Known vulnerabilities in QuTScloud - page 2

Software: QuTScloud
Software CPE: cpe:2.3:o:qnap_systems:qutscloud:*:*:*:*:*:*:*:*
Total vulnerabilities: 119
Public exploits: 8
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QuTScloud QuTScloud is affected by 119 known vulnerabilities: 1 critical, 14 high, 52 medium, 52 low Critical High Medium Low

Vulnerabilities (119)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU90714 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-27124
CWE-78 Medium
No
No
c5.1.5.2651 03.06.2024 SB2024031110
#VU90713 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-32766
CWE-78 Medium
No
No
c5.1.5.2651 03.06.2024 SB2024031110
#VU87324 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-34980
CWE-78 Low
No
No
c5.1.0.2498 build 20230822 11.03.2024 SB2024031114
#VU87323 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2024-21901
CWE-89 Low
No
No
c5.1.5.2651 11.03.2024 SB2024031110
#VU87319 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-21900
CWE-78 Medium
No
No
c5.1.5.2651 11.03.2024 SB2024031110
#VU87318 - Improper Authentication
CVE-2024-21899
CWE-287 Medium
No
No
c5.1.5.2651 11.03.2024 SB2024031110
#VU87317 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-32969
CWE-79 Low
No
No
c5.1.5.2651 11.03.2024 SB2024031103
#VU86076 - Memory corruption
CVE-2023-45035
CWE-119 Low
No
No
c5.1.5.2651 05.02.2024 SB2024020532
#VU86075 - Memory corruption
CVE-2023-41292
CWE-119 Low
No
No
c5.1.5.2651 05.02.2024 SB2024020532
#VU86074 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-39297
CWE-78 Medium
No
No
c5.1.5.2651 05.02.2024 SB2024020533
#VU86072 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-41283
CWE-78 Low
No
No
c5.1.5.2651 05.02.2024 SB2024020534
#VU86071 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-41282
CWE-78 Low
No
No
c5.1.5.2651 05.02.2024 SB2024020534
#VU86070 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-41281
CWE-78 Low
No
No
c5.1.5.2651 05.02.2024 SB2024020534
#VU86067 - Improper Authorization
CVE-2023-32967
CWE-285 Medium
No
No
c5.1.5.2651 05.02.2024 SB2024020535
#VU86065 - Resource exhaustion
CVE-2023-45028
CWE-400 Low
No
No
c5.1.5.2651 05.02.2024 SB2024020536
#VU86064 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-45027
CWE-22 Low
No
No
c5.1.5.2651 05.02.2024 SB2024020536
#VU86063 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-45026
CWE-22 Low
No
No
c5.1.5.2651 05.02.2024 SB2024020536
#VU86061 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-47566
CWE-78 Low
No
No
c5.1.5.2651 05.02.2024 SB2024020537
#VU86060 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2023-47568
CWE-89 Medium
No
No
c5.1.5.2651 05.02.2024 SB2024020538
#VU86057 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-47567
CWE-78 Low
No
No
c5.1.5.2651 05.02.2024 SB2024020538


Showing elements 21 - 40 out of 119