Filtered by vendor Cybozu
Subscriptions
Total
324 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2016-1220 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cybozu Garoon before 4.2.2 does not properly restrict access. | ||||
| CVE-2016-1216 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2. | ||||
| CVE-2016-1215 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2. | ||||
| CVE-2016-1218 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| SQL injection vulnerability in Cybozu Garoon before 4.2.2. | ||||
| CVE-2016-1192 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors. | ||||
| CVE-2016-1191 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors. | ||||
| CVE-2016-1197 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775. | ||||
| CVE-2016-1186 | 1 Cybozu | 1 Kintone | 2024-08-05 | N/A |
| Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates. | ||||
| CVE-2016-1214 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. | ||||
| CVE-2016-1193 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors. | ||||
| CVE-2016-1151 | 1 Cybozu | 1 Office | 2024-08-05 | N/A |
| Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication of arbitrary users. | ||||
| CVE-2016-1187 | 1 Cybozu | 1 Kunai | 2024-08-05 | N/A |
| Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates. | ||||
| CVE-2016-1190 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors. | ||||
| CVE-2016-1188 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors. | ||||
| CVE-2016-1189 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet via unspecified vectors. | ||||
| CVE-2016-1195 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. | ||||
| CVE-2016-1196 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776. | ||||
| CVE-2016-1194 | 1 Cybozu | 1 Garoon | 2024-08-05 | N/A |
| Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service. | ||||
| CVE-2016-1185 | 1 Cybozu | 1 Kintone | 2024-08-05 | N/A |
| The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token via a crafted application. | ||||
| CVE-2016-1153 | 1 Cybozu | 1 Office | 2024-08-05 | N/A |
| customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a different vulnerability than CVE-2015-8489. | ||||