Advisories · Technology

QNAP Systems Inc. QuTScloud.

Every CVE that names QNAP Systems Inc. QuTScloud among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2021-28816 CVE record

CVSS 7.6 High

Stack Buffer Overflow Vulnerabilities in QTS, QuTS hero, and QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTScloud
- Memory corruption
Not analysed yet 10 Sept 2021
CVE-2018-19957 CVE record

Insufficient HTTP Security Headers in QTS, QuTS hero, and QuTScloud
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- CWE-1021
Not analysed yet 10 Sept 2021
CVE-2021-28800 CVE record

CVSS 8.1 High

Command Injection Vulnerability in QTS
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Command injection
Not analysed yet 24 Jun 2021
CVE-2021-28806 CVE record

CVSS 5.7 Medium

DOM-Based XSS Vulnerability in QTS and QuTS hero
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Cross-site scripting (XSS)
Not analysed yet 3 Jun 2021
CVE-2018-19942 CVE record

Cross-site Scripting Vulnerability in File Station
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- Cross-site scripting (XSS)
Not analysed yet 16 Apr 2021
CVE-2018-19941 CVE record

Cleartext Storage of Sensitive Information in Cookies
- QNAP Systems Inc. QTS
- QNAP Systems Inc. QuTS hero
- CWE-315
Not analysed yet 31 Dec 2020