QNAP
CVEs currently on EVULNABLE's Priority Feed for QNAP, and this vendor's own CISA KEV history.
In EVULNABLE's ranked feed
Showing all 11 QNAP CVEs in EVULNABLE's ranked feed.
#1 91 Immediate CVE-2019-7195 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV QNAP — QNAP Photo Station Path Traversal Vulnerability KEV + ransomware, EPSS 89.5%
EVRS 91/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#2 91 Immediate CVE-2019-7192 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV QNAP — QNAP Photo Station Improper Access Control Vulnerability KEV + ransomware, EPSS 88.1%
EVRS 91/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#3 90 Immediate CVE-2022-27593 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV QNAP — QNAP Photo Station Externally Controlled Reference Vulnerability KEV + ransomware, EPSS 87.9%
EVRS 90/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#4 89 Immediate CVE-2019-7194 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV QNAP — QNAP Photo Station Path Traversal Vulnerability KEV + ransomware, EPSS 83.1%
EVRS 89/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#5 88 Immediate CVE-2021-28799 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV QNAP — QNAP NAS Improper Authorization Vulnerability KEV + ransomware, EPSS 78.2%
EVRS 88/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#6 85 Immediate CVE-2018-19949 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV QNAP — QNAP NAS File Station Command Injection Vulnerability KEV + ransomware, EPSS 28.6%
EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#7 85 Immediate CVE-2019-7193 ExigentKEV since 2022 · listed over a yearRansomwareCISA KEV QNAP — QNAP QTS Improper Input Validation Vulnerability KEV + ransomware, EPSS 14.4%
EVRS 85/100 · EVRS priority: Immediate · Exigent, a flag within Immediate. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#8 79 Urgent CVE-2023-47565 KEV since 2023 · listed over a yearCISA KEV QNAP — QNAP VioStor NVR OS Command Injection Vulnerability KEV, EPSS 73.3%
EVRS 79/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.733.
#9 75 Urgent CVE-2020-2509 KEV since 2022 · listed over a yearCISA KEV QNAP — QNAP Network-Attached Storage (NAS) Command Injection Vulnerability KEV, EPSS 34.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and an EPSS probability of 0.340.
#10 75 Urgent CVE-2018-19953 KEV since 2022 · listed over a yearRansomwareCISA KEV QNAP — QNAP NAS File Station Cross-Site Scripting Vulnerability KEV + ransomware, EPSS 29.0%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.
#11 75 Urgent CVE-2018-19943 KEV since 2022 · listed over a yearRansomwareCISA KEV QNAP — QNAP NAS File Station Cross-Site Scripting Vulnerability KEV + ransomware, EPSS 21.5%
EVRS 75/100 · EVRS priority: Urgent. CVSS severity and EPSS are separate measurements, shown below.
Why it matters: Listed in the CISA KEV catalog, and associated with known ransomware campaigns.