4.3.4.0416

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-10	CVE-2019-7198	Command Injection vulnerability in Qnap QTS and Quts Hero This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. network low complexity qnap CWE-77 critical	9.8
2020-11-16	CVE-2020-2492	Command Injection vulnerability in Qnap QTS If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. network low complexity qnap CWE-77	7.2
2020-11-16	CVE-2020-2490	Command Injection vulnerability in Qnap QTS If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. network low complexity qnap CWE-77	7.2
2020-10-28	CVE-2018-19953	Cross-site Scripting vulnerability in Qnap QTS If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. network low complexity qnap CWE-79	6.1
2020-10-28	CVE-2018-19949	Command Injection vulnerability in Qnap QTS If exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. network low complexity qnap CWE-77 critical	9.8
2020-10-28	CVE-2018-19943	Cross-site Scripting vulnerability in Qnap QTS If exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. network low complexity qnap CWE-79	5.4