Vulnerability Database

328,409

Total vulnerabilities in the database

Vulnerabilities for products matching "quts_hero"

Found 1 matching product.

You can search for specific versions with /product/quts_hero/1.2.3

qnap / quts_hero

223 vulnerabilities found
Title Severity Exploit Date Affected Version
CVE-2024-37049
Medium November 22, 2024 11/22/24
== h5.2.0.2737-build_20240417
== h5.2.0.2782-build_20240601
== h5.2.0.2789-build_20240607
== h5.2.0.2802-build_20240620
== h5.2.0.2823-build_20240711
== h5.2.0.2851-build_20240808
== h5.2.0.2860-build_20240817
CVE-2024-37050
Medium November 22, 2024 11/22/24
== h5.2.0.2737-build_20240417
== h5.2.0.2782-build_20240601
== h5.2.0.2789-build_20240607
== h5.2.0.2802-build_20240620
== h5.2.0.2823-build_20240711
== h5.2.0.2851-build_20240808
== h5.2.0.2860-build_20240817
CVE-2024-37041
High November 22, 2024 11/22/24
== h5.2.0.2737-build_20240417
== h5.2.0.2782-build_20240601
== h5.2.0.2789-build_20240607
== h5.2.0.2802-build_20240620
== h5.2.0.2823-build_20240711
== h5.2.0.2851-build_20240808
== h5.2.0.2860-build_20240817
CVE-2024-37042
Low November 22, 2024 11/22/24
== h5.2.0.2737-build_20240417
== h5.2.0.2782-build_20240601
== h5.2.0.2789-build_20240607
== h5.2.0.2802-build_20240620
== h5.2.0.2823-build_20240711
== h5.2.0.2851-build_20240808
== h5.2.0.2860-build_20240817
CVE-2024-37043
Low November 22, 2024 11/22/24
== h5.2.0.2737-build_20240417
== h5.2.0.2782-build_20240601
== h5.2.0.2789-build_20240607
== h5.2.0.2802-build_20240620
== h5.2.0.2823-build_20240711
== h5.2.0.2851-build_20240808
== h5.2.0.2860-build_20240817
CVE-2024-37044
High November 22, 2024 11/22/24
== h5.2.0.2737-build_20240417
== h5.2.0.2782-build_20240601
== h5.2.0.2789-build_20240607
== h5.2.0.2802-build_20240620
== h5.2.0.2823-build_20240711
== h5.2.0.2851-build_20240808
== h5.2.0.2860-build_20240817
CVE-2024-37045
Low November 22, 2024 11/22/24
== h5.2.0.2737-build_20240417
== h5.2.0.2782-build_20240601
== h5.2.0.2789-build_20240607
== h5.2.0.2802-build_20240620
== h5.2.0.2823-build_20240711
== h5.2.0.2851-build_20240808
== h5.2.0.2860-build_20240817
CVE-2024-37046
Low November 22, 2024 11/22/24
== h5.2.0.2737-build_20240417
== h5.2.0.2782-build_20240601
== h5.2.0.2789-build_20240607
== h5.2.0.2802-build_20240620
== h5.2.0.2823-build_20240711
== h5.2.0.2851-build_20240808
== h5.2.0.2860-build_20240817
CVE-2024-37047
Medium November 22, 2024 11/22/24
== h5.2.0.2737-build_20240417
== h5.2.0.2782-build_20240601
== h5.2.0.2789-build_20240607
== h5.2.0.2802-build_20240620
== h5.2.0.2823-build_20240711
== h5.2.0.2851-build_20240808
== h5.2.0.2860-build_20240817
CVE-2024-37048
Low November 22, 2024 11/22/24
== h5.2.0.2737-build_20240417
== h5.2.0.2782-build_20240601
== h5.2.0.2789-build_20240607
== h5.2.0.2802-build_20240620
== h5.2.0.2823-build_20240711
== h5.2.0.2851-build_20240808
== h5.2.0.2860-build_20240817
CVE-2024-32771
Low September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647-build_20240118
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
== h5.1.7.2770-build_20240520
== h5.1.7.2788-build_20240607
== h5.1.7.2794-build_20240613
== h5.1.8.2823-build_20240712
== h5.2.0.2737-build_20240417
CVE-2024-38641
High September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
== h5.1.7.2770-build_20240520
== h5.1.7.2788-build_20240607
== h5.1.7.2794-build_20240613
CVE-2024-32763
High September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647-build_20240118
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
== h5.1.7.2770-build_20240520
== h5.1.7.2788-build_20240607
== h5.1.7.2794-build_20240613
CVE-2024-21903
Medium September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647-build_20240118
== h5.1.5.2680-build_20240220
CVE-2024-21904
Medium September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647-build_20240118
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
CVE-2024-21906
Low September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647-build_20240118
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
== h5.1.7.2770-build_20240520
== h5.1.7.2788-build_20240607
== h5.1.7.2794-build_20240613
CVE-2023-51366
High September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647-build_20240118
== h5.1.5.2680-build_20240220
CVE-2023-51367
Medium September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647-build_20240118
== h5.1.5.2680-build_20240220
CVE-2023-51368
Medium September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647-build_20240118
== h5.1.5.2680-build_20240220
CVE-2024-21897
High September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647-build_20240118
== h5.1.5.2680-build_20240220
CVE-2024-21898
High September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
CVE-2023-50366
Low September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647-build_20240118
== h5.1.5.2680-build_20240220
CVE-2023-34974
