Known vulnerabilities in QuTS hero - page 14
Vendor:
QNAP Systems, Inc.
Software:
QuTS hero
Software CPE:
cpe:2.3:h:qnap_systems:quts-hero:*:*:*:*:*:*:*:*
Website:
https://www.qnap.com
Total vulnerabilities:
293
Public exploits:
16
Known exploited (KEV):
5
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
h5.2.9
h5.2.8
h4.5.0.1409 build 20200829
h4.5.0.1352 build 20200703
h4.5.0.1308 build 20200520
h4.5.0.1279 build 20200421
h4.5.4.2956 build 20241119
h4.5.4.2790 build 20240606
h4.5.4.2626 build 20231225
h4.5.4.2476 build 20230728
h4.5.4.2374 build 20230417
h4.5.4.2272 build 20230105
h4.5.4.2217 build 20221111
h4.5.4.2138 build 20220824
h4.5.4.2052 build 20220530
h4.5.4.1991 build 20220330
h4.5.4.1971 build 20220310
h4.5.4.1951 build 20220218
h4.5.4.1892 build 20211223
h4.5.4.1848 build 20211109
h4.5.4.1813 build 20211006
h4.5.4.1800 build 20210923
h4.5.4.1771 build 20210825
h5.0.1.2515 build 20230907
h5.0.1.2376 build 20230421
h5.0.1.2348 build 20230324
h5.0.1.2277 build 20230112
h5.0.1.2269 build 20230104
h5.0.1.2248 build 20221215
h5.0.1.2192 build 20221020
h5.0.1.2045 build 20220526
h5.0.0.2120 build 20220804
h5.0.0.2069 build 20220614
h5.0.0.2022 build 20220428
h5.0.0.1986 build 20220324
h5.0.0.1949 build 20220215
h5.0.0.1900 build 20211228
h5.0.0.1892 build 20211222
h5.0.0.1856 build 20211117
h5.0.0.1844 build 20211105
h5.0.0.1772 build 20210826
h5.2.8.3350 build 20251216
h5.3.2.3354 build 20251225
h5.3.1.3250 build 20250912
h5.2.8.3321 build 20251117
h5.3.1.3292 build 20251024
h5.2.7.3297 build 20251024
h5.2.7.3256 build 20250913
h5.2.6.3195 build 20250715
h5.3.0.3115 build 20250430
h5.2.5.3138 build 20250519
h5.2.4.3079 build 20250321
h5.2.3.3006 build 20250108
h5.2.0.2851 build 20240808
h5.2.2.2952 build 20241116
h5.1.9.2954 build 20241120
h5.2.1.2929 build 20241025
h5.2.0.2782 build 20240601
h5.1.8.2823 build 20240712
h5.1.7.2770 build 20240520
h5.1.6.2734 build 20240414
h5.1.5.2647 build 20240118
h5.1.4.2596 build 20231128
h5.1.3.2578 build 20231110
h5.1.2.2534 build 20230927
h5.1.1.2488 build 20230812
h5.1.0.2392 build 20230508
h5.0.1
h4.5.4
h5.1.0
h5.1.0.2466 build 20230721
h5.1.0.2453 build 20230708
h5.1.0.2424 build 20230609
h5.1.0.2409 build 20230525
h5.0.0.2131 build 20220815
h5.0.0.2069 Build 20220614
h5.0.0.2022 Build 20220428
h4.5.4.1991 Build 20220330
h5.0.0.1986 Build 20220324
h4.5.4.1971 Build 20220310
h4.5.4.1951 Build 20220218
h5.0.0.1949 Build 20220215
h4.5.3
h5.0.0.1900 Build 20211228
h4.5.4.1848 Build 20211109
c5.0.0.1919 build 20220119
h5.0.0.1856 Build 20211117
h5.0.0
h5.0.0.1772 Build 20210826
h4.5.3.1710 build 20210624
h4.5.3.1698 build 20210612
h4.5.3.1697 build 20210611
h4.5.2: 1.12.1012
h4.5.2
h4.5.3.1670 build 20210515
h4.5.1
h4.5.2.1638 build 20210414
h4.5.1.1582 build 20210217
h4.5.1.1491 build 20201119
h4.5.1.1472 build 20201031
Vulnerabilities (293)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU62841 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2021-44054 |
