Known vulnerabilities in QuTScloud - page 4

Software: QuTScloud
Software CPE: cpe:2.3:o:qnap_systems:qutscloud:*:*:*:*:*:*:*:*
Total vulnerabilities: 119
Public exploits: 8
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QuTScloud QuTScloud is affected by 119 known vulnerabilities: 1 critical, 14 high, 52 medium, 52 low Critical High Medium Low

Vulnerabilities (119)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU81704 - Memory corruption
CVE-2023-32972
CWE-119 Low
No
No
c5.1.0.2498 09.10.2023 SB2023100914
#VU81702 - Memory corruption
CVE-2023-32971
CWE-119 Low
No
No
c5.1.0.2498 09.10.2023 SB2023100914
#VU80846 - Out-of-bounds write
CVE-2023-23359
CWE-787 Medium
No
No
c5.0.1.2374 18.09.2023 SB2023091809
#VU80844 - Out-of-bounds write
CVE-2023-23358
CWE-787 Medium
No
No
c5.0.1.2374 18.09.2023 SB2023091809
#VU80843 - NULL Pointer Dereference
CVE-2023-23361
CWE-476 Medium
No
No
c5.0.1.2374 18.09.2023 SB2023091809
#VU80841 - NULL Pointer Dereference
CVE-2023-23360
CWE-476 Medium
No
No
c5.0.1.2374 18.09.2023 SB2023091809
#VU80837 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-23362
CWE-78 Medium
No
No
c5.0.1.2374 18.09.2023 SB2023091808
#VU80562 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-23357
CWE-79 Low
No
No
c5.0.1 08.09.2023 SB2023090830
#VU80561 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-23354
CWE-79 Low
No
No
c5.0.1 08.09.2023 SB2023090830
#VU78741 - Resource exhaustion
CVE-2022-27600
CWE-400 Low
No
No
c5.0.1.2374 build 20230419 28.07.2023 SB2023072811
#VU74200 - Command injection
CVE-2023-23355
CWE-77 Medium
No
No
- 30.03.2023 SB2023033031
#VU74195 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27598
CWE-200 Medium
No
No
- 30.03.2023 SB2023033031
#VU74194 - Exposure of sensitive information to an unauthorized actor
CVE-2022-27597
CWE-200 Medium
No
No
- 30.03.2023 SB2023033031
#VU72298 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2023-20052
CWE-611 Medium
Available
No
c5.0.1.2374 15.02.2023 SB2023021569
SB2023021570
SB2023022043
and 17 more
#VU71332 - Improper input validation
CVE-2023-22809
CWE-20 Low
Available
No
- 18.01.2023 SB20230118100
SB20230118104
SB20230118105
and 55 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436
CWE-113 Medium
No
No
c5.0.1.2374 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760
CWE-444 Medium
No
No
c5.0.1.2374 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001
CWE-119 Medium
No
No
c5.0.1.2374 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU68701 - Heap-based Buffer Overflow
CVE-2022-3437
CWE-122 Low
No
No
- 25.10.2022 SB2022102524
SB2022102558
SB2022102521
and 33 more
#VU68700 - UNIX Symbolic Link (Symlink) Following
CVE-2022-3592
CWE-61 Medium
No
No
- 25.10.2022 SB2022102524
SB2023033037
SB2023091702
and 4 more


Showing elements 61 - 80 out of 119