Qes (Qnap Systems Inc.) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2024-09-06. Vendor: Qnap Systems Inc..

CVEs of Qes

• CVE-2023-34974 - CVSS 8.8 (high), 2024-09-06: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to…
• CVE-2023-23355 - CVSS 7.2 (high), 2023-03-29: An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated…
• CVE-2020-2505 - CVSS 2.3 (low), 2020-12-24: If exploited, this vulnerability could allow attackers to gain sensitive information via generation of error messages. QNAP has already fixed these issues in…
• CVE-2020-2504 - CVSS 7.5 (high), 2020-12-24: If exploited, this absolute path traversal vulnerability could allow attackers to traverse files in File Station. QNAP has already fixed these issues in QES…
• CVE-2020-2503 - CVSS 9 (critical), 2020-12-24: If exploited, this stored cross-site scripting vulnerability could allow remote attackers to inject malicious code in File Station. QNAP has already fixed…
• CVE-2020-2499 - CVSS 7.2 (high), 2020-12-24: A hard-coded password vulnerability has been reported to affect earlier versions of QES. If exploited, this vulnerability could allow attackers to log in with…