High September 6, 2024 9/6/24
== h4.5.4.2272-build_20230105
== h4.5.4.2217-build_20221111
== h4.5.4.2138-build_20220824
== h4.5.4.2052-build_20220530
== h4.5.4.1991-build_20220330
== h4.5.4.1971-build_20220310
== h4.5.4.2374-build_20230417
== h4.5.4.2476-build_20230728
== h4.5.4.2626-build_20231225
== h4.5.4.1951-build_20220218
== h4.5.4.1892-build_20211223
== h4.5.4.1848-build_20211109
== h4.5.4.1813-build_20211006
== h4.5.4.1800-build_20210923
== h4.5.4.1771-build_20210825
CVE-2023-34979
Medium September 6, 2024 9/6/24
== h4.5.4.2272-build_20230105
== h4.5.4.2217-build_20221111
== h4.5.4.2138-build_20220824
== h4.5.4.2052-build_20220530
== h4.5.4.1991-build_20220330
== h4.5.4.1971-build_20220310
== h4.5.4.1771-build_20210825
== h4.5.4.1800-build_20210923
== h4.5.4.1813-build_20211006
== h4.5.4.1848-build_20211109
== h4.5.4.1892-build_20211223
== h4.5.4.1951-build_20220218
== h4.5.4.2374-build_20230417
== h4.5.4.2476-build_20230728
== h4.5.4.2626-build_20231225
CVE-2023-39298
High September 6, 2024 9/6/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
== h5.1.7.2770-build_20240520
== h5.1.7.2788-build_20240607
== h5.1.7.2794-build_20240613
== h5.1.8.2823-build_20240712
== h5.2.0.2737-build_20240417
CVE-2024-32765
Low August 12, 2024 8/12/24
>= h5.1.0 < h5.1.8.2823
CVE-2024-27128
Medium May 21, 2024 5/21/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
CVE-2024-27129
Medium May 21, 2024 5/21/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
CVE-2024-27130
High May 21, 2024 5/21/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
CVE-2024-21902
Medium May 21, 2024 5/21/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
CVE-2024-27127
High May 21, 2024 5/21/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
== h5.1.6.2734-build_20240414
CVE-2024-21905
Medium April 26, 2024 4/26/24
>= h5.0.0 < h5.1.3.2578
== h5.1.3.2578
CVE-2024-27124
High April 26, 2024 4/26/24
>= h4.5.0 < h4.5.4.2626
== h4.5.4.2626
>= h5.0.0 < h5.1.3.2578
== h5.1.3.2578
CVE-2023-51365
High April 26, 2024 4/26/24
>= h4.5.0 < h4.5.4.2626
== h4.5.4.2626
>= h5.1.0 < h5.1.3.2578
== h5.1.3.2578
CVE-2024-32766
Critical April 26, 2024 4/26/24
>= h4.5.0 < h4.5.4.2626
== h4.5.4.2626
>= h5.0.0 < h5.1.3.2578
== h5.1.3.2578
CVE-2023-50361
Medium April 26, 2024 4/26/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
CVE-2023-50362
Medium April 26, 2024 4/26/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
CVE-2023-50363
High April 26, 2024 4/26/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
CVE-2023-50364
Medium April 26, 2024 4/26/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.5.2647-build_20240118
== h5.1.4.2596-build_20231128
== h5.1.5.2680-build_20240220
CVE-2023-51364
High April 26, 2024 4/26/24
>= h4.5.0 < h4.5.4.2626
== h4.5.4.2626
>= h5.1.0 < h5.1.3.2578
== h5.1.3.2578
CVE-2024-21900
Low March 8, 2024 3/8/24
< h5.1.3.2578
== h5.1.3.2578
CVE-2024-21899
Critical March 8, 2024 3/8/24
< h4.5.4.2626
== h4.5.4.2626
>= h5.1.0 < h5.1.3.2578
== h5.1.3.2578
CVE-2023-34980
Medium March 8, 2024 3/8/24
>= h4.5.0 < h4.5.4.2626
== h4.5.4.2626
CVE-2023-32969
Low March 8, 2024 3/8/24
>= h5.1.0 < h5.1.4.2596
== h5.1.4.2596
CVE-2023-47218
Medium February 13, 2024 2/13/24
>= h5.1.0 < h5.1.5.2647
== h5.1.5.2647
CVE-2023-50358
Medium February 13, 2024 2/13/24
>= h4.5.0 < h4.5.4.2626
== h4.5.4.2626
>= h5.0.0 < h5.1.5.2647
== h5.1.5.2647
CVE-2023-50359
Low February 2, 2024 2/2/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647
CVE-2023-47566
Medium February 2, 2024 2/2/24
== h5.1.0.2409-build_20230525
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647
CVE-2023-47568
High February 2, 2024 2/2/24
== h4.5.4.2272-build_20230105
== h4.5.4.2217-build_20221111
== h4.5.4.2138-build_20220824
== h4.5.4.2052-build_20220530
== h4.5.4.1991-build_20220330
== h4.5.4.1971-build_20220310
== h4.5.4.1951-build_20220218
== h4.5.4.1892-build_20211223
== h4.5.4.1848-build_20211109
== h4.5.4.1813-build_20211006
== h4.5.4.1800-build_20210923
== h4.5.4.1771-build_20210825
== h5.1.0.2409-build_20230525
== h4.5.4.2374-build_20230417
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647
== h4.5.4.2476-build_20230728
== h4.5.4.2626
CVE-2023-47567
Low February 2, 2024 2/2/24
== h4.5.4.2272-build_20230105
== h4.5.4.2217-build_20221111
== h4.5.4.2138-build_20220824
== h4.5.4.2052-build_20220530
== h4.5.4.1991-build_20220330
== h4.5.4.1971-build_20220310
== h4.5.4.1951-build_20220218
== h4.5.4.1892-build_20211223
== h4.5.4.1848-build_20211109
== h4.5.4.1813-build_20211006
== h4.5.4.1800-build_20210923
== h4.5.4.1771-build_20210825
== h5.1.0.2409-build_20230525
== h4.5.4.2374-build_20230417
== h5.1.1.2488-build_20230812
== h5.1.0.2466-build_20230721
== h5.1.0.2453-build_20230708
== h5.1.0.2424-build_20230609
== h5.1.3.2578-build_20231110
== h5.1.2.2534-build_20230927
== h5.1.4.2596-build_20231128
== h5.1.5.2647
== h4.5.4.2476-build_20230728
== h4.5.4.2626

