Known vulnerabilities in QNAP QTS - page 15

Software: QNAP QTS
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 353
Public exploits: 21
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QNAP QTS QNAP QTS is affected by 353 known vulnerabilities: 7 critical, 61 high, 121 medium, 164 low Critical High Medium Low

Vulnerabilities (353)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59601 - Improper Control of Generation of Code ('Code Injection')
CWE-94 Critical
No
Exploited
4.5.4.1892 20211223, 5.0.0.1891 20211221 14.01.2022 SB2022011403
#VU59282 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38674
CWE-79 Low
No
No
4.5.4.1787 20210910 07.01.2022 SB2022010701
#VU59112 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34347
CWE-200 Medium
No
No
4.5.4.1787 20210910 29.12.2021 SB2021122910
#VU58550 - Improper input validation
CWE-20 Medium
No
No
5.0.0.1870 20211201 07.12.2021 SB2021120702
#VU58255 - Heap-based Buffer Overflow
CWE-122 High
No
No
4.3.3.1799 20211008, 4.3.6.1831 20211019, 4.5.4.1800 20210923, 5.0.0.1808 20211001 19.11.2021 SB2021111907
#VU58091 - Improper input validation
CVE-2021-23192
CWE-20 Medium
No
No
5.0.0.1891 20211221 10.11.2021 SB2021111008
SB2021111201
SB2021112914
and 19 more
#VU57599 - Command injection
CVE-2021-34362
CWE-77 High
No
No
- 22.10.2021 SB2021102202
#VU56447 - Improper Restriction of Rendered UI Layers or Frames
CVE-2018-19957
CWE-1021 Medium
No
No
4.5.4.1715 20210630 10.09.2021 SB2021091007
#VU56436 - Stack-based buffer overflow
CVE-2021-34343
CWE-121 High
No
No
4.3.3.1693 20210624, 4.3.6.1750 20210730, 5.0.0.1716 20210701 09.09.2021 SB2021090917
#VU56435 - Stack-based buffer overflow
CVE-2021-28816
CWE-121 High
No
No
4.3.3.1693 20210624, 4.3.6.1750 20210730, 5.0.0.1716 20210701 09.09.2021 SB2021090917
#VU54489 - Command injection
CVE-2021-28804
CWE-77 High
No
No
4.5.1.1540 20210107 01.07.2021 SB2021070102
#VU54488 - Command injection
CVE-2021-28802
CWE-77 High
No
No
4.5.1.1540 20210107 01.07.2021 SB2021070102
#VU54485 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-36194
CWE-79 Low
No
No
4.5.2.1566 20210202 01.07.2021 SB2021070105
#VU54221 - Unprotected Storage of Credentials
CVE-2021-28815
CWE-256 Medium
No
No
4.5.3 18.06.2021 SB2021061809
#VU53810 - Command injection
CWE-77 Medium
No
No
4.3.3: 1.10.1004, 4.3.6: 1.10.1004, 4.5.3: 1.12.1012 04.06.2021 SB2021060404
#VU53763 - Command injection
CVE-2021-28812
CWE-77 High
No
No
4.5.2 03.06.2021 SB2021060311
#VU52748 - Out-of-bounds read
CVE-2021-20254
CWE-125 Medium
No
No
c4.5.5.1656 build 20210503 29.04.2021 SB2021042916
SB2021052619
SB2021060941
and 30 more
#VU49845 - Insufficient Verification of Data Authenticity
CVE-2020-25686
CWE-345 Low
Available
No
4.5.3.1652 20210428 20.01.2021 SB2021012070
SB20210120108
SB20210120122
and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-25685
CWE-327 Low
Available
No
4.5.3.1652 20210428 20.01.2021 SB2021012070
SB20210120107
SB20210120122
and 27 more
#VU49843 - Insufficient Verification of Data Authenticity
CVE-2020-25684
CWE-345 Low
Available
No
4.5.3.1652 20210428 20.01.2021 SB2021012070
SB20210120106
SB20210120122
and 27 more


Showing elements 281 - 300 out of 353