Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:quts_hero:h5.2.3.3006:build_20250108:*:*:*:*:*:*

part: o version: h5.2.3.3006 update: build_20250108

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQuts Hero (c808c21e-6b74-58ae-ac08-bf1b891081da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9110 vulnerable 2026-06-08 07:45:21.737635 QTS, QuTS hero
An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3332 build 20251128 and later QuTS hero h5.2.8.3321 build 20251117 and later QuTS hero h5.3.1.3250 build 20250912 and later
Published: 2026-01-02T15:17:29.481Z
Updated: 2026-01-02T19:14:42.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66277 vulnerable 2026-06-08 07:41:18.513646 QTS, QuTS hero
A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3350 build 20251216 and later QuTS hero h5.3.2.3354 build 20251225 and later QuTS hero h5.2.8.3350 build 20251216 and later
Published: 2026-02-11T12:15:43.851Z
Updated: 2026-02-26T14:44:26.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62852 vulnerable 2026-06-08 07:39:16.855084 QTS, QuTS hero
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QTS 5.2.8.3332 build 20251128 and later
Published: 2026-01-02T15:19:40.492Z
Updated: 2026-01-05T20:38:31.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62849 vulnerable 2026-06-08 07:39:16.818666 QTS, QuTS hero
An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later
Published: 2025-12-16T02:24:58.273Z
Updated: 2026-02-26T16:07:33.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62848 vulnerable 2026-06-08 07:39:16.810238 QTS, QuTS hero
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later
Published: 2025-12-16T02:25:04.815Z
Updated: 2026-03-18T03:55:46.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62847 vulnerable 2026-06-08 07:39:16.799309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59385 vulnerable 2026-06-08 07:35:21.813282 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59381 vulnerable 2026-06-08 07:35:21.799735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59380 vulnerable 2026-06-08 07:35:21.787734 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58466 vulnerable 2026-06-08 07:35:18.384955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57705 vulnerable 2026-06-08 07:33:15.994861 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54166 vulnerable 2026-06-08 07:33:11.711653 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54165 vulnerable 2026-06-08 07:33:11.708816 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54164 vulnerable 2026-06-08 07:33:11.682765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53596 vulnerable 2026-06-08 07:31:14.779149 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53593 vulnerable 2026-06-08 07:31:14.755023 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53592 vulnerable 2026-06-08 07:31:14.752518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53591 vulnerable 2026-06-08 07:31:14.750119 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53590 vulnerable 2026-06-08 07:31:14.742604 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53589 vulnerable 2026-06-08 07:31:14.740301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53414 vulnerable 2026-06-08 07:31:14.487729 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53407 vulnerable 2026-06-08 07:31:14.484300 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53406 vulnerable 2026-06-08 07:31:14.482136 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53405 vulnerable 2026-06-08 07:31:14.478885 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52872 vulnerable 2026-06-08 07:31:13.113818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52866 vulnerable 2026-06-08 07:31:13.102866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52864 vulnerable 2026-06-08 07:31:13.076264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52863 vulnerable 2026-06-08 07:31:13.073717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52862 vulnerable 2026-06-08 07:31:13.071597 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52860 vulnerable 2026-06-08 07:31:13.069505 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52859 vulnerable 2026-06-08 07:31:13.063550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52858 vulnerable 2026-06-08 07:31:13.062005 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52857 vulnerable 2026-06-08 07:31:13.059891 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52855 vulnerable 2026-06-08 07:31:13.044358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52854 vulnerable 2026-06-08 07:31:13.042038 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52853 vulnerable 2026-06-08 07:31:13.033562 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52433 vulnerable 2026-06-08 07:31:11.548688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52432 vulnerable 2026-06-08 07:31:11.535279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52431 vulnerable 2026-06-08 07:31:11.533308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52430 vulnerable 2026-06-08 07:31:11.530269 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52429 vulnerable 2026-06-08 07:31:11.528795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52428 vulnerable 2026-06-08 07:31:11.526593 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52427 vulnerable 2026-06-08 07:31:11.524240 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52426 vulnerable 2026-06-08 07:31:11.512417 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52424 vulnerable 2026-06-08 07:31:11.506898 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48730 vulnerable 2026-06-08 07:29:11.279243 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48729 vulnerable 2026-06-08 07:29:11.272026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48728 vulnerable 2026-06-08 07:29:11.268968 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48727 vulnerable 2026-06-08 07:29:11.265964 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48726 vulnerable 2026-06-08 07:29:11.258518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48725 vulnerable 2026-06-08 07:29:11.244445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48721 vulnerable 2026-06-08 07:29:11.201114 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47214 vulnerable 2026-06-08 07:27:09.825406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47213 vulnerable 2026-06-08 07:27:09.823138 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47212 vulnerable 2026-06-08 07:27:09.820522 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47211 vulnerable 2026-06-08 07:27:09.817983 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47208 vulnerable 2026-06-08 07:27:09.801264 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47205 vulnerable 2026-06-08 07:27:09.786144 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44013 vulnerable 2026-06-08 07:25:10.587839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-33032 vulnerable 2026-06-08 07:19:01.424569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30274 vulnerable 2026-06-08 07:16:59.411072 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30273 vulnerable 2026-06-08 07:16:59.408049 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30272 vulnerable 2026-06-08 07:16:59.405442 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30271 vulnerable 2026-06-08 07:16:59.402943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30270 vulnerable 2026-06-08 07:16:59.393515 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30268 vulnerable 2026-06-08 07:16:59.390432 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30267 vulnerable 2026-06-08 07:16:59.388179 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30265 vulnerable 2026-06-08 07:16:59.385332 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30264 vulnerable 2026-06-08 07:16:59.381363 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-29882 vulnerable 2026-06-08 07:14:56.911225 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-22481 vulnerable 2026-06-08 07:10:53.258085 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-56805 vulnerable 2026-06-08 06:56:13.195972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.