Tenable.ot Family for Tenable OT Security

IDNameSeverity
502513Qnap QES Cross-site Scripting (CVE-2020-2503)
medium
502512Qnap QTS Command Injection (CVE-2020-2508)
high
502511Qnap QTS SQL Injection (CVE-2023-47568)
high
502510Qnap QTS SQL Injection (CVE-2020-36195)
critical
502509Qnap QTS OS Command Injection (CVE-2023-23367)
high
502508Qnap QTS Path Traversal (CVE-2018-19945)
critical
502507Qnap QTS Insufficient Entropy (CVE-2023-34973)
medium
502506Qnap QTS Command Injection (CVE-2020-2509)
critical
502505Qnap QTS Cross-site Scripting (CVE-2020-36194)
medium
502504Qnap QTS Cross-site Scripting (CVE-2018-19943)
medium
502503Qnap QTS Cross-site Scripting (CVE-2018-0719)
medium
502502Qnap QTS Path Traversal (CVE-2015-6003)
high
502501Qnap QTS Injection (CVE-2024-21900)
medium
502500Qnap QTS Command Injection (CVE-2024-21903)
medium
502499Qnap QTS OS Command Injection (CVE-2023-41281)
high
502498Qnap QTS and myQNAPcloud SQL Injection (CVE-2024-21901)
medium
502497Qnap QES Generation of Error Message Containing Sensitive Information (CVE-2020-2505)
low
502496Qnap QTS Out-of-bounds Write (CVE-2023-41273)
high
502495Qnap QTS Path Traversal (CVE-2021-38693)
medium
502494Qnap QTS OS Command Injection (CVE-2023-39300)
high
502493Qnap QTS Exposure of Sensitive Information to an Unauthorized Actor (CVE-2017-7630)
medium
502492Qnap QTS Command Injection (CVE-2018-0712)
critical
502491Qnap Multiple Vulnerabilities in QTS, QuTS hero and QuTScloud (CVE-2023-47218)
medium
502490Qnap QTS Classic Buffer Overflow (CVE-2023-41275)
high
502489Qnap QTS Command Injection (CVE-2018-0730)
critical
502488Qnap QTS Cross-site Scripting (CVE-2017-13072)
medium
502487Qnap QTS Classic Buffer Overflow (CVE-2023-41292)
high
502486Qnap QTS Cross-site Scripting (CVE-2018-19953)
medium
502485Wago CODESYS V3 Products Use of Password Hash With Insufficient Computational Effort (CVE-2020-12069)
high
502484Festo CODESYS V3 Products Use of Password Hash With Insufficient Computational Effort (CVE-2020-12069)
high
502483Mitsubishi Electric MELSEC iQ-F FX5-OPC Denial of Service (CVE-2024-0727)
medium
502482Siemens SIMATIC S7-200 SMART Devices Uncontrolled Resource Consumption (CVE-2024-43647)
high
502481Synology DiskStation Manager Path Traversal (CVE-2013-6987)
high
502480Synology DiskStation Manager Use After Free (CVE-2021-27649)
critical
502479Synology DiskStation Manager Cross-site Scripting (CVE-2018-8917)
medium
502478Synology DiskStation Manager OS Command Injection (CVE-2021-29083)
high
502477Synology DSM HTTP/2 Implementations Window Size and Stream Prioritization Manipulation (CVE-2019-9511)
high
502476Synology DiskStation Manager Samba Incorrect Default Permissions (CVE-2019-3870)
medium
502475Synology DiskStation Manager Out-of-bounds Write (CVE-2021-26562)
high
502474Synology DiskStation Manager Path Traversal (CVE-2022-22679)
medium
502473Synology DiskStation FAAD2 Decoder Out-of-bounds Write (CVE-2021-26567)
high
502472Synology DiskStation Manager Path Traversal (CVE-2021-33182)
medium
502471Synology DiskStation Manager Samba Out-of-bounds Read (CVE-2021-44142)
high
502470Synology DiskStation Manager Injection (CVE-2021-29085)
high
502469Synology DiskStation Manager Open Redirect (CVE-2024-0854)
medium
502468Synology DiskStation Manager Improper Encoding or Escaping of Output (CVE-2018-8920)
high
502467Synology DiskStation Manager Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2021-26561)
high
502466Synology DSM HTTP/2 Implementations Uncontrolled Resource Consumption (CVE-2019-9513)
high
502465Synology DiskStation Manager Improper Neutralization of Special Elements used in a Command (CVE-2017-15889)
high
502464Synology DiskStation Manager NTPD Victim's Clock Modification (CVE-2018-7170)
medium