Known vulnerabilities in QNAP QTS - page 9

Software: QNAP QTS
Software CPE: cpe:2.3:a:qnap_systems:qnap_qts:*:*:*:*:*:*:*:*
Total vulnerabilities: 353
Public exploits: 21
Known exploited (KEV): 14
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QNAP QTS QNAP QTS is affected by 353 known vulnerabilities: 7 critical, 61 high, 121 medium, 164 low Critical High Medium Low

Vulnerabilities (353)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU87317 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32969
CWE-79 Low
No
No
5.1.4.2596 20231128 11.03.2024 SB2024031103
#VU86371 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-50358
CWE-78 High
No
Exploited
4.2.6 20240131, 4.3.3.2644 20240131, 4.3.4.2675 20240131, 4.3.6.2665 20240131, 4.5.4.2627 20231225, 5.1.5.2645 20240116 13.02.2024 SB2024021313
#VU86370 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-47218
CWE-78 Medium
Available
No
4.2.6 20240131, 4.3.3.2644 20240131, 4.3.4.2675 20240131, 4.3.6.2665 20240131, 4.5.4.2627 20231225, 5.1.5.2645 20240116 13.02.2024 SB2024021313
#VU86087 - Unchecked Return Value
CVE-2023-50359
CWE-252 Low
No
No
5.1.5.2645 20240116 05.02.2024 SB2024020539
#VU86079 - Heap-based Buffer Overflow
CVE-2023-41273
CWE-122 Low
No
No
5.1.2.2533 20230926 05.02.2024 SB2024020531
#VU86078 - Memory corruption
CVE-2023-45037
CWE-119 Low
No
No
5.1.4.2596 20231128 05.02.2024 SB2024020532
#VU86077 - Memory corruption
CVE-2023-45036
CWE-119 Low
No
No
5.1.4.2596 20231128 05.02.2024 SB2024020532
#VU86076 - Memory corruption
CVE-2023-45035
CWE-119 Low
No
No
5.1.4.2596 20231128 05.02.2024 SB2024020532
#VU86075 - Memory corruption
CVE-2023-41292
CWE-119 Low
No
No
5.1.4.2596 20231128 05.02.2024 SB2024020532
#VU86074 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-39297
CWE-78 Medium
No
No
4.5.4.2627 20231225, 5.1.4.2596 20231128 05.02.2024 SB2024020533
#VU86072 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-41283
CWE-78 Low
No
No
5.1.4.2596 20231128 05.02.2024 SB2024020534
#VU86071 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-41282
CWE-78 Low
No
No
5.1.4.2596 20231128 05.02.2024 SB2024020534
#VU86070 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-41281
CWE-78 Low
No
No
5.1.4.2596 20231128 05.02.2024 SB2024020534
#VU86067 - Improper Authorization
CVE-2023-32967
CWE-285 Medium
No
No
4.5.4.2627 20231225 05.02.2024 SB2024020535
#VU86065 - Resource exhaustion
CVE-2023-45028
CWE-400 Low
No
No
5.1.5.2645 20240116 05.02.2024 SB2024020536
#VU86064 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-45027
CWE-22 Low
No
No
5.1.5.2645 20240116 05.02.2024 SB2024020536
#VU86063 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-45026
CWE-22 Low
No
No
5.1.5.2645 20240116 05.02.2024 SB2024020536
#VU86061 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-47566
CWE-78 Low
No
No
5.1.5.2645 20240116 05.02.2024 SB2024020537
#VU86060 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-47568
CWE-89 Medium
No
No
4.5.4.2627 20231225, 5.1.5.2645 20240116 05.02.2024 SB2024020538
#VU86057 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-47567
CWE-78 Low
No
No
4.5.4.2627 20231225, 5.1.5.2645 20240116 05.02.2024 SB2024020538


Showing elements 161 - 180 out of 353