CVE-2021-38681

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A reflected cross-site scripting (XSS) vulnerability has been reported to affect QNAP NAS running Ragic Cloud DB. If exploited, this vulnerability allows remote attackers to inject malicious code. QNAP have already disabled and removed Ragic Cloud DB from the QNAP App Center, pending a security patch from Ragic.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Nov 20, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-386829.8A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnCVE-2021-386849.8A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Multimedia Console. If exploited, this vulnerability alloCVE-2021-386859.8A command injection vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows remote attackersCVE-2021-386868.8An improper authentication vulnerability has been reported to affect QNAP device, VioStor. If exploited, this vulnerability allows attackersCVE-2021-386879.8A stack buffer overflow vulnerability has been reported to affect QNAP NAS running Surveillance Station. If exploited, this vulnerability alCVE-2021-386887.5An improper authentication vulnerability has been reported to affect Android App Qfile. If exploited, this vulnerability allows attackers toCVE-2021-386899.8A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnCVE-2021-38697.5corenlp is vulnerable to Improper Restriction of XML External Entity ReferenceCVE-2021-386909.8A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnCVE-2021-386919.8A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnCVE-2021-386929.8A stack buffer overflow vulnerability has been reported to affect QNAP device running QVR Elite, QVR Pro, QVR Guard. If exploited, this vulnCVE-2021-386935.3A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance. If exploited, t
CVE-2021-38681: Medium severity, CVSS 5.4 | Vulnix