Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-11-26	CVE-2021-38686	Improper Authentication vulnerability in Qnap QVR 5.1.5 An improper authentication vulnerability has been reported to affect QNAP device, VioStor. network qnap CWE-287	6.8
2021-09-27	CVE-2021-34349	Command Injection vulnerability in Qnap QVR A command injection vulnerability has been reported to affect QNAP device running QVR. network low complexity qnap CWE-77	6.5

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.