Known vulnerabilities in QNAP QTS - page 8

Software: QNAP QTS
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 353
Public exploits: 21
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QNAP QTS QNAP QTS is affected by 353 known vulnerabilities: 7 critical, 61 high, 121 medium, 164 low Critical High Medium Low

Vulnerabilities (353)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
- 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU90714 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-27124
CWE-78 Medium
No
No
4.5.4.2627 20231225, 5.1.3.2578 20231110 03.06.2024 SB2024031110
#VU90713 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-32766
CWE-78 Medium
No
No
4.5.4.2627 20231225, 5.1.3.2578 20231110 03.06.2024 SB2024031110
#VU89783 - Memory corruption
CVE-2024-27130
CWE-119 Medium
Available
No
5.1.7.2770 20240520 23.05.2024 SB2024052318
#VU89781 - Memory corruption
CVE-2024-27129
CWE-119 Medium
No
No
5.1.7.2770 20240520 23.05.2024 SB2024052318
#VU89779 - Memory corruption
CVE-2024-27128
CWE-119 Medium
No
No
5.1.7.2770 20240520 23.05.2024 SB2024052318
#VU89778 - Double Free
CVE-2024-27127
CWE-415 Medium
No
No
5.1.7.2770 20240520 23.05.2024 SB2024052318
#VU89777 - Incorrect Permission Assignment for Critical Resource
CVE-2024-21902
CWE-732 Medium
No
No
5.1.7.2770 20240520 23.05.2024 SB2024052318
#VU89040 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-51365
CWE-22 Medium
No
No
4.5.4.2627 20231225, 5.1.4.2596 20231128 29.04.2024 SB2024042916
#VU89039 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-51364
CWE-22 Medium
No
No
4.5.4.2627 20231225, 5.1.4.2596 20231128 29.04.2024 SB2024042916
#VU89038 - Integer overflow
CVE-2024-21905
CWE-190 Medium
No
No
5.1.3.2578 20231110 29.04.2024 SB2024042904
#VU89037 - Memory corruption
CVE-2023-50364
CWE-119 Low
No
No
5.1.6.2722 20240402 29.04.2024 SB2024042903
#VU89034 - Improper Authorization
CVE-2023-50363
CWE-285 Medium
No
No
5.1.6.2722 20240402 29.04.2024 SB2024042903
#VU89033 - Memory corruption
CVE-2023-50362
CWE-119 Medium
No
No
5.1.6.2722 20240402 29.04.2024 SB2024042903
#VU89032 - Memory corruption
CVE-2023-50361
CWE-119 Medium
No
No
5.1.6.2722 20240402 29.04.2024 SB2024042903
#VU87324 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-34980
CWE-78 Low
No
No
4.5.4.2627 20231225 11.03.2024 SB2024031114
#VU87323 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-21901
CWE-89 Low
No
No
4.5.4.2627 20231225, 5.1.3.2578 20231110 11.03.2024 SB2024031110
#VU87319 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-21900
CWE-78 Medium
No
No
4.5.4.2627 20231225, 5.1.3.2578 20231110 11.03.2024 SB2024031110
#VU87318 - Improper Authentication
CVE-2024-21899
CWE-287 Medium
No
No
4.5.4.2627 20231225, 5.1.3.2578 20231110 11.03.2024 SB2024031110
#VU82011 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-34975
CWE-89 Medium
No
No
4.5.4.2627 20231225 16.10.2023 SB2023101604
SB2024031114


Showing elements 141 - 160 out of 353