Approved changes feed: RSS · Atom

cpe:2.3:o:qnap:qts:5.0.1:*:*:*:*:*:*:*

part: o version: 5.0.1 update: *

VendorQnap (a402dda4-b7da-50eb-b0f8-700e564ee87d)
ProductQts (9004baf2-b431-53ba-b074-38fcdcfcd981)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-23357 not_vulnerable 2026-06-08 05:54:28.156360 QuLog Center
MEDIUM (4.8)
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained administrator access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QuLog Center 1.5.0.738 ( 2023/03/06 ) and later QuLog Center 1.4.1.691 ( 2023/03/01 ) and later QuLog Center 1.3.1.645 ( 2023/02/22 ) and later
Published: 2024-12-19T01:39:02.809Z
Updated: 2024-12-24T00:41:08.605Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-23354 not_vulnerable 2026-06-08 05:54:28.127454 QuLog Center
HIGH (7.3)
A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow remote attackers who have gained user access to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following versions: QuLog Center 1.5.0.738 ( 2023/03/06 ) and later QuLog Center 1.4.1.691 ( 2023/03/01 ) and later QuLog Center 1.3.1.645 ( 2023/02/22 ) and later
Published: 2024-12-19T01:39:27.208Z
Updated: 2024-12-24T00:40:55.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27593 not_vulnerable 2026-06-08 05:42:42.429965 DeadBolt Ransomware
CRITICAL (10)
An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, This could allow an attacker to modify system files. We have already fixed the vulnerability in the following versions: QTS 5.0.1: Photo Station 6.1.2 and later QTS 5.0.0/4.5.x: Photo Station 6.0.22 and later QTS 4.3.6: Photo Station 5.7.18 and later QTS 4.3.3: Photo Station 5.4.15 and later QTS 4.2.6: Photo Station 5.2.14 and later
Published: 2022-09-08T11:00:15.069Z
Updated: 2025-10-21T23:15:35.935Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.