Calendar Security Vulnerabilities and Issues — Calendar CVE List

Lucene search

SynologyCalendar

2 matches found

CVE•added 2018/06/14 2:29 p.m.•37 views

CVE-2018-8927

Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) cal_id or (2) original_cal_id parameter.

6.5CVSS6.2AI score0.00119EPSS

CVE•added 2018/05/10 1:29 p.m.•32 views

CVE-2018-8915

Cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter.

6.5CVSS5.1AI score0.00133EPSS