# Qnap Qts


- [CVE-2020-2509](https://insights.sbomify.com/CVE-2020-2509/): QNAP Network-Attached Storage (NAS) Command Injection (critical 9.8, exploited in the wild)
- [CVE-2018-19949](https://insights.sbomify.com/CVE-2018-19949/): QNAP NAS File Station Command Injection (critical 9.8, exploited in the wild)
- [CVE-2019-7193](https://insights.sbomify.com/CVE-2019-7193/): QNAP QTS Improper Input Validation (critical 9.8, exploited in the wild)
- [CVE-2014-7169](https://insights.sbomify.com/CVE-2014-7169/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2014-6271](https://insights.sbomify.com/CVE-2014-6271/): GNU Bourne-Again Shell (Bash) Arbitrary Code Execution (critical 9.8, exploited in the wild)
- [CVE-2018-19943](https://insights.sbomify.com/CVE-2018-19943/): QNAP NAS File Station Cross-Site Scripting (high 8.0, exploited in the wild)
- [CVE-2018-19953](https://insights.sbomify.com/CVE-2018-19953/): QNAP NAS File Station Cross-Site Scripting (medium 6.1, exploited in the wild)
- [CVE-2024-32766](https://insights.sbomify.com/CVE-2024-32766/): QTS, QuTS hero, QuTScloud (critical 10.0)
- [CVE-2017-7876](https://insights.sbomify.com/CVE-2017-7876/): Command injection in n/a (critical 10.0)
- [CVE-2024-21899](https://insights.sbomify.com/CVE-2024-21899/): QTS, QuTS hero, QuTScloud (critical 9.8)
- [CVE-2023-23368](https://insights.sbomify.com/CVE-2023-23368/): QTS, QuTS hero, QuTScloud (critical 9.8)
- [CVE-2022-27596](https://insights.sbomify.com/CVE-2022-27596/): Vulnerability in QTS (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/qnap/qts/