| 504851 | Qnap QTS and QuTS hero Buffer Copy without Checking Size of Input (CVE-2024-37049) | Tenable OT Security | Tenable.ot | 12/11/2025 | 2/24/2026 | medium |
| 502644 | Qnap QTS Cross-site Scripting (CVE-2018-0711) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502495 | Qnap QTS Path Traversal (CVE-2021-38693) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502500 | Qnap QTS Command Injection (CVE-2024-21903) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502506 | Qnap QTS Command Injection (CVE-2020-2509) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | critical |
| 502511 | Qnap QTS SQL Injection (CVE-2023-47568) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502540 | Qnap QTS Path Traversal (CVE-2023-32974) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502591 | Qnap QTS Improper Authentication (CVE-2023-39303) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | critical |
| 502597 | Qnap QTS Command Injection (CVE-2023-45025) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | critical |
| 502614 | Qnap QTS Path Traversal (CVE-2023-45026) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502631 | Qnap QTS Double Free (CVE-2024-27127) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502642 | Qnap QTS Prototype Pollution (CVE-2023-39296) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502492 | Qnap QTS Command Injection (CVE-2018-0712) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | critical |
| 502512 | Qnap QTS Command Injection (CVE-2020-2508) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502526 | Qnap QTS Incorrect Authorization (CVE-2023-32967) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502613 | Qnap QTS Incorrect Authorization (CVE-2018-14748) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502555 | Qnap QTS Path Traversal (CVE-2024-21904) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502628 | Qnap QTS Path Traversal (CVE-2023-51366) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502560 | Qnap QTS Improper Authorization (CVE-2023-50363) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502525 | Qnap QTS Classic Buffer Overflow (CVE-2023-32975) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502541 | Qnap QTS Classic Buffer Overflow (CVE-2023-41280) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502551 | Qnap QTS OS Command Injection (CVE-2024-38641) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502570 | Qnap QTS Cross-site Scripting (CVE-2021-38674) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502571 | Qnap QTS Cross-site Scripting (CVE-2019-7197) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502582 | Qnap QTS Cross-site Scripting (CVE-2023-23372) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502583 | Qnap QTS NULL Pointer Dereference (CVE-2023-32970) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502589 | Qnap QTS OS Command Injection (CVE-2023-39302) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502594 | Qnap QTS Classic Buffer Overflow (CVE-2023-45035) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502598 | Qnap QTS NULL Pointer Dereference (CVE-2023-51368) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502606 | Qnap QTS OS Command Injection (CVE-2023-39294) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502609 | Qnap QTS OS Command Injection (CVE-2023-39297) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502623 | Qnap QTS Cross-site Scripting (CVE-2023-50366) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | medium |
| 502632 | Qnap QTS Classic Buffer Overflow (CVE-2023-41276) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 502633 | Qnap QTS Classic Buffer Overflow (CVE-2023-45040) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | high |
| 505028 | Qnap QTS and QuTS hero Allocation of Resources Without Limits or Throttling (CVE-2025-47208) | Tenable OT Security | Tenable.ot | 1/20/2026 | 2/4/2026 | high |
| 504822 | Qnap QTS and QuTS hero Path Traversal (CVE-2025-33032) | Tenable OT Security | Tenable.ot | 12/9/2025 | 2/25/2026 | medium |
| 504967 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52860) | Tenable OT Security | Tenable.ot | 1/16/2026 | 2/6/2026 | medium |
| 504972 | Qnap QTS and QuTS hero Use of Externally-Controlled Format String (CVE-2025-48730) | Tenable OT Security | Tenable.ot | 1/16/2026 | 2/6/2026 | medium |
| 504977 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52853) | Tenable OT Security | Tenable.ot | 1/16/2026 | 2/6/2026 | medium |
| 504985 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-48728) | Tenable OT Security | Tenable.ot | 1/16/2026 | 2/6/2026 | medium |
| 502599 | Qnap QTS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2017-17032) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | critical |
| 502645 | Qnap QTS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2017-17030) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | critical |
| 502514 | Qnap QTS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2017-17029) | Tenable OT Security | Tenable.ot | 10/16/2024 | 10/17/2024 | critical |
| 505309 | Qnap QTS and QuTS hero Improper Neutralization of Special Elements used in an OS Command (CVE-2024-14026) | Tenable OT Security | Tenable.ot | 3/23/2026 | 3/24/2026 | medium |
| 504841 | Qnap QTS and QuTS hero Improper Neutralization of CRLF Sequences (CVE-2024-48868) | Tenable OT Security | Tenable.ot | 12/11/2025 | 2/24/2026 | high |
| 504957 | Qnap QTS and QuTS hero Out-of-bounds Write (CVE-2024-38638) | Tenable OT Security | Tenable.ot | 1/16/2026 | 2/6/2026 | low |
| 505014 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-52430) | Tenable OT Security | Tenable.ot | 1/20/2026 | 2/4/2026 | medium |
| 505016 | Qnap QTS and QuTS hero NULL Pointer Dereference (CVE-2025-53414) | Tenable OT Security | Tenable.ot | 1/20/2026 | 2/4/2026 | medium |
| 505025 | Qnap QTS and QuTS hero Out-of-bounds Read (CVE-2025-54166) | Tenable OT Security | Tenable.ot | 1/20/2026 | 2/4/2026 | medium |
| 504816 | Qnap QTS and QuTS hero Server-Side Request Forgery(CVE-2024-53696) | Tenable OT Security | Tenable.ot | 12/8/2025 | 2/26/2026 | medium |
