Skip to content
OpenAdvisories

Product · QNAP Systems

QTS

253 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Critical 9.8
    CVE-2020-2509 Exploited Public exploit EPSS 34%

    Command Injection Vulnerability in QTS and QuTS hero

    A command injection vulnerability has been reported to affect QTS and QuTS hero. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. We have already fixed this vulnerability in the following versions: …

    QNAP Systems QTS QuTS hero
    KEV Apr 11, 2022
  • Medium 6.1
    CVE-2018-19953 Exploited · Ransomware EPSS 31%

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…

    QNAP Systems QTS
    KEV May 24, 2022
  • High 8.0
    CVE-2018-19943 Exploited · Ransomware EPSS 23%

    If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has a…

    QNAP Systems QTS
    KEV May 24, 2022
  • Critical 9.8
    CVE-2018-19949 Exploited · Ransomware EPSS 30%

    If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has alr…

    QNAP Systems QTS
    KEV May 24, 2022