CWE-190 Medium
No
No
5.0.1.2346 20230322 15.11.2022 SB2022111530
SB2022111610
SB2022111621
and 123 more
#VU68701 - Heap-based Buffer Overflow
CVE-2022-3437
CWE-122 Low
No
No
5.0.1.2346 20230322 25.10.2022 SB2022102524
SB2022102558
SB2022102521
and 33 more
#VU68700 - UNIX Symbolic Link (Symlink) Following
CVE-2022-3592
CWE-61 Medium
No
No
5.0.1.2346 20230322 25.10.2022 SB2022102524
SB2023033037
SB2023091702
and 4 more


Showing elements 221 - 240 out of 353