Filtered by vendor Cybozu
Subscriptions
Total
324 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2016-4872 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
| Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of unauthorized projects via a breadcrumb trail. | ||||
| CVE-2016-4871 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
| Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service. | ||||
| CVE-2016-4870 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
| Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the Schedule function. | ||||
| CVE-2016-4869 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
| Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed. | ||||
| CVE-2016-4868 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
| Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via specially crafted requests. | ||||
| CVE-2016-4867 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
| Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function. | ||||
| CVE-2016-4866 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
| Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Project function. | ||||
| CVE-2016-4865 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
| Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Customapp function. | ||||
| CVE-2016-4844 | 1 Cybozu | 1 Mailwise | 2024-11-21 | N/A |
| Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks. | ||||
| CVE-2016-4843 | 1 Cybozu | 1 Mailwise | 2024-11-21 | N/A |
| Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information. | ||||
| CVE-2016-4842 | 1 Cybozu | 1 Mailwise | 2024-11-21 | N/A |
| Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read. | ||||
| CVE-2016-4841 | 1 Cybozu | 1 Mailwise | 2024-11-21 | N/A |
| Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers. | ||||
| CVE-2016-1220 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
| Cybozu Garoon before 4.2.2 does not properly restrict access. | ||||
| CVE-2016-1219 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
| Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use. | ||||
| CVE-2016-1218 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
| SQL injection vulnerability in Cybozu Garoon before 4.2.2. | ||||
| CVE-2016-1217 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
| Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2. | ||||
| CVE-2016-1216 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
| Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2. | ||||
| CVE-2016-1215 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
| Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2. | ||||
| CVE-2016-1214 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
| Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. | ||||
| CVE-2016-1213 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
| The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. | ||||