Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qts:5.1.4.2596:-:*:*:*:*:*:*

part: o version: 5.1.4.2596 update: -

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQts (9004baf2-b431-53ba-b074-38fcdcfcd981)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-51365 vulnerable 2026-06-08 06:16:17.375160 QTS, QuTS hero, QuTScloud
HIGH (8.7)
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
Published: 2024-04-26T15:01:04.335Z
Updated: 2024-08-02T22:32:09.027Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51364 vulnerable 2026-06-08 06:16:17.370781 QTS, QuTS hero, QuTScloud
HIGH (8.7)
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.3.2578 build 20231110 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
Published: 2024-04-26T15:01:08.345Z
Updated: 2024-08-02T22:32:09.120Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45035 vulnerable 2026-06-08 06:12:41.691237 QTS, QuTS hero, QuTScloud
LOW (3.8)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later
Published: 2024-02-02T16:05:25.788Z
Updated: 2025-06-17T21:29:23.649Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-45025 vulnerable 2026-06-08 06:12:41.659123 QTS, QuTS hero, QuTScloud
CRITICAL (9)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QTS 4.5.4.2627 build 20231225 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTS hero h4.5.4.2626 build 20231225 and later QuTScloud c5.1.5.2651 and later
Published: 2024-02-02T16:05:02.613Z
Updated: 2025-06-16T18:05:14.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41292 vulnerable 2026-06-08 06:11:05.846319 QTS, QuTS hero, QuTScloud
LOW (3.8)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build 20231128 and later QuTS hero h5.1.4.2596 build 20231128 and later QuTScloud c5.1.5.2651 and later
Published: 2024-02-02T16:04:57.919Z
Updated: 2025-06-17T21:29:23.513Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41283 vulnerable 2026-06-08 06:11:05.830001 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39297 vulnerable 2026-06-08 06:09:36.873962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32969 vulnerable 2026-06-08 06:04:48.110766 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.