Known vulnerabilities in QNAP QTS - page 5

Software: QNAP QTS
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 353
Public exploits: 21
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QNAP QTS QNAP QTS is affected by 353 known vulnerabilities: 7 critical, 61 high, 121 medium, 164 low Critical High Medium Low

Vulnerabilities (353)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114673 - Out-of-bounds write
CVE-2025-30273
CWE-787 Medium
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU114672 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-33032
CWE-22 Low
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU114671 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-30271
CWE-22 Medium
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU114670 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-30270
CWE-22 Medium
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU114669 - NULL Pointer Dereference
CVE-2025-30274
CWE-476 Medium
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU114668 - NULL Pointer Dereference
CVE-2025-30272
CWE-476 Medium
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU114667 - NULL Pointer Dereference
CVE-2025-30268
CWE-476 Medium
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU114666 - NULL Pointer Dereference
CVE-2025-30267
CWE-476 Medium
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU114665 - Memory corruption
CVE-2025-30265
CWE-119 Low
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU114664 - Command injection
CVE-2025-30264
CWE-77 Medium
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU114663 - NULL Pointer Dereference
CVE-2025-29882
CWE-476 Medium
No
No
5.2.5.3145 20250526 02.09.2025 SB2025090239
#VU110665 - Memory corruption
CVE-2024-56805
CWE-119 Medium
No
No
5.2.4.3079 20250321 09.06.2025 SB2025060945
#VU110664 - Command injection
CVE-2025-22481
CWE-77 Medium
No
No
5.2.4.3079 20250321 09.06.2025 SB2025060945
#VU105480 - Out-of-bounds write
CVE-2024-53699
CWE-787 Low
No
No
5.2.3.3006 20250108 10.03.2025 SB2025031064
#VU105479 - Out-of-bounds write
CVE-2024-53697
CWE-787 Low
No
No
5.2.3.3006 20250108 10.03.2025 SB2025031064
#VU105478 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-53693
CWE-93 Medium
No
No
5.2.3.3006 20250108 10.03.2025 SB2025031064
#VU105477 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-53692
CWE-78 Low
No
No
5.2.3.3006 20250108 10.03.2025 SB2025031064
#VU105476 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-50405
CWE-93 Low
No
No
5.2.3.3006 20250108 10.03.2025 SB2025031064
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2025-26465
CWE-300 Medium
No
No
5.2.4.3079 20250321 18.02.2025 SB2025021815
SB2025021830
SB2025021833
and 49 more
#VU104034 - Improper input validation
CVE-2025-26466
CWE-20 Medium
Available
No
5.2.4.3079 20250321 18.02.2025 SB2025021815
SB2025021830
SB2025021840
and 25 more


Showing elements 81 - 100 out of 353