Filtered by vendor Cybozu
Subscriptions
Total
325 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2016-7801 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors. | ||||
CVE-2016-7802 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors. | ||||
CVE-2016-1186 | 1 Cybozu | 1 Kintone | 2025-04-20 | N/A |
Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates. | ||||
CVE-2016-7816 | 1 Cybozu | 1 Kintone | 2025-04-20 | N/A |
The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | ||||
CVE-2016-7833 | 1 Cybozu | 1 Dezie | 2025-04-20 | N/A |
Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors. | ||||
CVE-2017-10857 | 1 Cybozu | 1 Office | 2025-04-20 | N/A |
Cybozu Office 10.0.0 to 10.6.1 allows authenticated attackers to bypass access restriction to perform arbitrary actions via "Cabinet" function. | ||||
CVE-2016-4865 | 1 Cybozu | 1 Office | 2025-04-20 | N/A |
Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Customapp function. | ||||
CVE-2016-4842 | 1 Cybozu | 1 Mailwise | 2025-04-20 | N/A |
Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read. | ||||
CVE-2017-2109 | 1 Cybozu | 1 Kunai | 2025-04-20 | N/A |
Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application. | ||||
CVE-2017-2114 | 1 Cybozu | 1 Office | 2025-04-20 | N/A |
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. | ||||
CVE-2016-1194 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service. | ||||
CVE-2016-1214 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. | ||||
CVE-2016-1213 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. | ||||
CVE-2017-2145 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors. | ||||
CVE-2016-4869 | 1 Cybozu | 1 Office | 2025-04-20 | N/A |
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed. | ||||
CVE-2016-4841 | 1 Cybozu | 1 Mailwise | 2025-04-20 | N/A |
Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers. | ||||
CVE-2016-1216 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2. | ||||
CVE-2017-2256 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo". | ||||
CVE-2016-4908 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors. | ||||
CVE-2017-2094 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors. |