Known vulnerabilities in QuTS hero - page 4

Vendor: QNAP Systems, Inc.
Software: QuTS hero
Software CPE: cpe:2.3:h:qnap_systems:quts-hero:*:*:*:*:*:*:*:*
Website: https://www.qnap.com
Total vulnerabilities: 293
Public exploits: 16
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QuTS hero QuTS hero is affected by 293 known vulnerabilities: 5 critical, 42 high, 98 medium, 148 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU116674 - NULL Pointer Dereference
CVE-2025-52857		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116673 - NULL Pointer Dereference
CVE-2025-52855		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116672 - NULL Pointer Dereference
CVE-2025-52854		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116670 - NULL Pointer Dereference
CVE-2025-52433		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116669 - NULL Pointer Dereference
CVE-2025-52432		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116668 - NULL Pointer Dereference
CVE-2025-52428		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116664 - NULL Pointer Dereference
CVE-2025-52427		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116662 - NULL Pointer Dereference
CVE-2025-52424		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116661 - NULL Pointer Dereference
CVE-2025-48729		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116660 - NULL Pointer Dereference
CVE-2025-48728		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116659 - NULL Pointer Dereference
CVE-2025-48727		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116658 - NULL Pointer Dereference
CVE-2025-48726		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116657 - NULL Pointer Dereference
CVE-2025-47214		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116656 - NULL Pointer Dereference
CVE-2025-47213		 CWE-476 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116655 - Command injection
CVE-2025-47212		 CWE-77 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU116654 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47211		 CWE-22 Low
No
No
 h5.2.6.3195 build 20250715 07.10.2025 SB2025100744
#VU93512 - Off-by-one Error
CVE-2024-38439		 CWE-193 High
No
No
 h5.2.5.3138 build 20250519 01.07.2024 SB2024070147
SB2024070149
SB2024070345
and 3 more
#VU80842 - Type confusion
CVE-2023-42464		 CWE-843 High
No
No
 h5.2.5.3138 build 20250519 18.09.2023 SB2023091802
SB2023091874
SB2023092101
and 3 more
#VU70538 - Heap-based Buffer Overflow
CVE-2022-45188		 CWE-122 High
No
No
 h5.2.5.3138 build 20250519 29.12.2022 SB2022122905
SB2022122912
SB2023011331
and 11 more
#VU61623 - Unrestricted Upload of File with Dangerous Type
CVE-2022-22995		 CWE-434 High
No
No
 h5.2.5.3138 build 20250519 25.03.2022 SB2022032507
SB2023100551
SB2023100552
and 10 more


Showing elements 61 - 80 out of 293