QNAP QTS 4.5.4
Approved changes feed: RSS · Atom
cpe:2.3:o:qnap:qts:4.5.4:*:*:*:*:*:*:*
part: o version: 4.5.4 update: *
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Qts (9004baf2-b431-53ba-b074-38fcdcfcd981) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-23357 |
not_vulnerable | 2026-06-08 05:54:28.156401 |
QuLog Center
MEDIUM (4.8)
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following versions:
QuLog Center 1.5.0.738 ( 2023/03/06 ) and later
QuLog Center 1.4.1.691 ( 2023/03/01 ) and later
QuLog Center 1.3.1.645 ( 2023/02/22 ) and later
Published: 2024-12-19T01:39:02.809Z
Updated: 2024-12-24T00:41:08.605Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23354 |
not_vulnerable | 2026-06-08 05:54:28.129043 |
QuLog Center
HIGH (7.3)
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following versions:
QuLog Center 1.5.0.738 ( 2023/03/06 ) and later
QuLog Center 1.4.1.691 ( 2023/03/01 ) and later
QuLog Center 1.3.1.645 ( 2023/02/22 ) and later
Published: 2024-12-19T01:39:27.208Z
Updated: 2024-12-24T00:40:55.260Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34362 |
not_vulnerable | 2026-06-08 05:32:13.084191 |
Command Injection Vulnerability in Media Streaming Add-on
HIGH (8.7)
A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.5.4: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.3.6: Media Streaming add-on 430.1.8.12 ( 2021/08/20 ) and later QTS 4.3.3: Media Streaming add-on 430.1.8.12 ( 2021/09/29 ) and later QuTS-Hero 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later
Published: 2021-10-22T04:25:09.871Z
Updated: 2024-09-16T16:17:27.193Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34344 |
not_vulnerable | 2026-06-08 05:32:13.032372 |
Stack Buffer Overflow Vulnerability in QUSBCam2
CRITICAL (9.8)
A stack buffer overflow vulnerability has been reported to affect QNAP device running QUSBCam2. If exploited, this vulnerability allows attackers to execute arbitrary code. We have already fixed this vulnerability in the following versions of QUSBCam2: QTS 4.5.4: QUSBCam2 1.1.4 ( 2021/07/30 ) and later QTS 5.0: QUSBCam2 2.0.1 ( 2021/08/03 ) and later QTS 4.3.6: QUSBCam2 1.1.4 ( 2021/07/30 ) and later QTS 4.3.3: QUSBCam2 1.1.4 ( 2021/08/06 ) and later QuTS hero 4.5.3: QUSBCam2 1.1.4 ( 2021/07/30 ) and later
Published: 2021-09-10T04:00:24.634Z
Updated: 2024-09-17T02:17:07.326Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.