CWE-601 | Medium | h4.5.4.1971 Build 20220310, h5.0.0.1986 Build 20220324 | 06.05.2022 |
SB2022050605 |
||
| #VU62837 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-38693 |
CWE-22 | Medium | h4.5.4.1951 Build 20220218, h5.0.0.1949 Build 20220215 | 06.05.2022 |
SB2022050604 |
||
| #VU61622 - Out-of-bounds read CVE-2022-23124 |
CWE-125 | Medium | - | 25.03.2022 |
SB2022032507 SB2022042577 SB2022042578 and 5 more |
||
| #VU61621 - Out-of-bounds read CVE-2022-23123 |
CWE-125 | Medium | - | 25.03.2022 |
SB2022032507 SB2022042577 SB2022042578 and 6 more |
||
| #VU61620 - Improper Handling of Exceptional Conditions CVE-2022-23121 |
CWE-755 | High | - | 25.03.2022 |
SB2022032507 SB2022042577 SB2022042578 and 7 more |
||
| #VU61619 - Stack-based buffer overflow CVE-2022-23125 |
CWE-121 | High | - | 25.03.2022 |
SB2022032507 SB2022042577 SB2022042578 and 6 more |
||
| #VU61618 - Stack-based buffer overflow CVE-2022-23122 |
CWE-121 | High | - | 25.03.2022 |
SB2022032507 SB2022042577 SB2022042578 and 5 more |
||
| #VU61617 - Stack-based buffer overflow CVE-2022-0194 |
CWE-121 | High | - | 25.03.2022 |
SB2022032507 SB2022042577 SB2022042578 and 5 more |
||
| #VU60526 - Improper Authentication CVE-2021-38679 |
CWE-287 | High | - | 11.02.2022 |
SB2022021101 |
||
| #VU59601 - Improper Control of Generation of Code ('Code Injection') |
CWE-94 | Critical | c5.0.0.1919 build 20220119, h4.5.4.1892 build 20211223, h5.0.0.1892 build 20211222 | 14.01.2022 |
SB2022011403 |
||
| #VU59282 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-38674 |
CWE-79 | Low | h4.5.4.1771 build 20210825 | 07.01.2022 |
SB2022010701 |
||
| #VU59112 - Exposure of sensitive information to an unauthorized actor CVE-2021-34347 |
CWE-200 | Medium | h4.5.4.1771 build 20210825 | 29.12.2021 |
SB2021122910 |
||
| #VU58550 - Improper input validation |
CWE-20 | Medium | h5.0.0.1856 Build 20211117 | 07.12.2021 |
SB2021120702 |
||
| #VU58255 - Heap-based Buffer Overflow |
CWE-122 | High | h4.5.4.1813 build 20211006, h5.0.0.1844 build 20211105 | 19.11.2021 |
SB2021111907 |
||
| #VU57599 - Command injection CVE-2021-34362 |
CWE-77 | High | - | 22.10.2021 |
SB2021102202 |
||
| #VU56447 - Improper Restriction of Rendered UI Layers or Frames CVE-2018-19957 |
CWE-1021 | Medium | h4.5.4.1771 build 20210825 | 10.09.2021 |
SB2021091007 |
||
| #VU56436 - Stack-based buffer overflow CVE-2021-34343 |
CWE-121 | High | h4.5.4.1771 build 20210825 | 09.09.2021 |
SB2021090917 |
||
| #VU56435 - Stack-based buffer overflow CVE-2021-28816 |
CWE-121 | High | h4.5.4.1771 build 20210825 | 09.09.2021 |
SB2021090917 |
||
| #VU52802 - Heap-based Buffer Overflow CVE-2021-31439 |
CWE-122 | Medium | - | 03.05.2021 |
SB2021050308 SB2022042577 SB2022042578 and 6 more |
||
| #VU49843 - Insufficient Verification of Data Authenticity CVE-2020-25684 |
CWE-345 | Low | h4.5.3.1670 build 20210515 | 20.01.2021 |
SB2021012070 SB20210120106 SB20210120122 and 27 more |
Showing elements 261 - 280 out of 293