Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2024-27123

QcalAgent

A cross-site scripting (XSS) vulnerability has been reported to affect QcalAgent. The local attackers can then exploit the vulnerability to bypass security mechanisms or read application data. We have already fixed the vulnerability in the following version: QcalAgent 1.1.9 and later

CVSS 4.0 · 5.2 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qcalagent
CVE-2023-41289

QcalAgent

An OS command injection vulnerability has been reported to affect QcalAgent. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: QcalAgent 1.1.8 and later

CVSS 3.1 · 6.3 Medium EPSS 1.1% KEV · Not listed
Vendors
Qnap
Products
Qcalagent
CVE-2021-38678

Open Redirect Vulnerability in QcalAgent

An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qcalagent
CVE-2021-38677

Reflected XSS Vulnerability in QcalAgent

A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Qnap
Products
Qcalagent