Known vulnerabilities in QuTS hero - page 5

Vendor: QNAP Systems, Inc.
Software: QuTS hero
Software CPE: cpe:2.3:h:qnap_systems:quts-hero:*:*:*:*:*:*:*:*
Website: https://www.qnap.com
Total vulnerabilities: 293
Public exploits: 16
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QuTS hero QuTS hero is affected by 293 known vulnerabilities: 5 critical, 42 high, 98 medium, 148 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114673 - Out-of-bounds write
CVE-2025-30273		 CWE-787 Medium
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU114672 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-33032		 CWE-22 Low
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU114671 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-30271		 CWE-22 Medium
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU114670 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-30270		 CWE-22 Medium
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU114669 - NULL Pointer Dereference
CVE-2025-30274		 CWE-476 Medium
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU114668 - NULL Pointer Dereference
CVE-2025-30272		 CWE-476 Medium
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU114667 - NULL Pointer Dereference
CVE-2025-30268		 CWE-476 Medium
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU114666 - NULL Pointer Dereference
CVE-2025-30267		 CWE-476 Medium
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU114665 - Memory corruption
CVE-2025-30265		 CWE-119 Low
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU114664 - Command injection
CVE-2025-30264		 CWE-77 Medium
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU114663 - NULL Pointer Dereference
CVE-2025-29882		 CWE-476 Medium
No
No
 h5.2.5.3138 build 20250519 02.09.2025 SB2025090239
#VU110665 - Memory corruption
CVE-2024-56805		 CWE-119 Medium
No
No
 h5.2.4.3079 build 20250321 09.06.2025 SB2025060945
#VU110664 - Command injection
CVE-2025-22481		 CWE-77 Medium
No
No
 h5.2.4.3079 build 20250321 09.06.2025 SB2025060945
#VU105478 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-53693		 CWE-93 Medium
No
No
 h5.2.3.3006 build 20250108 10.03.2025 SB2025031064
#VU105477 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-53692		 CWE-78 Low
No
No
 h5.2.3.3006 build 20250108 10.03.2025 SB2025031064
#VU105476 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2024-50405		 CWE-93 Low
No
No
 h5.2.3.3006 build 20250108 10.03.2025 SB2025031064
#VU104035 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2025-26465		 CWE-300 Medium
No
No
 h5.2.4.3079 build 20250321 18.02.2025 SB2025021815
SB2025021830
SB2025021833
and 49 more
#VU104034 - Improper input validation
CVE-2025-26466		 CWE-20 Medium
Available
No
 h5.2.4.3079 build 20250321 18.02.2025 SB2025021815
SB2025021830
SB2025021840
and 25 more
#VU93517 - Off-by-one Error
CVE-2024-38441		 CWE-193 High
No
No
 h5.2.5.3138 build 20250519 01.07.2024 SB2024070147
SB2024070149
SB2024070345
and 3 more
#VU93516 - Off-by-one Error
CVE-2024-38440		 CWE-193 High
No
No
 h5.2.5.3138 build 20250519 01.07.2024 SB2024070147
SB2024070149
SB2024070345
and 3 more


Showing elements 81 - 100 out of 293