Approved changes feed: RSS · Atom
cpe:2.3:o:qnap:qts:-:*:*:*:*:*:*:*
part: o version: - update: *
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Qts (9004baf2-b431-53ba-b074-38fcdcfcd981) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-27124 |
vulnerable | 2026-06-08 06:31:27.610540 |
QTS, QuTS hero, QuTScloud
HIGH (7.5)
An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 build 20231110 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later
Published: 2024-04-26T15:00:55.893Z
Updated: 2024-08-02T00:27:59.078Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21905 |
vulnerable | 2026-06-08 06:29:32.544100 |
QTS, QuTS hero, QuTScloud
MEDIUM (6.5)
An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.3.2578 build 20231110 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTScloud c5.1.5.2651 and later
Published: 2024-04-26T15:01:00.169Z
Updated: 2024-08-12T19:31:28.640Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21902 |
vulnerable | 2026-06-08 06:29:32.523848 |
QTS, QuTS hero
MEDIUM (6.4)
An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network.
We have already fixed the vulnerability in the following version:
QTS 5.1.7.2770 build 20240520 and later
QuTS hero h5.1.7.2770 build 20240520 and later
Published: 2024-05-21T16:08:14.291Z
Updated: 2024-08-01T22:35:33.414Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-51365 |
vulnerable | 2026-06-08 06:16:17.372610 |
QTS, QuTS hero, QuTScloud
HIGH (8.7)
A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.4.2596 build 20231128 and later
QTS 4.5.4.2627 build 20231225 and later
QuTS hero h5.1.3.2578 build 20231110 and later
QuTS hero h4.5.4.2626 build 20231225 and later
QuTScloud c5.1.5.2651 and later
Published: 2024-04-26T15:01:04.335Z
Updated: 2024-08-02T22:32:09.027Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50364 |
vulnerable | 2026-06-08 06:16:16.045384 |
QTS, QuTS hero
MEDIUM (6.4)
A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network.
We have already fixed the vulnerability in the following versions:
QTS 5.1.6.2722 build 20240402 and later
QuTS hero h5.1.6.2734 build 20240414 and later
Published: 2024-04-26T15:01:12.216Z
Updated: 2024-08-02T22:16:46.326Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50362 |
vulnerable | 2026-06-08 06:16:16.036426 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-50361 |
vulnerable | 2026-06-08 06:16:16.028300 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.