Known Vulnerabilities for QTS Password Function by QNAP
Listed below are 10 of the newest known vulnerabilities associated with "QTS Password Function" by "QNAP".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-61451 json | The Grav API plugin (grav-plugin-api) before 1.0.4 does not validate the origin of the client-supplied admin_base_url field i... | Not Provided | 2026-07-15 | 2026-07-15 |
| CVE-2026-57276 json | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be ins... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-57274 json | GeoWebPlayer (also called "Web Plugin" in the GV-VMS documentation and "WS Player" for VMS-Cloud) is an addon that can be ins... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-55792 json | Craft CMS is a content management system (CMS). In versions starting from 4.0.0-RC1 and prior to 4.18.0, and 5.0.0-RC1 and ab... | Not Provided | 2026-07-02 | 2026-07-02 |
| CVE-2026-52888 json | NocoBase is an AI-powered no-code/low-code platform for building business applications and enterprise solutions. In 2.0.59 an... | Not Provided | 2026-07-15 | 2026-07-16 |
| CVE-2026-45393 json | A vulnerability chain in Cribl Edge for Windows before 4.17.1 allows a local authenticated user to escalate privileges to NT ... | Not Provided | 2026-05-12 | 2026-06-02 |
| CVE-2026-45027 json | WeGIA is a web manager for charitable institutions. In versions prior to 3.7.3, when a user logs in, html/login.php hashes th... | Not Provided | 2026-05-27 | 2026-05-27 |
| CVE-2026-44489 json | Axios is a promise based HTTP client for the browser and Node.js. From 1.15.2 to before 1.16.0, nested objects created by uti... | Not Provided | 2026-06-11 | 2026-06-11 |
| CVE-2026-44332 json | Fiber is an Express inspired web framework written in Go. Prior to 3.3.0, the default Authorizer function in the BasicAuth mi... | Not Provided | 2026-07-08 | 2026-07-09 |
| CVE-2026-43935 json | e107 is a content management system (CMS). Prior to 2.3.4, a Host Header Injection vulnerability in the password reset page a... | Not Provided | 2026-05-26 | 2026-05-26 |