Qutscloud (Qnap Systems Inc.) - vulnerabilities (CVEs)

66 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-06-10. Vendor: Qnap Systems Inc..

CVEs of Qutscloud

CVE-2025-59382 - CVSS 1.2 (low), 2026-06-10: QTS, QuTS hero, QuTScloud are not affected. We have already fixed the vulnerability in the following version:
CVE-2022-27600 - CVSS 7.5 (high), 2024-12-19: An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could…
CVE-2024-32771 - CVSS 2.6 (low), 2024-09-06: An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited,…
CVE-2023-39300 - CVSS 7.2 (high), 2024-09-06: An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to…
CVE-2023-39298 - CVSS 7.8 (high), 2024-09-06: A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local…
CVE-2023-34974 - CVSS 8.8 (high), 2024-09-06: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to…
CVE-2024-21905 - CVSS 8.2 (high), 2024-04-26: An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could…
CVE-2023-51365 - CVSS 8.7 (high), 2024-04-26: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read…
CVE-2024-32766 - CVSS 10 (critical), 2024-04-26: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to…
CVE-2024-27124 - CVSS 7.5 (high), 2024-04-26: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to…
CVE-2023-51364 - CVSS 8.7 (high), 2024-04-26: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read…
CVE-2024-21900 - CVSS 6.5 (medium), 2024-03-08: An injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users…
CVE-2024-21899 - CVSS 9.8 (critical), 2024-03-08: An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users…
CVE-2023-32969 - CVSS 4.9 (medium), 2024-03-08: A cross-site scripting (XSS) vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow authenticated…
CVE-2023-50358 - CVSS 5.8 (medium), 2024-02-13: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to…
CVE-2023-47218 - CVSS 8.3 (high), 2024-02-13: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to…
CVE-2023-47567 - CVSS 7.2 (high), 2024-02-02: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-47566 - CVSS 7.2 (high), 2024-02-02: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-47568 - CVSS 8.8 (high), 2024-02-02: A SQL injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated…
CVE-2023-45036 - CVSS 7.2 (high), 2024-02-02: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-45037 - CVSS 7.2 (high), 2024-02-02: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-45026 - CVSS 5.5 (medium), 2024-02-02: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated…
CVE-2023-45035 - CVSS 7.2 (high), 2024-02-02: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-45028 - CVSS 5.5 (medium), 2024-02-02: An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could…
CVE-2023-45027 - CVSS 5.5 (medium), 2024-02-02: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated…
CVE-2023-41283 - CVSS 7.2 (high), 2024-02-02: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-41282 - CVSS 7.2 (high), 2024-02-02: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-45025 - CVSS 9.8 (critical), 2024-02-02: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to…
CVE-2023-41281 - CVSS 7.2 (high), 2024-02-02: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-41292 - CVSS 7.2 (high), 2024-02-02: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-41277 - CVSS 7.2 (high), 2024-02-02: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-41280 - CVSS 7.2 (high), 2024-02-02: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-41276 - CVSS 7.2 (high), 2024-02-02: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-41279 - CVSS 7.2 (high), 2024-02-02: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-41278 - CVSS 7.2 (high), 2024-02-02: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-41274 - CVSS 5.5 (medium), 2024-02-02: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-41273 - CVSS 7.2 (high), 2024-02-02: A heap-based buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-39303 - CVSS 9.8 (critical), 2024-02-02: An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users…
CVE-2023-41275 - CVSS 7.2 (high), 2024-02-02: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-39302 - CVSS 7.2 (high), 2024-02-02: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-39297 - CVSS 8.8 (high), 2024-02-02: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-32967 - CVSS 6.5 (medium), 2024-02-02: An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-23367 - CVSS 7.2 (high), 2023-11-10: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-39301 - CVSS 4.3 (medium), 2023-11-03: A server-side request forgery (SSRF) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could…
CVE-2023-23368 - CVSS 9.8 (critical), 2023-11-03: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to…
CVE-2023-32974 - CVSS 7.5 (high), 2023-10-13: A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read…
CVE-2023-34975 - CVSS 8.8 (high), 2023-10-13: An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-32973 - CVSS 7.2 (high), 2023-10-13: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-32970 - CVSS 4.9 (medium), 2023-10-13: A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow…
CVE-2023-32972 - CVSS 7.2 (high), 2023-10-06: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-32971 - CVSS 7.2 (high), 2023-10-06: A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability…
CVE-2023-23362 - CVSS 8.8 (high), 2023-09-22: An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability allows remote authenticated users to…
CVE-2023-23355 - CVSS 7.2 (high), 2023-03-29: An OS command injection vulnerability has been reported to affect QNAP operating systems. If exploited, the vulnerability possibly allows remote authenticated…
CVE-2021-44051 - CVSS 8.8 (high), 2022-05-05: A command injection vulnerability has been reported to affect QNAP NAS running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows remote…
CVE-2021-44054 - CVSS 6.1 (medium), 2022-05-05: An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows attackers…
CVE-2021-44053 - CVSS 6.1 (medium), 2022-05-05: A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QTS, QuTS hero and QuTScloud. If exploited, this vulnerability…
CVE-2021-44052 - CVSS 8.1 (high), 2022-05-05: An improper link resolution before file access ('Link Following') vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS.…
CVE-2021-38693 - CVSS 5.3 (medium), 2022-05-05: A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance. If exploited, this vulnerability…
CVE-2021-38674 - CVSS 6.1 (medium), 2022-01-07: A cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers…
CVE-2021-34343 - CVSS 7.2 (high), 2021-09-10: A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows…
CVE-2021-28816 - CVSS 8.8 (high), 2021-09-10: A stack buffer overflow vulnerability has been reported to affect QNAP device running QTS, QuTScloud, QuTS hero. If exploited, this vulnerability allows…
CVE-2018-19957 - CVSS 6.1 (medium), 2021-09-10: A vulnerability involving insufficient HTTP security headers has been reported to affect QNAP NAS running QTS, QuTS hero, and QuTScloud. This vulnerability…
CVE-2021-28800 - CVSS 9.8 (critical), 2021-06-24: A command injection vulnerability has been reported to affect QNAP NAS running legacy versions of QTS. If exploited, this vulnerability allows attackers to…
CVE-2021-28806 - CVSS 5.7 (medium), 2021-06-03: A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject…
CVE-2018-19942 - CVSS 6.1 (medium), 2021-04-16: A cross-site scripting (XSS) vulnerability has been reported to affect earlier versions of File Station. If exploited, this vulnerability allows remote…
CVE-2018-19941 - CVSS 7.5 (high), 2020-12-31: A vulnerability has been reported to affect QNAP NAS. If exploited, this vulnerability allows an attacker to access sensitive information stored in cleartext…