Frequently Asked Questions

A security vulnerability is a weakness in software, hardware, or configuration that can be exploited to compromise confidentiality, integrity, or availability. Many vulnerabilities are tracked as CVEs (Common Vulnerabilities and Exposures), which provide a standardized identifier so teams can coordinate patching, mitigation, and risk assessment across tools and vendors.

CVSS (Common Vulnerability Scoring System) estimates technical severity, but it doesn't automatically equal business risk. Prioritize using context like internet exposure, affected asset criticality, known exploitation (proof-of-concept or in-the-wild), and whether compensating controls exist. A "Medium" CVSS on an exposed, production system can be more urgent than a "Critical" on an isolated, non-production host.

A vulnerability is the underlying weakness. An exploit is the method or code used to take advantage of it. A zero-day is a vulnerability that is unknown to the vendor or has no publicly available fix when attackers begin using it. In practice, risk increases sharply when exploitation becomes reliable or widespread.

Recurring findings usually come from incomplete Asset Discovery, inconsistent patch management, inherited images, and configuration drift. In modern environments, you also need to watch the software supply chain: dependencies, containers, build pipelines, and third-party services can reintroduce the same weakness even after you patch a single host. Unknown or unmanaged assets (often called Shadow IT) are a common reason the same issues resurface.

Use a simple, repeatable triage model: focus first on externally exposed assets, high-value systems (identity, VPN, email, production), vulnerabilities with known exploits, and issues that enable remote code execution or privilege escalation. Then enforce patch SLAs and track progress using consistent metrics so remediation is steady, not reactive.

SynScan combines attack surface monitoring and continuous security auditing to keep your inventory current, flag high-impact vulnerabilities early, and help you turn raw findings into a practical remediation plan.