Known vulnerabilities in QuTS hero - page 11
Vendor:
QNAP Systems, Inc.
Software:
QuTS hero
Software CPE:
cpe:2.3:h:qnap_systems:quts-hero:*:*:*:*:*:*:*:*
Website:
https://www.qnap.com
Total vulnerabilities:
293
Public exploits:
16
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
h5.2.9
h5.2.8
h4.5.0.1409 build 20200829
h4.5.0.1352 build 20200703
h4.5.0.1308 build 20200520
h4.5.0.1279 build 20200421
h4.5.4.2956 build 20241119
h4.5.4.2790 build 20240606
h4.5.4.2626 build 20231225
h4.5.4.2476 build 20230728
h4.5.4.2374 build 20230417
h4.5.4.2272 build 20230105
h4.5.4.2217 build 20221111
h4.5.4.2138 build 20220824
h4.5.4.2052 build 20220530
h4.5.4.1991 build 20220330
h4.5.4.1971 build 20220310
h4.5.4.1951 build 20220218
h4.5.4.1892 build 20211223
h4.5.4.1848 build 20211109
h4.5.4.1813 build 20211006
h4.5.4.1800 build 20210923
h4.5.4.1771 build 20210825
h5.0.1.2515 build 20230907
h5.0.1.2376 build 20230421
h5.0.1.2348 build 20230324
h5.0.1.2277 build 20230112
h5.0.1.2269 build 20230104
h5.0.1.2248 build 20221215
h5.0.1.2192 build 20221020
h5.0.1.2045 build 20220526
h5.0.0.2120 build 20220804
h5.0.0.2069 build 20220614
h5.0.0.2022 build 20220428
h5.0.0.1986 build 20220324
h5.0.0.1949 build 20220215
h5.0.0.1900 build 20211228
h5.0.0.1892 build 20211222
h5.0.0.1856 build 20211117
h5.0.0.1844 build 20211105
h5.0.0.1772 build 20210826
h5.2.8.3350 build 20251216
h5.3.2.3354 build 20251225
h5.3.1.3250 build 20250912
h5.2.8.3321 build 20251117
h5.3.1.3292 build 20251024
h5.2.7.3297 build 20251024
h5.2.7.3256 build 20250913
h5.2.6.3195 build 20250715
h5.3.0.3115 build 20250430
h5.2.5.3138 build 20250519
h5.2.4.3079 build 20250321
h5.2.3.3006 build 20250108
h5.2.0.2851 build 20240808
h5.2.2.2952 build 20241116
h5.1.9.2954 build 20241120
h5.2.1.2929 build 20241025
h5.2.0.2782 build 20240601
h5.1.8.2823 build 20240712
h5.1.7.2770 build 20240520
h5.1.6.2734 build 20240414
h5.1.5.2647 build 20240118
h5.1.4.2596 build 20231128
h5.1.3.2578 build 20231110
h5.1.2.2534 build 20230927
h5.1.1.2488 build 20230812
h5.1.0.2392 build 20230508
h5.0.1
h4.5.4
h5.1.0
h5.1.0.2466 build 20230721
h5.1.0.2453 build 20230708
h5.1.0.2424 build 20230609
h5.1.0.2409 build 20230525
h5.0.0.2131 build 20220815
h5.0.0.2069 Build 20220614
h5.0.0.2022 Build 20220428
h4.5.4.1991 Build 20220330
h5.0.0.1986 Build 20220324
h4.5.4.1971 Build 20220310
h4.5.4.1951 Build 20220218
h5.0.0.1949 Build 20220215
h4.5.3
h5.0.0.1900 Build 20211228
h4.5.4.1848 Build 20211109
c5.0.0.1919 build 20220119
h5.0.0.1856 Build 20211117
h5.0.0
h5.0.0.1772 Build 20210826
h4.5.3.1710 build 20210624
h4.5.3.1698 build 20210612
h4.5.3.1697 build 20210611
h4.5.2: 1.12.1012
h4.5.2
h4.5.3.1670 build 20210515
h4.5.1
h4.5.2.1638 build 20210414
h4.5.1.1582 build 20210217
h4.5.1.1491 build 20201119
h4.5.1.1472 build 20201031
Vulnerabilities (293)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU84039 - Memory corruption CVE-2023-32975 |
CWE-119 | Low | h5.0.1.2515 build 20230907, h5.1.2.2534 build 20230927 | 11.12.2023 |
SB2023121114 |
||
| #VU84038 - Memory corruption CVE-2023-32968 |
CWE-119 | Low | h5.0.1.2515 build 20230907, h5.1.2.2534 build 20230927 | 11.12.2023 |
SB2023121114 |
||
| #VU84034 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2023-23372 |
