QT
Product
QTS
On CISA KEVExploited in the wildRansomware-linked
283
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 43High 115Medium 120Low 3
Watch
Add QTS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-45040 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +2 more |
| CVE-2023-45039 | 7.2 | Jan 5 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +2 more |
| CVE-2023-39294 | 7.2 | Jan 5 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +1 more |
| CVE-2023-32975 | 7.2 | Dec 8 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +13 more |
| CVE-2023-32968 | 7.2 | Dec 8 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 5.1.0.2348; 5.1.0.2399; 5.1.0.2418; 5.1.0.2444; 5.1.0.2466; 5.1.1.2491; +13 more |
| CVE-2023-23367 | 7.2 | Nov 10 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions Affected: 5.0.0.1716; 5.0.0.1785; 5.0.0.1808; 5.0.0.1828; 5.0.0.1837; 5.0.0.1850; +14 more |
| CVE-2023-32973 | 7.2 | Oct 13 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 4.5.1 before 4.5.4.2467; 5.0.0.1716 before 5.0.1.2425; 5.1.0 before 5.1.0.2444 |
| CVE-2023-32972 | 7.2 | Oct 6 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 4.5.0 before 4.5.4.2467; 5.0.0 before 5.0.1.2425; 5.1.0 before 5.1.0.2444 |
| CVE-2023-32971 | 7.2 | Oct 6 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions Affected: 4.5.0 before 4.5.4.2467; 5.0.0 before 5.0.1.2425; 5.1.0 before 5.1.0.2444 |
| CVE-2023-23355 | 7.2 | Mar 29 | An OS command injection vulnerability has been reported to affect QNAP operating systems Affected: before 5.0.1.2346 |
| CVE-2021-34343 | 7.2 | Sep 10 | A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero Affected: before 4.3.3.1693; 4.3.4 before 4.3.6.1750; 4.4.0 before 4.5.4.1715; 5.0.0 before 5.0.0.1716 |
| CVE-2020-2508 | 7.2 | Jan 11 | A command injection vulnerability has been reported to affect QTS and QuTS hero Affected: before 4.5.1.1456 |
| CVE-2020-2492 | 7.2 | Nov 16 | If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands Affected: before 4.4.3.1421 |
| CVE-2020-2490 | 7.2 | Nov 16 | If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands Affected: before 4.4.3.1421 |
| CVE-2024-53693 | 7.1 | Mar 7 | An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions Affected: 5.2.0.2737; 5.2.0.2744; 5.2.0.2782; 5.2.0.2802; 5.2.0.2823; 5.2.0.2851; +3 more |