Vulnerabilities > Qnap > Quts Hero > h4.5.1.1472

DATE CVE VULNERABILITY TITLE RISK
2021-07-01 CVE-2021-28804 Unspecified vulnerability in Qnap QTS and Quts Hero
A command injection vulnerabilities have been reported to affect QTS and QuTS hero.
network
low complexity
qnap
critical
9.8
2021-06-03 CVE-2021-28806 Unspecified vulnerability in Qnap QTS
A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero.
network
low complexity
qnap
5.4
2021-05-21 CVE-2021-28798 Path Traversal vulnerability in Qnap QTS and Quts Hero
A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero.
network
low complexity
qnap CWE-22
7.5
2021-04-17 CVE-2020-2509 Command Injection vulnerability in Qnap QTS
A command injection vulnerability has been reported to affect QTS and QuTS hero.
network
low complexity
qnap CWE-77
critical
9.8
2020-12-29 CVE-2020-25847 Command Injection vulnerability in Qnap QTS and Quts Hero
This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application.
network
low complexity
qnap CWE-77
8.8