Known vulnerabilities in QuTS hero - page 8

Vendor: QNAP Systems, Inc.
Software: QuTS hero
Software CPE: cpe:2.3:h:qnap_systems:quts-hero:*:*:*:*:*:*:*:*
Website: https://www.qnap.com
Total vulnerabilities: 293
Public exploits: 16
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QuTS hero QuTS hero is affected by 293 known vulnerabilities: 5 critical, 42 high, 98 medium, 148 low Critical High Medium Low

Vulnerabilities (293)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96958 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-21906		 CWE-78 Low
No
No
 h5.1.8.2823 build 20240712 09.09.2024 SB2024090950
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387		 CWE-362 High
Available
No
 - 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU90713 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-32766		 CWE-78 Medium
No
No
 h4.5.4.2626 build 20231225, h5.1.3.2578 build 20231110 03.06.2024 SB2024031110
#VU89783 - Memory corruption
CVE-2024-27130		 CWE-119 Medium
Available
No
 h5.1.7.2770 build 20240520 23.05.2024 SB2024052318
#VU89781 - Memory corruption
CVE-2024-27129		 CWE-119 Medium
No
No
 h5.1.7.2770 build 20240520 23.05.2024 SB2024052318
#VU89779 - Memory corruption
CVE-2024-27128		 CWE-119 Medium
No
No
 h5.1.7.2770 build 20240520 23.05.2024 SB2024052318
#VU89778 - Double Free
CVE-2024-27127		 CWE-415 Medium
No
No
 h5.1.7.2770 build 20240520 23.05.2024 SB2024052318
#VU89777 - Incorrect Permission Assignment for Critical Resource
CVE-2024-21902		 CWE-732 Medium
No
No
 h5.1.7.2770 build 20240520 23.05.2024 SB2024052318
#VU89040 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-51365		 CWE-22 Medium
No
No
 h4.5.4.2626 build 20231225, h5.1.3.2578 build 20231110 29.04.2024 SB2024042916
#VU89039 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-51364		 CWE-22 Medium
No
No
 h4.5.4.2626 build 20231225, h5.1.3.2578 build 20231110 29.04.2024 SB2024042916
#VU89038 - Integer overflow
CVE-2024-21905		 CWE-190 Medium
No
No
 h5.1.3.2578 build 20231110 29.04.2024 SB2024042904
#VU89037 - Memory corruption
CVE-2023-50364		 CWE-119 Low
No
No
 h5.1.6.2734 build 20240414 29.04.2024 SB2024042903
#VU89034 - Improper Authorization
CVE-2023-50363		 CWE-285 Medium
No
No
 h5.1.6.2734 build 20240414 29.04.2024 SB2024042903
#VU89033 - Memory corruption
CVE-2023-50362		 CWE-119 Medium
No
No
 h5.1.6.2734 build 20240414 29.04.2024 SB2024042903
#VU89032 - Memory corruption
CVE-2023-50361		 CWE-119 Medium
No
No
 h5.1.6.2734 build 20240414 29.04.2024 SB2024042903
#VU87324 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-34980		 CWE-78 Low
No
No
 h4.5.4.2626 build 20231225 11.03.2024 SB2024031114
#VU87323 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-21901		 CWE-89 Low
No
No
 h4.5.4.2626 build 20231225, h5.1.3.2578 build 20231110 11.03.2024 SB2024031110
#VU87319 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-21900		 CWE-78 Medium
No
No
 h4.5.4.2626 build 20231225, h5.1.3.2578 build 20231110 11.03.2024 SB2024031110
#VU87318 - Improper Authentication
CVE-2024-21899		 CWE-287 Medium
No
No
 h4.5.4.2626 build 20231225, h5.1.3.2578 build 20231110 11.03.2024 SB2024031110
#VU82011 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-34975		 CWE-89 Medium
No
No
 h4.5.4.2626 build 20231225 16.10.2023 SB2023101604
SB2024031114


Showing elements 141 - 160 out of 293