Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qts:4.4.3:*:*:*:*:*:*:*

part: o version: 4.4.3 update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQts (9004baf2-b431-53ba-b074-38fcdcfcd981)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-2491 not_vulnerable 2026-06-08 05:24:59.296348 Cross-site Scripting Vulnerability in Photo Station
This cross-site scripting vulnerability in Photo Station allows remote attackers to inject malicious code. QANP We have already fixed this vulnerability in the following versions of Photo Station. QTS 4.5.1: Photo Station 6.0.12 and later QTS 4.4.3: Photo Station 6.0.12 and later QTS 4.3.6: Photo Station 5.7.12 and later QTS 4.3.4: Photo Station 5.7.13 and later QTS 4.3.3: Photo Station 5.4.10 and later QTS 4.2.6: Photo Station 5.2.11 and later
Published: 2020-12-10T03:34:06.628Z
Updated: 2024-09-17T00:56:10.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19952 not_vulnerable 2026-06-08 05:11:16.471694 Details available
If exploited, this SQL injection vulnerability could allow remote attackers to obtain application information. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.
Published: 2020-11-02T15:57:02.626Z
Updated: 2024-09-17T02:58:07.767Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19951 not_vulnerable 2026-06-08 05:11:16.470969 Details available
If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.
Published: 2020-11-02T15:57:02.569Z
Updated: 2024-09-16T20:22:27.691Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19950 not_vulnerable 2026-06-08 05:11:16.469316 Details available
If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.
Published: 2020-11-02T15:57:02.523Z
Updated: 2024-09-17T02:31:26.145Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.