Explore every threat in the CISA Known Exploited Vulnerabilities (KEV) catalog, enhanced with plain-English executive analysis, AWS relevance, and technical remediation guidance.
| CVE | Vendor | Product | Added | Due | Status |
|---|---|---|---|---|---|
|
CVE-2018-19943 — QNAP NAS File Station Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.
|
QNAP | Network Attached Storage (NAS) | May 24, 2022 | Jun 14, 2022 | Ransomware |
|
CVE-2018-19949 — QNAP NAS File Station Command Injection Vulnerability
A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.
|
QNAP | Network Attached Storage (NAS) | May 24, 2022 | Jun 14, 2022 | Ransomware |
|
CVE-2018-19953 — QNAP NAS File Station Cross-Site Scripting Vulnerability
A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.
|
QNAP | Network Attached Storage (NAS) | May 24, 2022 | Jun 14, 2022 | Ransomware |
|
CVE-2021-28799 — QNAP NAS Improper Authorization Vulnerability
QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.
|
QNAP | Network Attached Storage (NAS) | Mar 31, 2022 | Apr 21, 2022 | Ransomware |
A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.
Network Attached Storage (NAS) · May 24, 2022
A command injection vulnerability affecting QNAP NAS File Station could allow remote attackers to run commands.
Network Attached Storage (NAS) · May 24, 2022
A cross-site scripting vulnerability affecting QNAP NAS File Station could allow remote attackers to inject malicious code.
Network Attached Storage (NAS) · May 24, 2022
QNAP NAS running HBS 3 contains an improper authorization vulnerability which can allow remote attackers to log in to a device.
Network Attached Storage (NAS) · Mar 31, 2022