Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2687▼ 562 respecto a la semana anterior
Críticas / altas1259▼ 239 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)265▼ 239 respecto a la semana anterior
333 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Analizada | Alta (8.8) | 1.2% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS… | |
| Analizada | Media (5.4) | 0.33% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and… | |
| Analizada | Media (6.5) | 0.31% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A NULL pointer dereference vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to launch a denial-of-service (DoS) attack via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and… | |
| Analizada | Alta (8.8) | 0.39% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402 and later QuTS… | |
| Analizada | Media (6.5) | 0.47% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build… | |
| Analizada | Media (4.8) | 0.24% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A cross-site scripting (XSS) vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to inject malicious code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build… | |
| Analizada | Alta (7.8) | 0.14% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated users to access data or perform actions that they should not be allowed to perform via unspecified vectors. QuTScloud, is not affected. We have… | |
| Analizada | Alta (7.2) | 1.1% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated administrators to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790 build 20240605 and… | |
| Analizada | Alta (8.8) | 0.99% | — | Qnap QTSQnap Quts Hero | 6/9/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. QuTScloud, QVR, QES are not affected. We have already fixed the vulnerability in the following versions: QTS 4.5.4.2790 build… | |
| Analizada | Media (4.2) | 0.21% | — | Qnap QTSQnap Quts Hero | 12/8/2024 | 17/6/2026 | A vulnerability has been reported to affect Network & Virtual Switch. If exploited, the vulnerability could allow local authenticated administrators to gain access to and execute certain functions via unspecified vectors. We have already fixed the vulnerability in the following versions: QTS 5.1.8.2823 build 20240712… | |
| Aplazada | Media (6.4) | 0.33% | — | Theron LiteAI | 28/6/2024 | 17/6/2026 | The Theron Lite theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘url’ parameter within the theme's Button shortcode in all versions up to, and including, 2.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level… | |
| Modificada | Alta (8.8) | 38% | 💥 PoC | Qnap QTSQnap Quts Hero | 21/5/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS… | |
| Modificada | Alta (8.8) | 0.69% | — | Qnap QTSQnap Quts Hero | 21/5/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520… | |
| Modificada | Alta (8.8) | 0.69% | — | Qnap QTSQnap Quts Hero | 21/5/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520… | |
| Modificada | Alta (8.8) | 0.70% | — | Qnap QTSQnap Quts Hero | 21/5/2024 | 17/6/2026 | A double free vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute arbitrary code via a network. We have already fixed the vulnerability in the following version: QTS 5.1.7.2770 build 20240520 and later QuTS hero… | |
| Modificada | Alta (8.1) | 0.35% | — | Qnap QTSQnap Quts Hero | 21/5/2024 | 17/6/2026 | An incorrect permission assignment for critical resource vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to read or modify the resource via a network. We have already fixed the vulnerability in the following version: QTS… | |
| Aplazada | Crítica (9.8) | 0.52% | — | HfheropaymentAI | 30/4/2024 | 17/6/2026 | SQL Injection vulnerability in Hero hfheropayment v.1.2.5 and before allows an attacker to escalate privileges via the HfHeropaymentGatewayBackModuleFrontController::initContent() function. | |
| Analizada | Crítica (10) | 2.3% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 26/4/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QTS 4.5.4.2627 build… | |
| Analizada | Alta (7.5) | 1.4% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 26/4/2024 | 17/6/2026 | An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110 and later QTS 4.5.4.2627 build… | |
| Analizada | Alta (8.2) | 0.46% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 26/4/2024 | 17/6/2026 | An integer overflow or wraparound vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578 build 20231110… | |
| Analizada | Alta (7.5) | 35% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 26/4/2024 | 17/6/2026 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build… | |
| Analizada | Alta (7.5) | 40% | — | Qnap QTSQnap Quts HeroQnap Qutscloud | 26/4/2024 | 17/6/2026 | A path traversal vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.4.2596 build… | |
| Modificada | Alta (8.8) | 0.85% | — | Qnap QTSQnap Quts Hero | 26/4/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402… | |
| Modificada | Alta (8.1) | 0.42% | — | Qnap QTSQnap Quts Hero | 26/4/2024 | 17/6/2026 | An incorrect authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to bypass intended access restrictions via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build… | |
| Modificada | Alta (8.8) | 0.76% | — | Qnap QTSQnap Quts Hero | 26/4/2024 | 17/6/2026 | A buffer copy without checking size of input vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow authenticated users to execute code via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.6.2722 build 20240402… |