Vulnerability index

Browse CVEs

63 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Office MEDIUM 6.5
CVE-2016-4869

Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed.

Mitigation only
Fix from $1,600 2017-04-17
Office MEDIUM 6.5
CVE-2016-4871

Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.

No fix yet
Fix from $1,600 2017-04-17
Office MEDIUM 5.4
CVE-2016-4870

Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via …

Mitigation only
Fix from $1,600 2017-04-17
Garoon HIGH 7.5
CVE-2016-1193

Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors.

No fix yet
Fix from $1,950 2016-06-25
Garoon MEDIUM 6.5
CVE-2016-1190

Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors.

Mitigation only
Fix from $1,600 2016-06-25
Garoon HIGH 8.1
CVE-2016-1189

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet…

Mitigation only
Fix from $1,950 2016-06-25
Garoon MEDIUM 6.5
CVE-2016-1188

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors.

Mitigation only
Fix from $1,600 2016-06-25
Office MEDIUM 6.5
CVE-2016-1153

customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a different v…

No fix yet
Fix from $1,600 2016-02-17
Office MEDIUM 5.4
CVE-2016-1152

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions, and read or write to plan data, via unsp…

Mitigation only
Fix from $1,600 2016-02-17
Office HIGH 8.8
CVE-2016-1151

Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication …

Mitigation only
Fix from $1,950 2016-02-17
Office MEDIUM 6.1
CVE-2016-1150

Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns…

Mitigation only
Fix from $1,600 2016-02-17
Office MEDIUM 6.1
CVE-2016-1149

Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns…

Mitigation only
Fix from $1,600 2016-02-17
Office MEDIUM 6.5
CVE-2015-8489

customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a cra…

Mitigation only
Fix from $1,600 2016-02-17
Office MEDIUM 5.4
CVE-2015-8486

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report titles via unsp…

Mitigation only
Fix from $1,600 2016-02-17
Office MEDIUM 5.4
CVE-2015-8485

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via uns…

Mitigation only
Fix from $1,600 2016-02-17
Office MEDIUM 5.4
CVE-2015-8484

Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended calendar-viewing restrictions via unspecified vectors, a diff…

Mitigation only
Fix from $1,600 2016-02-17
Office HIGH 7.4
CVE-2015-8483

Open redirect vulnerability in Cybozu Office 10.2.0 through 10.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phish…

Mitigation only
Fix from $1,950 2016-02-17
Office MEDIUM 6.1
CVE-2015-7798

Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns…

No fix yet
Fix from $1,600 2016-02-17
Office MEDIUM 6.1
CVE-2015-7797

Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns…

Mitigation only
Fix from $1,600 2016-02-17
Office MEDIUM 6.1
CVE-2015-7796

Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns…

Mitigation only
Fix from $1,600 2016-02-17
Office MEDIUM 6.1
CVE-2015-7795

Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns…

Mitigation only
Fix from $1,600 2016-02-17
Garoon HIGH 8.5
CVE-2015-5647

The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via…

Mitigation only
Fix from $1,950 2015-10-12
Garoon HIGH 7.0
CVE-2015-5649

Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP inj…

Mitigation only
Fix from $1,950 2015-10-08
Garoon HIGH 10.0
CVE-2014-1987

The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors.

Mitigation only
Fix from $1,950 2014-07-20
Garoon HIGH 7.5
CVE-2014-1996

Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial o…

Mitigation only
Fix from $1,950 2014-07-20
Garoon MEDIUM 6.0
CVE-2014-1989

Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspec…

Mitigation only
Fix from $1,600 2014-05-02
Garoon MEDIUM 6.5
CVE-2014-0821

SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to e…

Mitigation only
Fix from $1,600 2014-02-27
Garoon MEDIUM 6.5
CVE-2013-6930

SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0…

Mitigation only
Fix from $1,600 2014-01-29
Garoon MEDIUM 6.5
CVE-2013-6931

SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via un…

Mitigation only
Fix from $1,600 2014-01-29
Garoon MEDIUM 5.8
CVE-2013-6006

Cybozu Garoon 3.5 through 3.7 SP2 allows remote attackers to bypass Keitai authentication via a modified user ID in a request.

Mitigation only
Fix from $1,600 2013-12-28