[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fDdXLGSL1geLMXrfB8iNTjVNHL3QnjB5BQFr3U7AW3Y8":3,"g5a-ex:synology\u002Fcalendar@*":148,"g5a-family:synology\u002Fcalendar":150},{"success":4,"data":5},true,{"product":6,"versions":48,"topVulnerabilitiesByEpss":65,"kevVulnerabilities":125,"seoMetadata":126,"meta":145},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":47},"synology","calendar",16,11,0,"2022-08-03",[14,17,19,21,23,25,27,29,31,33,35,37,39,41,43,45],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.0-0121",false,{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.2-0131",{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},"1.0.3-0132",{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},"1.1.0-0146",{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.0-0241",{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},"2.0.1-0242",{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.0-0425",{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.1-0502",{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},"2.1.2-0511",{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.1-0518",{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.2-0532",{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},"2.2.3-0534",{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.0-0615",{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.1-0617",{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.2-0619",{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},"2.3.3-0620","Calendar by Synology is a technology product with 16 tracked versions and 11 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64],{"version":15,"cve_count":11,"kev_count":11,"has_kev":16},{"version":18,"cve_count":11,"kev_count":11,"has_kev":16},{"version":20,"cve_count":11,"kev_count":11,"has_kev":16},{"version":22,"cve_count":11,"kev_count":11,"has_kev":16},{"version":24,"cve_count":11,"kev_count":11,"has_kev":16},{"version":26,"cve_count":11,"kev_count":11,"has_kev":16},{"version":28,"cve_count":11,"kev_count":11,"has_kev":16},{"version":30,"cve_count":11,"kev_count":11,"has_kev":16},{"version":32,"cve_count":11,"kev_count":11,"has_kev":16},{"version":34,"cve_count":11,"kev_count":11,"has_kev":16},{"version":36,"cve_count":11,"kev_count":11,"has_kev":16},{"version":38,"cve_count":11,"kev_count":11,"has_kev":16},{"version":40,"cve_count":11,"kev_count":11,"has_kev":16},{"version":42,"cve_count":11,"kev_count":11,"has_kev":16},{"version":44,"cve_count":11,"kev_count":11,"has_kev":16},{"version":46,"cve_count":11,"kev_count":11,"has_kev":16},[66,74,82,89,94,99,104,109,114,119],{"cveId":67,"description":68,"publishedDate":69,"cvssScore":70,"cvssVersion":71,"severity":72,"isKev":16,"epssScore":73},"CVE-2019-11829","OS command injection vulnerability in drivers_syno_import_user.php in Synology Calendar before 2.3.1-0617 allows remote attackers to execute arbitrary commands via the crafted 'X-Real-IP' header.","2019-06-30",9.8,"v3.1","Critical",0.02249,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":78,"cvssVersion":79,"severity":80,"isKev":16,"epssScore":81},"CVE-2018-13299","Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files via the filename parameter.","2019-04-01",6.5,"v3.0","Medium",0.01364,{"cveId":83,"description":84,"publishedDate":85,"cvssScore":86,"cvssVersion":71,"severity":87,"isKev":16,"epssScore":88},"CVE-2021-34812","Use of hard-coded credentials vulnerability in php component in Synology Calendar before 2.4.0-0761 allows remote attackers to obtain sensitive information via unspecified vectors.","2021-06-18",7.5,"High",0.01119,{"cveId":90,"description":91,"publishedDate":92,"cvssScore":78,"cvssVersion":79,"severity":80,"isKev":16,"epssScore":93},"CVE-2017-15891","Improper access control vulnerability in SYNO.Cal.EventBase in Synology Calendar before 2.0.1-0242 allows remote authenticated users to modify calendar event via unspecified vectors.","2017-12-08",0.01036,{"cveId":95,"description":96,"publishedDate":12,"cvssScore":97,"cvssVersion":71,"severity":80,"isKev":16,"epssScore":98},"CVE-2022-27617","Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to download arbitrary files via unspecified vectors.",5,0.00933,{"cveId":100,"description":101,"publishedDate":102,"cvssScore":78,"cvssVersion":79,"severity":80,"isKev":16,"epssScore":103},"CVE-2018-8927","Improper authorization vulnerability in SYNO.Cal.Event in Calendar before 2.1.2-0511 allows remote authenticated users to create arbitrary events via the (1) cal_id or (2) original_cal_id parameter.","2018-06-14",0.00907,{"cveId":105,"description":106,"publishedDate":69,"cvssScore":107,"cvssVersion":71,"severity":80,"isKev":16,"epssScore":108},"CVE-2019-11825","Cross-site scripting (XSS) vulnerability in Event Editor in Synology Calendar before 2.3.0-0615 allows remote attackers to inject arbitrary web script or HTML via the title parameter.",5.4,0.00788,{"cveId":110,"description":111,"publishedDate":112,"cvssScore":107,"cvssVersion":79,"severity":80,"isKev":16,"epssScore":113},"CVE-2018-8915","Cross-site scripting (XSS) vulnerability in Notification Center in Synology Calendar before 2.1.1-0502 allows remote authenticated users to inject arbitrary web script or HTML via title parameter.","2018-05-10",0.00787,{"cveId":115,"description":116,"publishedDate":117,"cvssScore":107,"cvssVersion":71,"severity":80,"isKev":16,"epssScore":118},"CVE-2022-22682","Improper neutralization of input during web page generation ('Cross-site Scripting') vulnerability in Event Management in Synology Calendar before 2.4.5-10930 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.","2022-07-12",0.00557,{"cveId":120,"description":121,"publishedDate":122,"cvssScore":123,"cvssVersion":71,"severity":87,"isKev":16,"epssScore":124},"CVE-2022-22686","Cross-Site Request Forgery (CSRF) vulnerability in webapi component in Synology Calendar before 2.3.4-0631 allows remote authenticated users to hijack the authentication of administrators via unspecified vectors.","2022-07-26",8,0.00341,[],{"title":127,"metaDescription":128,"keywords":129,"structuredData":130},"Calendar by Synology - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Calendar by Synology covering 16 versions with 11 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Calendar vulnerabilities, Calendar security, Calendar CVE, Synology Calendar, Calendar threat intelligence, Synology security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":131,"@type":132,"name":133,"description":128,"url":134,"manufacturer":135,"applicationCategory":139,"softwareVersion":140,"mainEntity":141},"https:\u002F\u002Fschema.org","SoftwareApplication","Calendar","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsynology\u002Fcalendar",{"@type":136,"name":137,"url":138},"Organization","Synology","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fsynology","Security Software","16 versions tracked",{"@type":142,"name":143,"description":144,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Calendar Security Vulnerabilities","Security vulnerabilities affecting Calendar by Synology",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":146,"apiVersion":147},"2026-10-28T20:28:11.903Z","3.0",{"rows":149,"total":11,"capped":16,"failed":11},[],[]]