Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qutscloud:c4.5.4:*:*:*:*:*:*:*

part: o version: c4.5.4 update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQutscloud (fd1b4475-bbea-52fd-b745-78d0389289b2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-28812 not_vulnerable 2026-06-08 05:31:24.927805 Command Injection Vulnerability in Video Station
HIGH (8.8)
A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2; versions prior to 5.5.4 on QuTS hero h4.5.2; versions prior to 5.5.4 on QuTScloud c4.5.4. This issue does not affect: QNAP Systems Inc. Video Station on QTS 4.3.6; on QTS 4.3.3.
Published: 2021-06-03T02:45:14.642Z
Updated: 2024-09-16T20:11:39.918Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-28807 not_vulnerable 2026-06-08 05:31:24.918291 Post-Authentication Reflected XSS Vulnerability in Q'center
HIGH (7.7)
A post-authentication reflected XSS vulnerability has been reported to affect QNAP NAS running Q’center. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already fixed this vulnerability in the following versions of Q’center: QTS 4.5.3: Q’center v1.12.1012 and later QTS 4.3.6: Q’center v1.10.1004 and later QTS 4.3.3: Q’center v1.10.1004 and later QuTS hero h4.5.2: Q’center v1.12.1012 and later QuTScloud c4.5.4: Q’center v1.12.1012 and later
Published: 2021-06-03T02:45:14.015Z
Updated: 2024-09-16T17:17:48.672Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36197 not_vulnerable 2026-06-08 05:25:02.747181 Improper Access Control Vulnerability in Music Station
HIGH (7.1)
An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to compromise the security of the software by gaining privileges, reading sensitive information, executing commands, evading detection, etc. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.3.16 on QTS 4.5.2; versions prior to 5.2.10 on QTS 4.3.6; versions prior to 5.1.14 on QTS 4.3.3; versions prior to 5.3.16 on QuTS hero h4.5.2; versions prior to 5.3.16 on QuTScloud c4.5.4.
Published: 2021-05-13T02:55:12.525Z
Updated: 2024-09-17T01:01:30.720Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.