QNAP QTS 4.3.5
Approved changes feed: RSS · Atom
cpe:2.3:o:qnap:qts:4.3.5:*:*:*:*:*:*:*
part: o version: 4.3.5 update: *
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Qts (9004baf2-b431-53ba-b074-38fcdcfcd981) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-14749 |
vulnerable | 2026-06-08 05:10:53.423648 |
Details available
Buffer Overflow vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could have unspecified impact on the NAS.
Published: 2018-11-28T16:00:00.000Z
Updated: 2024-08-05T09:38:13.322Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14748 |
vulnerable | 2026-06-08 05:10:53.423284 |
Details available
Improper Authorization vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to power off the NAS.
Published: 2018-11-28T16:00:00.000Z
Updated: 2024-08-05T09:38:13.370Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14747 |
vulnerable | 2026-06-08 05:10:53.422719 |
Details available
NULL Pointer Dereference vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to crash the NAS media server.
Published: 2018-11-28T16:00:00.000Z
Updated: 2024-08-05T09:38:13.416Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14746 |
vulnerable | 2026-06-08 05:10:53.422132 |
Details available
Command Injection vulnerability in QTS 4.3.5 build 20181013, QTS 4.3.4 build 20181008, QTS 4.3.3 build 20180829, QTS 4.2.6 build 20180829 and earlier versions could allow remote attackers to run arbitrary commands on the NAS.
Published: 2018-11-28T16:00:00.000Z
Updated: 2024-08-05T09:38:13.607Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-0716 |
vulnerable | 2026-06-08 05:10:24.569468 |
Details available
Cross-site scripting vulnerability in QTS 4.2.6 build 20180711, QTS 4.3.3: Qsync Central 3.0.2, QTS 4.3.4: Qsync Central 3.0.3, QTS 4.3.5: Qsync Central 3.0.4 and earlier versions could allow remote attackers to inject Javascript code in the compromised application.
Published: 2018-11-30T14:00:00.000Z
Updated: 2024-08-05T03:35:49.284Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.