Advisories · Technology

QNAP Systems Inc. QTS.

Every CVE that names QNAP Systems Inc. QTS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-50400 CVE record

CVSS 2.1 Low

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 22 Nov 2024
CVE-2024-50401 CVE record

CVSS 2.1 Low

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 22 Nov 2024
CVE-2024-38641 CVE record

CVSS 7.3 High

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 6 Sept 2024
CVE-2024-32763 CVE record

CVSS 5.3 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 6 Sept 2024
CVE-2024-21906 CVE record

CVSS 4.7 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 6 Sept 2024
CVE-2023-34979 CVE record

CVSS 6.6 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 6 Sept 2024
CVE-2023-34974 CVE record

CVSS 8.8 High

QTS, QuTS hero, QuTScloud, QVR, QES
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 6 Sept 2024
CVE-2024-32771 CVE record

CVSS 2.6 Low

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Authentication bypass
Not analysed yet 6 Sept 2024
CVE-2023-39298 CVE record

CVSS 7.8 High

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Broken access control
Not analysed yet 6 Sept 2024
CVE-2023-39300 CVE record

CVSS 7.2 High

QTS
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 6 Sept 2024
CVE-2024-21904 CVE record

CVSS 5.9 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 6 Sept 2024
CVE-2024-21903 CVE record

CVSS 6.6 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 6 Sept 2024
CVE-2024-21898 CVE record

CVSS 8.8 High

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 6 Sept 2024
CVE-2024-21897 CVE record

CVSS 8.9 High

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Cross-site scripting (XSS)
Not analysed yet 6 Sept 2024
CVE-2023-51368 CVE record

CVSS 5.4 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 6 Sept 2024
CVE-2023-51367 CVE record

CVSS 5.4 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 6 Sept 2024
CVE-2023-51366 CVE record

CVSS 8.7 High

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 6 Sept 2024
CVE-2023-50366 CVE record

CVSS 4.3 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Cross-site scripting (XSS)
Not analysed yet 6 Sept 2024
CVE-2024-32765 CVE record

CVSS 4.2 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Authentication bypass
- CWE-291
Not analysed yet 9 Aug 2024
CVE-2024-27130 CVE record

CVSS 7.2 HighCritical · CVSS 7+ and EPSS

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 21 May 2024
CVE-2024-27129 CVE record

CVSS 6.4 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 21 May 2024
CVE-2024-27128 CVE record

CVSS 6.4 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 21 May 2024
CVE-2024-27127 CVE record

CVSS 7.2 High

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 21 May 2024
CVE-2024-21902 CVE record

CVSS 6.4 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Information disclosure
- Broken access control
Not analysed yet 21 May 2024
CVE-2023-50361 CVE record

CVSS 5.0 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 26 Apr 2024
CVE-2023-50362 CVE record

CVSS 5.0 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 26 Apr 2024
CVE-2023-50363 CVE record

CVSS 7.4 High

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Broken access control
Not analysed yet 26 Apr 2024
CVE-2023-50364 CVE record

CVSS 6.4 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 26 Apr 2024
CVE-2023-51364 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 26 Apr 2024
CVE-2023-51365 CVE record

CVSS 8.7 HighCritical · CVSS 7+ and EPSS

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 26 Apr 2024
CVE-2024-21905 CVE record

CVSS 6.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 26 Apr 2024
CVE-2024-27124 CVE record

CVSS 7.5 High

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 26 Apr 2024
CVE-2024-32766 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 26 Apr 2024
CVE-2024-21901 CVE record

CVSS 4.7 Medium

myQNAPcloud
- QNAP Systems Inc. myQNAPcloud
- QNAP Systems Inc. QTS
- SQL injection
Not analysed yet 8 Mar 2024
CVE-2024-21900 CVE record

CVSS 4.3 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Other injection
Not analysed yet 8 Mar 2024
CVE-2024-21899 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Authentication bypass
Not analysed yet 8 Mar 2024
CVE-2023-32969 CVE record

CVSS 4.9 Medium

Network & Virtual Switch
- QNAP Systems Inc. QuTScloud
- QNAP Systems Inc. QTS
- Cross-site scripting (XSS)
Not analysed yet 8 Mar 2024
CVE-2023-34980 CVE record

CVSS 5.9 Medium

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 8 Mar 2024
CVE-2023-50358 CVE record

CVSS 5.8 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 13 Feb 2024
CVE-2023-47218 CVE record

CVSS 5.8 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 13 Feb 2024
CVE-2023-50359 CVE record

CVSS 3.4 Low

QTS, QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- CWE-252
Not analysed yet 2 Feb 2024
CVE-2023-47568 CVE record

CVSS 8.8 High

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- SQL injection
Not analysed yet 2 Feb 2024
CVE-2023-47567 CVE record

CVSS 4.7 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-47566 CVE record

CVSS 6.7 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-45037 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-45036 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-45035 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-45028 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Denial of service
Not analysed yet 2 Feb 2024
CVE-2023-45027 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 2 Feb 2024
CVE-2023-45026 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Path traversal
Not analysed yet 2 Feb 2024
CVE-2023-45025 CVE record

CVSS 9.0 CriticalCritical · CVSS 9+

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-41292 CVE record

CVSS 3.8 Low

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41283 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-41282 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-41281 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 2 Feb 2024
CVE-2023-41280 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41279 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41278 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41277 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024
CVE-2023-41276 CVE record

CVSS 5.5 Medium

QTS, QuTS hero, QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Memory corruption
Not analysed yet 2 Feb 2024