Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2741▼ 480 respecto a la semana anterior
Críticas / altas1308▼ 182 respecto a la semana anterior
Nueva explotación activa (KEV)3▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)226▼ 276 respecto a la semana anterior
640 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 1.2% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS… | |
| Analizada | Media (5.4) | 0.33% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and… | |
| Analizada | Media (6.5) | 0.31% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to launch a denial-of-service (DoS) attack via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and… | |
| Analizada | Alta (8.8) | 0.39% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS… | |
| Analizada | Media (6.5) | 0.47% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build… | |
| Analizada | Media (4.8) | 0.24% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build… | |
| Analizada | Alta (8.8) | 0.44% | — | Qnap Video Station | 6/9/2024 | 17/6/2026 | A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.1 ( 2024/02/26 ) and later | |
| Analizada | Alta (8.8) | 0.97% | — | Qnap Video Station | 6/9/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later | |
| Analizada | Alta (8.8) | 1.2% | 💥 Exploit | Qnap Music Station | 6/9/2024 | 17/6/2026 | An improper authentication vulnerability has been reported to affect Music Station. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following version: Music Station 5.4.0 and later | |
| Analizada | Alta (7.2) | 1.2% | — | Qnap QTS | 6/9/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect legacy QTS. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.3.6.2805 build 20240619 and later QTS 4.3.4.2814 build… | |
| Analizada | Alta (7.8) | 0.14% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated users to access data or perform actions that they should not be allowed to perform via unspecified vectors. QuTScloud, is not affected. We have… | |
| Analizada | Alta (7.2) | 1.1% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790 build 20240605 and… | |
| Analizada | Alta (8.8) | 0.99% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. QuTScloud, QVR, QES are not affected. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790 build… | |
| Analizada | Media (6.7) | 0.19% | — | Qnap QVR Smart Client | 6/9/2024 | 17/6/2026 | An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow local authenticated administrators to execute unauthorized code or commands via unspecified vectors. We have already fixed the vulnerability in the following version: Windows 10… | |
| Analizada | Media (4.2) | 0.21% | — | Qnap QTSQnap Quts Hero | 12/8/2024 | 17/6/2026 | A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712… | |
| Modificada | Alta (8.8) | 38% | 💥 PoC | Qnap QTSQnap Quts Hero | 21/5/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS… | |
| Modificada | Alta (8.8) | 0.69% | — | Qnap QTSQnap Quts Hero | 21/5/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520… | |
| Modificada | Alta (8.8) | 0.69% | — | Qnap QTSQnap Quts Hero | 21/5/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520… | |
| Modificada | Alta (8.8) | 0.70% | — | Qnap QTSQnap Quts Hero | 21/5/2024 | 17/6/2026 | A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute arbitrary code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero… | |
| Modificada | Alta (8.1) | 0.35% | — | Qnap QTSQnap Quts Hero | 21/5/2024 | 17/6/2026 | An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the following version: QTS… | |
| Analizada | Media (6.6) | 1.2% | — | Qnap Media Streaming Add-on | 3/5/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect Media Streaming add-on. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following version: Media Streaming add-on 500.1.1.5 ( 2024/01/22 ) and… | |
| Analizada | Crítica (10) | 2.3% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 26/4/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QTS 4.5.4.2627 build… | |
| Analizada | Crítica (9.9) | 0.42% | — | Myqnapcloud Link | 26/4/2024 | 17/6/2026 | A missing authentication for critical function vulnerability has been reported to affect myQNAPcloud Link. If exploited, the vulnerability could allow users with the privilege level of some functionality via a network. We have already fixed the vulnerability in the following version: myQNAPcloud Link 2.4.51 and later | |
| Analizada | Alta (7.5) | 1.4% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 26/4/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QTS 4.5.4.2627 build… | |
| Analizada | Alta (8.2) | 0.46% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 26/4/2024 | 17/6/2026 | An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110… |