CVE-2020-2509Critical 9.8ExploitedCommand Injection Vulnerability in QTS and QuTS hero34.0%
CVE-2018-19949Critical 9.8ExploitedIf exploited, this command injection vulnerability could allow remote attackers to run arbitrary commands. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 2020030.2%
CVE-2018-19953Medium 6.1ExploitedIf exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed the issue in the following QTS versions. QTS 4.4.2.1231 on build 20230.5%
CVE-2018-19943High 8.0ExploitedIf exploited, this cross-site scripting vulnerability could allow remote attackers to inject malicious code. QNAP has already fixed these issues in the following QTS versions. QTS 4.4.2.1270 build 20222.7%