Search Results (371183 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-38680 1 Qnap 1 Kazoo Server 2024-11-21 5.3 Medium
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Kazoo Server. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Kazoo Server: Kazoo Server 4.11.20 and later
CVE-2021-38679 1 Qnap 1 Kazoo Server 2024-11-21 6.5 Medium
An improper authentication vulnerability has been reported to affect QNAP NAS running Kazoo Server. If exploited, this vulnerability allows attackers to compromise the security of the system. We have already fixed this vulnerability in the following versions of Kazoo Server: Kazoo Server 4.11.22 and later
CVE-2021-38678 1 Qnap 1 Qcalagent 2024-11-21 6.1 Medium
An open redirect vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows attackers to redirect users to an untrusted page that contains malware. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later
CVE-2021-38677 1 Qnap 1 Qcalagent 2024-11-21 5.3 Medium
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running QcalAgent. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QcalAgent: QcalAgent 1.1.7 and later
CVE-2021-38675 1 Qnap 2 Image2pdf, Nas 2024-11-21 5.4 Medium
A cross-site scripting (XSS) vulnerability has been reported to affect QNAP device running Image2PDF. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of Image2PDF: Image2PDF 2.1.5 ( 2021/08/17 ) and later
CVE-2021-38674 1 Qnap 3 Qts, Quts Hero, Qutscloud 2024-11-21 4.2 Medium
A cross-site scripting (XSS) vulnerability has been reported to affect QTS, QuTS hero and QuTScloud. If exploited, this vulnerability allows remote attackers to inject malicious code. We have already fixed this vulnerability in the following versions of QTS, QuTS hero and QuTScloud: QuTS hero h4.5.4.1771 build 20210825 and later QTS 4.5.4.1787 build 20210910 and later QuTScloud c4.5.7.1864 and later
CVE-2021-38672 1 Microsoft 3 Windows 11, Windows 11 21h2, Windows Server 2022 2024-11-21 8 High
Windows Hyper-V Remote Code Execution Vulnerability
CVE-2021-38671 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-38669 1 Microsoft 2 Edge, Edge Chromium 2024-11-21 6.4 Medium
Microsoft Edge (Chromium-based) Tampering Vulnerability
CVE-2021-38667 1 Microsoft 20 Windows 10, Windows 10 1507, Windows 10 1607 and 17 more 2024-11-21 7.8 High
Windows Print Spooler Elevation of Privilege Vulnerability
CVE-2021-38666 1 Microsoft 22 Windows 10, Windows 10 1507, Windows 10 1607 and 19 more 2024-11-21 8.8 High
Remote Desktop Client Remote Code Execution Vulnerability
CVE-2021-38663 1 Microsoft 23 Windows 10, Windows 10 1507, Windows 10 1607 and 20 more 2024-11-21 5.5 Medium
Windows exFAT File System Information Disclosure Vulnerability
CVE-2021-38662 1 Microsoft 23 Windows 10, Windows 10 1507, Windows 10 1607 and 20 more 2024-11-21 5.5 Medium
Windows Fast FAT File System Driver Information Disclosure Vulnerability
CVE-2021-38661 1 Microsoft 1 Hevc Video Extensions 2024-11-21 7.8 High
HEVC Video Extensions Remote Code Execution Vulnerability
CVE-2021-38660 1 Microsoft 1 Excel 2024-11-21 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-38659 1 Microsoft 1 365 Apps 2024-11-21 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-38658 1 Microsoft 1 Office 2024-11-21 7.8 High
Microsoft Office Graphics Remote Code Execution Vulnerability
CVE-2021-38657 1 Microsoft 1 365 Apps 2024-11-21 6.1 Medium
Microsoft Office Graphics Component Information Disclosure Vulnerability
CVE-2021-38656 1 Microsoft 1 365 Apps 2024-11-21 7.8 High
Microsoft Word Remote Code Execution Vulnerability
CVE-2021-38655 1 Microsoft 6 365 Apps, Excel, Office and 3 more 2024-11-21 7.8 High
Microsoft Excel Remote Code Execution Vulnerability