Known vulnerabilities in QNAP QTS - page 6

Software: QNAP QTS
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 353
Public exploits: 21
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QNAP QTS QNAP QTS is affected by 353 known vulnerabilities: 7 critical, 61 high, 121 medium, 164 low Critical High Medium Low

Vulnerabilities (353)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU105481 - Double Free
CVE-2024-53698
CWE-415 Low
No
No
5.2.3.3006 20250108 10.03.2025 SB2025031064
#VU105475 - Out-of-bounds write
CVE-2024-38638
CWE-787 Low
No
No
5.1.9.2954 20241120 10.03.2025 SB2025031045
#VU105474 - Server-Side Request Forgery (SSRF)
CVE-2024-53696
CWE-918 Low
No
No
4.5.4.2957 20241119 10.03.2025 SB2025031035
#VU105457 - Exposure of sensitive information to an unauthorized actor
CVE-2024-13086
CWE-200 Medium
No
No
5.2.0.2851 20240808 10.03.2025 SB2025031044
#VU101351 - Use of Externally-Controlled Format String
CVE-2024-50403
CWE-134 Low
No
No
5.1.9.2954 20241120, 5.2.2.2950 20241114 09.12.2024 SB2024120938
#VU101350 - Use of Externally-Controlled Format String
CVE-2024-50402
CWE-134 Low
No
No
5.1.9.2954 20241120, 5.2.2.2950 20241114 09.12.2024 SB2024120938
#VU101349 - Command injection
CVE-2024-50393
CWE-77 High
No
No
5.1.9.2954 20241120, 5.2.2.2950 20241114 09.12.2024 SB2024120938
#VU101345 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-48868
CWE-93 Medium
No
No
5.1.9.2954 20241120, 5.2.2.2950 20241114 09.12.2024 SB2024120938
#VU101343 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-48867
CWE-93 Medium
No
No
5.1.9.2954 20241120, 5.2.2.2950 20241114 09.12.2024 SB2024120938
#VU101342 - Improper Handling of URL Encoding (Hex Encoding)
CVE-2024-48866
CWE-177 Medium
No
No
5.1.9.2954 20241120, 5.2.2.2950 20241114 09.12.2024 SB2024120938
#VU101341 - Improper Certificate Validation
CVE-2024-48865
CWE-295 Low
No
No
5.1.9.2954 20241120, 5.2.2.2950 20241114 09.12.2024 SB2024120938
#VU101340 - Improper Authentication
CVE-2024-48859
CWE-287 Medium
No
No
5.1.9.2954 20241120, 5.2.2.2950 20241114 09.12.2024 SB2024120938
#VU100904 - Use of Externally-Controlled Format String
CVE-2024-50401
CWE-134 High
No
No
5.2.1.2930 20241025 25.11.2024 SB2024112526
#VU100903 - Use of Externally-Controlled Format String
CVE-2024-50400
CWE-134 High
No
No
5.2.1.2930 20241025 25.11.2024 SB2024112526
#VU100902 - Use of Externally-Controlled Format String
CVE-2024-50399
CWE-134 High
No
No
5.2.1.2930 20241025 25.11.2024 SB2024112526
#VU100901 - Use of Externally-Controlled Format String
CVE-2024-50398
CWE-134 High
No
No
5.2.1.2930 20241025 25.11.2024 SB2024112526
#VU100897 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-37043
CWE-22 Low
No
No
5.2.1.2930 20241025 25.11.2024 SB2024112526
#VU78454 - Untrusted Search Path
CVE-2023-38408
CWE-426 Medium
Available
No
5.1.8.2823 20240712 20.07.2023 SB2023072068
SB2023072073
SB2023072074
and 73 more
#VU58333 - Improper Privilege Management
CVE-2021-41617
CWE-269 Low
No
No
5.1.8.2823 20240712 23.11.2021 SB2021092601
SB2021112330
SB2021120119
and 38 more
#VU32937 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-14145
CWE-327 Medium
No
No
5.1.8.2823 20240712 30.07.2020 SB2020073043
SB2020121421
SB2021052625
and 11 more


Showing elements 101 - 120 out of 353