Vulnerabilities > Qnap > Qcalagent

DATE CVE VULNERABILITY TITLE RISK
2024-01-05 CVE-2023-41289 OS Command Injection vulnerability in Qnap Qcalagent 1.1.6/1.1.7
An OS command injection vulnerability has been reported to affect QcalAgent.
network
low complexity
qnap CWE-78
8.8
8.8
2022-01-14 CVE-2021-38677 Cross-site Scripting vulnerability in Qnap Qcalagent
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent.
network
qnap CWE-79
4.3
4.3
2022-01-14 CVE-2021-38678 Open Redirect vulnerability in Qnap Qcalagent
An open redirect vulnerability has been reported to affect QNAP device running QcalAgent.
network
qnap CWE-601
5.8
5.8