qts Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/qts/ Sun, 26 Feb 2023 06:48:22 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png qts Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/qts/ 32 32 CVE-2018-19950 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19950/ Sun, 26 Feb 2023 06:48:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19950/ If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.

The post CVE-2018-19950 appeared first on CVE Vulnerability.

]]> If exploited, this command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.

The post CVE-2018-19950 appeared first on CVE Vulnerability.

]]> CVE-2018-19951 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-19951/ Sun, 26 Feb 2023 06:48:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-19951/ If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.

The post CVE-2018-19951 appeared first on CVE Vulnerability.

]]> If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. This issue affects: QNAP Systems Inc. Music Station versions prior to 5.1.13; versions prior to 5.2.9; versions prior to 5.3.11.

The post CVE-2018-19951 appeared first on CVE Vulnerability.

]]> CVE-2019-7185 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-7185/ Sun, 26 Feb 2023 06:34:11 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-7185/ This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions.

The post CVE-2019-7185 appeared first on CVE Vulnerability.

]]> This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s management console. To fix this vulnerability, QNAP recommend updating Music Station to their latest versions.

The post CVE-2019-7185 appeared first on CVE Vulnerability.

]]> CVE-2021-44052 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-44052/ Thu, 23 Feb 2023 14:12:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-44052/ An improper link resolution before file access (‘Link Following’) vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS. If exploited, this vulnerability allows remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed this vulnerability in the […]

The post CVE-2021-44052 appeared first on CVE Vulnerability.

]]> An improper link resolution before file access (‘Link Following’) vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, and QTS. If exploited, this vulnerability allows remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero, and QTS: QuTScloud c5.0.1.1998 and later QuTS hero h4.5.4.1971 build 20220310 and later QuTS hero h5.0.0.1986 build 20220324 and later QTS 4.3.4.1976 build 20220303 and later QTS 4.3.3.1945 build 20220303 and later QTS 4.2.6 build 20220304 and later QTS 4.3.6.1965 build 20220302 and later QTS 5.0.0.1986 build 20220324 and later QTS 4.5.4.1991 build 20220329 and later

The post CVE-2021-44052 appeared first on CVE Vulnerability.

]]> CVE-2021-44054 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-44054/ Thu, 23 Feb 2023 14:12:37 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-44054/ An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS: QuTScloud c5.0.1.1949 and later QuTS hero […]

The post CVE-2021-44054 appeared first on CVE Vulnerability.

]]> An open redirect vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero and QTS. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QuTScloud, QuTS hero and QTS: QuTScloud c5.0.1.1949 and later QuTS hero h5.0.0.1949 build 20220215 and later QuTS hero h4.5.4.1951 build 20220218 and later QTS 5.0.0.1986 build 20220324 and later QTS 4.5.4.1991 build 20220329 and later

The post CVE-2021-44054 appeared first on CVE Vulnerability.

]]> CVE-2021-34360 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-34360/ Thu, 23 Feb 2023 14:10:12 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-34360/ A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later QuTS hero h5.0.0: Proxy Server […]

The post CVE-2021-34360 appeared first on CVE Vulnerability.

]]> A cross-site request forgery (CSRF) vulnerability has been reported to affect QNAP device running Proxy Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Proxy Server: QTS 4.5.x: Proxy Server 1.4.2 ( 2021/12/30 ) and later QuTS hero h5.0.0: Proxy Server 1.4.3 ( 2022/01/18 ) and later QuTScloud c4.5.6: Proxy Server 1.4.2 ( 2021/12/30 ) and later

The post CVE-2021-34360 appeared first on CVE Vulnerability.

]]> CVE-2021-28798 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-28798/ Thu, 23 Feb 2023 14:08:51 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-28798/ A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.2.1630 Build 20210406 and later QTS 4.3.6.1663 Build 20210504 and later QTS 4.3.3.1624 Build […]

The post CVE-2021-28798 appeared first on CVE Vulnerability.

]]> A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.2.1630 Build 20210406 and later QTS 4.3.6.1663 Build 20210504 and later QTS 4.3.3.1624 Build 20210416 and later QuTS hero h4.5.2.1638 Build 20210414 and later QNAP NAS running QTS 4.5.3 are not affected.

The post CVE-2021-28798 appeared first on CVE Vulnerability.

]]> CVE-2021-28799 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-28799/ Thu, 23 Feb 2023 14:08:51 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-28799/ An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to v3.0.210412 on QTS 4.3.6; versions prior […]

The post CVE-2021-28799 appeared first on CVE Vulnerability.

]]> An improper authorization vulnerability has been reported to affect QNAP NAS running HBS 3 (Hybrid Backup Sync. ) If exploited, the vulnerability allows remote attackers to log in to a device. This issue affects: QNAP Systems Inc. HBS 3 versions prior to v16.0.0415 on QTS 4.5.2; versions prior to v3.0.210412 on QTS 4.3.6; versions prior to v3.0.210411 on QTS 4.3.4; versions prior to v3.0.210411 on QTS 4.3.3; versions prior to v16.0.0419 on QuTS hero h4.5.1; versions prior to v16.0.0419 on QuTScloud c4.5.1~c4.5.4. This issue does not affect: QNAP Systems Inc. HBS 2 . QNAP Systems Inc. HBS 1.3 .

The post CVE-2021-28799 appeared first on CVE Vulnerability.

]]> CVE-2022-27596 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-27596/ Thu, 23 Feb 2023 05:18:05 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-27596/ A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QuTS hero, QTS: QuTS hero h5.0.1.2248 build 20221215 and later QTS 5.0.1.2234 build 20221201 and later

The post CVE-2022-27596 appeared first on CVE Vulnerability.

]]> A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QuTS hero, QTS: QuTS hero h5.0.1.2248 build 20221215 and later QTS 5.0.1.2234 build 20221201 and later

The post CVE-2022-27596 appeared first on CVE Vulnerability.

]]>