Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:quts_hero:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQuts Hero (c808c21e-6b74-58ae-ac08-bf1b891081da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-53691 vulnerable 2026-06-08 06:54:15.261293 QTS, QuTS hero
A link following vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to traverse the file system to unintended locations. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712 and later QTS 5.2.0.2802 build 20240620 and later QuTS hero h5.1.8.2823 build 20240712 and later QuTS hero h5.2.0.2802 build 20240620 and later
Published: 2024-12-06T16:34:54.018Z
Updated: 2025-01-24T04:55:42.067Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-50393 vulnerable 2026-06-08 06:52:09.879043 QTS, QuTS hero
A command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to execute arbitrary commands. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.2.2950 build 20241114 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.2.2952 build 20241116 and later
Published: 2024-12-06T16:36:33.342Z
Updated: 2024-12-10T04:55:54.258Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48868 vulnerable 2026-06-08 06:50:10.341237 QTS, QuTS hero
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to modify application data. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.2.2950 build 20241114 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.2.2952 build 20241116 and later
Published: 2024-12-06T16:36:27.206Z
Updated: 2024-12-06T19:36:12.495Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48867 vulnerable 2026-06-08 06:50:10.335674 QTS, QuTS hero
An improper neutralization of CRLF sequences ('CRLF Injection') vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers to modify application data. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.2.2950 build 20241114 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.2.2952 build 20241116 and later
Published: 2024-12-06T16:36:20.438Z
Updated: 2024-12-06T19:38:19.849Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48865 vulnerable 2026-06-08 06:50:10.321109 QTS, QuTS hero
An improper certificate validation vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow attackers with local network access to compromise the security of the system. We have already fixed the vulnerability in the following versions: QTS 5.1.9.2954 build 20241120 and later QTS 5.2.2.2950 build 20241114 and later QuTS hero h5.1.9.2954 build 20241120 and later QuTS hero h5.2.2.2952 build 20241116 and later
Published: 2024-12-06T16:36:05.597Z
Updated: 2024-12-06T19:38:27.732Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-48859 vulnerable 2026-06-08 06:50:10.226062 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32766 vulnerable 2026-06-08 06:37:23.924165 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-32765 vulnerable 2026-06-08 06:37:23.913413 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-27124 vulnerable 2026-06-08 06:31:27.625241 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21905 vulnerable 2026-06-08 06:29:32.544590 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21900 vulnerable 2026-06-08 06:29:32.512927 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21899 vulnerable 2026-06-08 06:29:32.491321 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21898 vulnerable 2026-06-08 06:29:32.450328 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13086 vulnerable 2026-06-08 06:25:36.673624 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51365 vulnerable 2026-06-08 06:16:17.375261 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-51364 vulnerable 2026-06-08 06:16:17.370835 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-50358 vulnerable 2026-06-08 06:16:16.008024 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-47218 vulnerable 2026-06-08 06:14:24.465633 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-41283 vulnerable 2026-06-08 06:11:05.826275 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39303 vulnerable 2026-06-08 06:09:36.993902 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39301 vulnerable 2026-06-08 06:09:36.985733 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-39298 vulnerable 2026-06-08 06:09:36.898381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34980 vulnerable 2026-06-08 06:06:26.303985 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34974 vulnerable 2026-06-08 06:06:26.275308 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34973 vulnerable 2026-06-08 06:06:26.274618 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34972 vulnerable 2026-06-08 06:06:26.274158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-34971 vulnerable 2026-06-08 06:06:26.273488 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32974 vulnerable 2026-06-08 06:04:48.116201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32973 vulnerable 2026-06-08 06:04:48.115431 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32972 vulnerable 2026-06-08 06:04:48.114837 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32971 vulnerable 2026-06-08 06:04:48.114103 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32970 vulnerable 2026-06-08 06:04:48.113485 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-32969 vulnerable 2026-06-08 06:04:48.111292 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23362 vulnerable 2026-06-08 05:54:28.157007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23355 vulnerable 2026-06-08 05:54:28.144030 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27600 vulnerable 2026-06-08 05:42:42.464146 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27598 vulnerable 2026-06-08 05:42:42.455710 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27597 vulnerable 2026-06-08 05:42:42.440570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27596 vulnerable 2026-06-08 05:42:42.438381 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44054 vulnerable 2026-06-08 05:36:44.844374 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44053 vulnerable 2026-06-08 05:36:44.843080 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44052 vulnerable 2026-06-08 05:36:44.841573 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-44051 vulnerable 2026-06-08 05:36:44.839721 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38693 vulnerable 2026-06-08 05:33:48.311118 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-38674 vulnerable 2026-06-08 05:33:48.278490 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-34343 vulnerable 2026-06-08 05:32:13.028296 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28816 vulnerable 2026-06-08 05:31:24.941468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28806 vulnerable 2026-06-08 05:31:24.912658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28804 vulnerable 2026-06-08 05:31:24.909662 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28802 vulnerable 2026-06-08 05:31:24.905950 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28798 vulnerable 2026-06-08 05:31:24.888287 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36194 vulnerable 2026-06-08 05:25:02.714489 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2509 vulnerable 2026-06-08 05:24:59.400457 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2508 vulnerable 2026-06-08 05:24:59.338720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2498 vulnerable 2026-06-08 05:24:59.318253 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2497 vulnerable 2026-06-08 05:24:59.310509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2496 vulnerable 2026-06-08 05:24:59.309922 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2495 vulnerable 2026-06-08 05:24:59.309161 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25847 vulnerable 2026-06-08 05:23:49.548410 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-7198 vulnerable 2026-06-08 05:14:14.068854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19957 vulnerable 2026-06-08 05:11:16.478112 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19942 vulnerable 2026-06-08 05:11:16.452036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19941 vulnerable 2026-06-08 05:11:16.375246 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.