Vulnerabilities > Qnap > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-01-14 CVE-2021-38678 Open Redirect vulnerability in Qnap Qcalagent
An open redirect vulnerability has been reported to affect QNAP device running QcalAgent.
network
qnap CWE-601
5.8
2022-01-07 CVE-2021-38674 Cross-site Scripting vulnerability in Qnap QTS
A cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud.
network
qnap CWE-79
4.3
2021-12-29 CVE-2021-38680 Cross-site Scripting vulnerability in Qnap Kazoo Server 4.10.12/4.10.9
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Kazoo Server.
network
qnap CWE-79
4.3
2021-12-29 CVE-2021-38688 Improper Authentication vulnerability in Qnap Qfile
An improper authentication vulnerability has been reported to affect Android App Qfile.
network
low complexity
qnap CWE-287
5.0
2021-11-26 CVE-2021-38686 Improper Authentication vulnerability in Qnap QVR 5.1.5
An improper authentication vulnerability has been reported to affect QNAP device, VioStor.
network
qnap CWE-287
6.8
2021-11-20 CVE-2021-34358 Cross-Site Request Forgery (CSRF) vulnerability in Qnap Qmailagent
We have already fixed this vulnerability in the following versions of QmailAgent: QmailAgent 3.0.2 ( 2021/08/25 ) and later
network
qnap CWE-352
6.8
2021-11-20 CVE-2021-38681 Cross-site Scripting vulnerability in Qnap Ragic Cloud DB
A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB.
network
qnap CWE-79
4.3
2021-11-13 CVE-2021-34357 Cross-site Scripting vulnerability in Qnap Qmailagent
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QmailAgent.
network
qnap CWE-79
4.3
2021-10-22 CVE-2021-34362 Command Injection vulnerability in Qnap Media Streaming Add-On
A command injection vulnerability has been reported to affect QNAP device running Media Streaming add-on.
network
low complexity
qnap CWE-77
6.5
2021-09-27 CVE-2021-34349 Command Injection vulnerability in Qnap QVR
A command injection vulnerability has been reported to affect QNAP device running QVR.
network
low complexity
qnap CWE-77
6.5