CWE-79 | Low | h4.5.4.2476 build 20230728, h5.0.1.2515 build 20230907, h5.1.0.2424 build 20230609 | 11.12.2023 |
SB2023121113 |
||
| #VU83003 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-23367 |
CWE-78 | Low | h5.0.1.2376 build 20230421 | 13.11.2023 |
SB2023111307 |
||
| #VU82727 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2023-23368 |
CWE-78 | High | h4.5.4.2374 build 20230417, h5.0.1.2376 build 20230421 | 06.11.2023 |
SB2023110609 |
||
| #VU82721 - Server-Side Request Forgery (SSRF) CVE-2023-39301 |
CWE-918 | Medium | h5.0.1.2515 build 20230907, h5.1.1.2488 build 20230812 | 06.11.2023 |
SB2023110604 |
||
| #VU82021 - Memory corruption CVE-2023-32973 |
CWE-119 | Low | h4.5.4.2476 build 20230728, h5.0.1.2515 build 20230907, h5.1.0.2424 build 20230609 | 16.10.2023 |
SB2023101607 |
||
| #VU82017 - NULL Pointer Dereference CVE-2023-32970 |
CWE-476 | Low | h4.5.4.2476 build 20230728, h5.0.1.2515 build 20230907, h5.1.0.2424 build 20230609 | 16.10.2023 |
SB2023101607 |
||
| #VU82016 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2023-32974 |
CWE-22 | Medium | h5.1.0.2424 build 20230609 | 16.10.2023 |
SB2023101606 |
||
| #VU81875 - Improper Authorization CVE-2023-3961 |
CWE-285 | High | h5.1.3.2578 build 20231110 | 11.10.2023 |
SB2023101133 SB2023101137 SB2023101155 and 28 more |
||
| #VU81874 - Exposure of sensitive information to an unauthorized actor CVE-2023-4154 |
CWE-200 | Medium | h5.1.3.2578 build 20231110 | 11.10.2023 |
SB2023101133 SB2023101134 SB2023101137 and 17 more |
||
| #VU81872 - Permissions, Privileges, and Access Controls CVE-2023-4091 |
CWE-264 | Low | h5.1.3.2578 build 20231110 | 11.10.2023 |
SB2023101133 SB2023101134 SB2023101137 and 42 more |
||
| #VU81871 - Resource Management Errors CVE-2023-42669 |
CWE-399 | Medium | h5.1.3.2578 build 20231110 | 11.10.2023 |
SB2023101133 SB2023101134 SB2023101137 and 35 more |
||
| #VU81867 - Resource Management Errors CVE-2023-42670 |
CWE-399 | Medium | h5.1.3.2578 build 20231110 | 11.10.2023 |
SB2023101133 SB2023101134 SB2023101137 and 16 more |
||
| #VU81704 - Memory corruption CVE-2023-32972 |
CWE-119 | Low | h4.5.4.2476 build 20230728, h5.0.1.2515 build 20230907, h5.1.0.2424 build 20230609 | 09.10.2023 |
SB2023100914 |
||
| #VU81702 - Memory corruption CVE-2023-32971 |
CWE-119 | Low | h4.5.4.2476 build 20230728, h5.0.1.2515 build 20230907, h5.1.0.2424 build 20230609 | 09.10.2023 |
SB2023100914 |
||
| #VU72298 - Improper Restriction of XML External Entity Reference ('XXE') CVE-2023-20052 |
CWE-611 | Medium | h5.0.1.2376 build 20230421 | 15.02.2023 |
SB2023021569 SB2023021570 SB2023022043 and 17 more |
||
| #VU72297 - Heap-based Buffer Overflow CVE-2023-20032 |
CWE-122 | Critical | h5.0.1.2376 build 20230421 | 15.02.2023 |
SB2023021569 SB2023021570 SB2023022043 and 18 more |
||
| #VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-36760 |
CWE-444 | Medium | h5.1.0.2392 build 20230508 | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 33 more |
||
| #VU71241 - Memory corruption CVE-2006-20001 |
CWE-119 | Medium | h5.1.0.2392 build 20230508 | 17.01.2023 |
SB2023011740 SB2023011805 SB2023012728 and 28 more |
Showing elements 201 - 220 out of 293