Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:quts_hero:h5.2.5.3138:build_20250519:*:*:*:*:*:*

part: o version: h5.2.5.3138 update: build_20250519

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQuts Hero (c808c21e-6b74-58ae-ac08-bf1b891081da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9110 vulnerable 2026-06-08 07:45:21.739896 QTS, QuTS hero
An exposure of sensitive system information to an unauthorized control sphere vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to read application data. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3332 build 20251128 and later QuTS hero h5.2.8.3321 build 20251117 and later QuTS hero h5.3.1.3250 build 20250912 and later
Published: 2026-01-02T15:17:29.481Z
Updated: 2026-01-02T19:14:42.164Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-66277 vulnerable 2026-06-08 07:41:18.516496 QTS, QuTS hero
A link following vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: QTS 5.2.8.3350 build 20251216 and later QuTS hero h5.3.2.3354 build 20251225 and later QuTS hero h5.2.8.3350 build 20251216 and later
Published: 2026-02-11T12:15:43.851Z
Updated: 2026-02-26T14:44:26.986Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62852 vulnerable 2026-06-08 07:39:16.855240 QTS, QuTS hero
A buffer overflow vulnerability has been reported to affect several QNAP operating system versions. If a remote attacker gains an administrator account, they can then exploit the vulnerability to modify memory or crash processes. We have already fixed the vulnerability in the following version: QTS 5.2.8.3332 build 20251128 and later
Published: 2026-01-02T15:19:40.492Z
Updated: 2026-01-05T20:38:31.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62849 vulnerable 2026-06-08 07:39:16.818913 QTS, QuTS hero
An SQL injection vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later
Published: 2025-12-16T02:24:58.273Z
Updated: 2026-02-26T16:07:33.754Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62848 vulnerable 2026-06-08 07:39:16.810521 QTS, QuTS hero
A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. The remote attackers can then exploit the vulnerability to launch a denial-of-service (DoS) attack. We have already fixed the vulnerability in the following versions: QTS 5.2.7.3297 build 20251024 and later QuTS hero h5.2.7.3297 build 20251024 and later QuTS hero h5.3.1.3292 build 20251024 and later
Published: 2025-12-16T02:25:04.815Z
Updated: 2026-03-18T03:55:46.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-62847 vulnerable 2026-06-08 07:39:16.801938 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59385 vulnerable 2026-06-08 07:35:21.813335 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59381 vulnerable 2026-06-08 07:35:21.799791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59380 vulnerable 2026-06-08 07:35:21.787809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-58466 vulnerable 2026-06-08 07:35:18.388166 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-57705 vulnerable 2026-06-08 07:33:15.995019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54166 vulnerable 2026-06-08 07:33:11.711896 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54165 vulnerable 2026-06-08 07:33:11.709084 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-54164 vulnerable 2026-06-08 07:33:11.685287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53596 vulnerable 2026-06-08 07:31:14.779212 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53593 vulnerable 2026-06-08 07:31:14.755281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53592 vulnerable 2026-06-08 07:31:14.752672 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53591 vulnerable 2026-06-08 07:31:14.750297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53590 vulnerable 2026-06-08 07:31:14.742664 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53589 vulnerable 2026-06-08 07:31:14.740451 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53414 vulnerable 2026-06-08 07:31:14.487981 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53407 vulnerable 2026-06-08 07:31:14.484354 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53406 vulnerable 2026-06-08 07:31:14.482302 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-53405 vulnerable 2026-06-08 07:31:14.479156 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52872 vulnerable 2026-06-08 07:31:13.113870 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52866 vulnerable 2026-06-08 07:31:13.102998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52864 vulnerable 2026-06-08 07:31:13.076318 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52863 vulnerable 2026-06-08 07:31:13.074020 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52862 vulnerable 2026-06-08 07:31:13.071650 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52860 vulnerable 2026-06-08 07:31:13.069772 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52859 vulnerable 2026-06-08 07:31:13.063711 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52858 vulnerable 2026-06-08 07:31:13.062289 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52857 vulnerable 2026-06-08 07:31:13.060052 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52855 vulnerable 2026-06-08 07:31:13.044761 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52854 vulnerable 2026-06-08 07:31:13.042189 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52853 vulnerable 2026-06-08 07:31:13.033824 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52433 vulnerable 2026-06-08 07:31:11.548842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52432 vulnerable 2026-06-08 07:31:11.535541 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52431 vulnerable 2026-06-08 07:31:11.533448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52430 vulnerable 2026-06-08 07:31:11.530447 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52429 vulnerable 2026-06-08 07:31:11.529069 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52428 vulnerable 2026-06-08 07:31:11.526820 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52427 vulnerable 2026-06-08 07:31:11.524392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52426 vulnerable 2026-06-08 07:31:11.512477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-52424 vulnerable 2026-06-08 07:31:11.509165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48730 vulnerable 2026-06-08 07:29:11.279509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48729 vulnerable 2026-06-08 07:29:11.272307 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48728 vulnerable 2026-06-08 07:29:11.269100 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48727 vulnerable 2026-06-08 07:29:11.266271 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48726 vulnerable 2026-06-08 07:29:11.258826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48725 vulnerable 2026-06-08 07:29:11.244708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48721 vulnerable 2026-06-08 07:29:11.203648 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47214 vulnerable 2026-06-08 07:27:09.825567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47213 vulnerable 2026-06-08 07:27:09.823393 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47212 vulnerable 2026-06-08 07:27:09.820842 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47211 vulnerable 2026-06-08 07:27:09.818239 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47208 vulnerable 2026-06-08 07:27:09.801569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-47205 vulnerable 2026-06-08 07:27:09.788883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-44013 vulnerable 2026-06-08 07:25:10.589377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.