High

DATE	CVE	VULNERABILITY TITLE	RISK
2022-07-26	CVE-2022-22686	Unspecified vulnerability in Synology Calendar Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to hijack the authentication of administrators via unspecified vectors. network low complexity synology	8.0
2021-06-18	CVE-2021-34812	Unspecified vulnerability in Synology Calendar Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors. network low complexity synology	7.5