Known vulnerabilities in QuTScloud - page 6

Software: QuTScloud
Software CPE: cpe:2.3:o:qnap_systems:qutscloud:*:*:*:*:*:*:*:*
Total vulnerabilities: 119
Public exploits: 8
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting QuTScloud QuTScloud is affected by 119 known vulnerabilities: 1 critical, 14 high, 52 medium, 52 low Critical High Medium Low

Vulnerabilities (119)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU61622 - Out-of-bounds read
CVE-2022-23124
CWE-125 Medium
No
No
- 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 5 more
#VU61621 - Out-of-bounds read
CVE-2022-23123
CWE-125 Medium
No
No
- 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 6 more
#VU61619 - Stack-based buffer overflow
CVE-2022-23125
CWE-121 High
No
No
- 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 6 more
#VU61618 - Stack-based buffer overflow
CVE-2022-23122
CWE-121 High
No
No
- 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 5 more
#VU61617 - Stack-based buffer overflow
CVE-2022-0194
CWE-121 High
No
No
- 25.03.2022 SB2022032507
SB2022042577
SB2022042578
and 5 more
#VU59282 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-38674
CWE-79 Low
No
No
c4.5.7.1864 07.01.2022 SB2022010701
#VU59112 - Exposure of sensitive information to an unauthorized actor
CVE-2021-34347
CWE-200 Medium
No
No
c4.5.7.1864 29.12.2021 SB2021122910
#VU56447 - Improper Restriction of Rendered UI Layers or Frames
CVE-2018-19957
CWE-1021 Medium
No
No
c4.5.6.1755 build 20210809 10.09.2021 SB2021091007
#VU56436 - Stack-based buffer overflow
CVE-2021-34343
CWE-121 High
No
No
c4.5.6.1755 09.09.2021 SB2021090917
#VU56435 - Stack-based buffer overflow
CVE-2021-28816
CWE-121 High
No
No
c4.5.6.1755 09.09.2021 SB2021090917
#VU54221 - Unprotected Storage of Credentials
CVE-2021-28815
CWE-256 Medium
No
No
c4.5.4 18.06.2021 SB2021061809
#VU53810 - Command injection
CWE-77 Medium
No
No
c4.5.4: 1.12.1012 04.06.2021 SB2021060404
#VU53763 - Command injection
CVE-2021-28812
CWE-77 High
No
No
c4.5.4 03.06.2021 SB2021060311
#VU53762 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-28807
CWE-79 Low
No
No
c4.5.4 03.06.2021 SB2021060310
#VU52761 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-28806
CWE-79 Low
No
No
c4.5.5.1656 Build 20210503 29.04.2021 SB2021042927
SB2021060313
#VU52748 - Out-of-bounds read
CVE-2021-20254
CWE-125 Medium
No
No
4.5.3.1670 20210515 29.04.2021 SB2021042916
SB2021052619
SB2021060941
and 30 more
#VU49845 - Insufficient Verification of Data Authenticity
CVE-2020-25686
CWE-345 Low
Available
No
4.5.3.1652 20210428 20.01.2021 SB2021012070
SB20210120108
SB20210120122
and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-25685
CWE-327 Low
Available
No
4.5.3.1652 20210428 20.01.2021 SB2021012070
SB20210120107
SB20210120122
and 27 more
#VU49843 - Insufficient Verification of Data Authenticity
CVE-2020-25684
CWE-345 Low
Available
No
4.5.3.1652 20210428 20.01.2021 SB2021012070
SB20210120106
SB20210120122
and 27 more


Showing elements 101 - 120 out of 119