Known vulnerabilities in QNAP QTS - page 17

Software: QNAP QTS
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 353
Public exploits: 21
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QNAP QTS QNAP QTS is affected by 353 known vulnerabilities: 7 critical, 61 high, 121 medium, 164 low Critical High Medium Low

Vulnerabilities (353)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU32956 - Improper input validation
CWE-20 Medium
No
No
4.4.3.1381 20200729 31.07.2020 SB2020073116
#VU29217 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2497
CWE-79 Low
No
No
4.3.3.1315 20200611 23.06.2020 SB2020062319
#VU29216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2496
CWE-79 Low
No
No
4.3.3.1315 20200611 23.06.2020 SB2020062319
#VU29215 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2495
CWE-79 Low
No
No
4.3.3.1315 20200611 23.06.2020 SB2020062319
#VU28779 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19943
CWE-79 Low
No
Exploited
4.4.1.1216 20200214 08.06.2020 SB2019012809
#VU28778 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19953
CWE-79 Low
No
Exploited
4.4.1.1216 20200214 08.06.2020 SB2019012809
#VU28777 - Command injection
CVE-2018-19949
CWE-77 Low
No
Exploited
4.4.1.1216 20200214 08.06.2020 SB2019012809
#VU28213 - Weak Password Requirements
CWE-521 Low
No
No
4.4.2.1312 20200521 25.05.2020 SB2020052511
#VU28117 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2019-7195
CWE-610 High
Available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU28116 - Externally Controlled Reference to a Resource in Another Sphere
CVE-2019-7194
CWE-610 High
Available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU28115 - Improper input validation
CVE-2019-7193
CWE-20 High
Available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU28114 - Improper Access Control
CVE-2019-7192
CWE-284 High
Available
Exploited
4.3.6.1070 20190919, 4.4.1.1064 20190918 20.05.2020 SB2019122502
#VU27377 - Stack-based buffer overflow
CVE-2020-10704
CWE-121 Medium
No
No
4.3.3.1315 20200611 28.04.2020 SB2020042806
SB2020042827
SB2020043005
and 12 more
#VU16770 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-0713
CWE-79 Low
No
No
4.3.6.0805 20181228 02.01.2019 SB2018122806
#VU16769 - Command injection
CVE-2018-0730
CWE-77 Low
No
No
4.3.6.0805 20181228 02.01.2019 SB2018122806
#VU16039 - Buffer overflow
CVE-2018-14749
CWE-120 High
No
No
4.2.6 20181026, 4.3.3 20181029, 4.3.4 20181026, 4.3.5 20181110 23.11.2018 SB2018112312
#VU16038 - Permissions, Privileges, and Access Controls
CVE-2018-14748
CWE-264 Low
No
No
4.2.6 20181026, 4.3.3 20181029, 4.3.4 20181026, 4.3.5 20181110 23.11.2018 SB2018112312
#VU16037 - Permissions, Privileges, and Access Controls
CVE-2018-14747
CWE-264 Low
No
No
4.2.6 20181026, 4.3.3 20181029, 4.3.4 20181026, 4.3.5 20181110 23.11.2018 SB2018112312
#VU16036 - Command injection
CVE-2018-14746
CWE-77 Low
No
No
4.2.6 20181026, 4.3.3 20181029, 4.3.4 20181026, 4.3.5 20181110 23.11.2018 SB2018112312
#VU14321 - Command injection
CVE-2018-0714
CWE-77 Low
No
No
4.2.6 20180711, 4.3.3 20180716, 4.3.4 20180710 13.08.2018 SB2018081304


Showing elements 321 - 340 out of 353