Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2018-12-26	CVE-2018-0724	Cross-site Scripting vulnerability in Qnap Q'Center Virtual Appliance 1.8.1014 Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0723. network low complexity qnap CWE-79	6.1
2018-12-26	CVE-2018-0723	Cross-site Scripting vulnerability in Qnap Q'Center Virtual Appliance 1.8.1014 Cross-site scripting (XSS) vulnerability in Q'center Virtual Appliance 1.8.1014 and earlier versions could allow remote attackers to inject Javascript code in the compromised application, a different vulnerability than CVE-2018-0724. network low complexity qnap CWE-79	6.1