QNAP QuTS Hero H4.5.4
Approved changes feed: RSS · Atom
cpe:2.3:o:qnap:quts_hero:h4.5.4:*:*:*:*:*:*:*
part: o version: h4.5.4 update: *
| Vendor | Qnap (a402dda4-b7da-50eb-b0f8-700e564ee87d) |
|---|---|
| Product | Quts Hero (c808c21e-6b74-58ae-ac08-bf1b891081da) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-23357 |
not_vulnerable | 2026-06-08 05:54:28.156420 |
QuLog Center
MEDIUM (4.8)
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following versions:
QuLog Center 1.5.0.738 ( 2023/03/06 ) and later
QuLog Center 1.4.1.691 ( 2023/03/01 ) and later
QuLog Center 1.3.1.645 ( 2023/02/22 ) and later
Published: 2024-12-19T01:39:02.809Z
Updated: 2024-12-24T00:41:08.605Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23354 |
not_vulnerable | 2026-06-08 05:54:28.129899 |
QuLog Center
HIGH (7.3)
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data.
We have already fixed the vulnerability in the following versions:
QuLog Center 1.5.0.738 ( 2023/03/06 ) and later
QuLog Center 1.4.1.691 ( 2023/03/01 ) and later
QuLog Center 1.3.1.645 ( 2023/02/22 ) and later
Published: 2024-12-19T01:39:27.208Z
Updated: 2024-12-24T00:40:55.260Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-34362 |
not_vulnerable | 2026-06-08 05:32:13.086765 |
Command Injection Vulnerability in Media Streaming Add-on
HIGH (8.7)
A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on. If exploited, this vulnerability allow remote attackers to run arbitrary commands. We have already fixed this vulnerability in the following versions of Media Streaming add-on: QTS 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.5.4: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later QTS 4.3.6: Media Streaming add-on 430.1.8.12 ( 2021/08/20 ) and later QTS 4.3.3: Media Streaming add-on 430.1.8.12 ( 2021/09/29 ) and later QuTS-Hero 5.0.0: Media Streaming add-on 500.0.0.3 ( 2021/08/20 ) and later
Published: 2021-10-22T04:25:09.871Z
Updated: 2024-09-16T16:17:27.193Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.