CVE-2021-38674Medium 4.2Reflected XSS Vulnerability in TFTP0.7%
CVE-2021-34343Medium 6.0Buffer Overflow Vulnerability in QTS, QuTS hero, and QuTScloud1.9%
CVE-2021-28816High 7.6Stack Buffer Overflow Vulnerabilities in QTS, QuTS hero, and QuTScloud0.9%
CVE-2021-28804UnratedCommand Injection Vulnerabilities in QTS and QuTS hero1.8%
CVE-2021-28802UnratedCommand Injection Vulnerabilities in QTS and QuTS hero1.8%
CVE-2020-36194Medium 6.1XSS Vulnerability in QTS and QuTS heroCommand Injection Vulnerabilities in QTS and QuTS hero0.6%
CVE-2021-28800High 8.1Command Injection Vulnerability in QTS1.4%
CVE-2021-28806Medium 5.7DOM-Based XSS Vulnerability in QTS and QuTS hero0.5%
CVE-2021-28798High 8.8Relative Path Traversal Vulnerability in QTS and QuTS hero0.9%
CVE-2020-36195Critical 9.8SQL Injection Vulnerability in Multimedia Console and the Media Streaming Add-On1.8%
CVE-2020-2508High 7.2Command Injection Vulnerability in QTS and QuTS hero1.9%
CVE-2020-25847High 8.8Command Injection Vulnerability in QTS and QuTS hero2.6%
CVE-2020-2498UnratedCross-site scripting vulnerability in QTS and QuTS hero0.6%
CVE-2020-2497UnratedCross-site scripting vulnerability in QTS and QuTS hero1.0%
CVE-2020-2496UnratedCross-site scripting vulnerability in QTS and QuTS hero1.0%
CVE-2020-2495UnratedCross-site scripting vulnerability in QTS and QuTS hero1.0%
CVE-2020-2490High 7.2If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907.2.2%
CVE-2020-2492High 7.2If exploited, the command injection vulnerability could allow remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. QTS versions prior to 4.4.3.1421 on build 20200907.1.7%