Browse CVEs

MEDIUM 6.5 CVE-2016-4869 Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed. Office Mitigation only Fix from $1,6002017-04-17 MEDIUM 6.5 CVE-2016-4871 Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service. Office No fix yet Fix from $1,6002017-04-17 MEDIUM 5.4 CVE-2016-4870 Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via … Office Mitigation only Fix from $1,6002017-04-17 HIGH 7.5 CVE-2016-1193 Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors. Garoon No fix yet Fix from $1,9502016-06-25 MEDIUM 6.5 CVE-2016-1190 Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors. Garoon Mitigation only Fix from $1,6002016-06-25 HIGH 8.1 CVE-2016-1189 Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet… Garoon Mitigation only Fix from $1,9502016-06-25 MEDIUM 6.5 CVE-2016-1188 Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors. Garoon Mitigation only Fix from $1,6002016-06-25 MEDIUM 6.5 CVE-2016-1153 customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service via unspecified vectors, a different v… Office No fix yet Fix from $1,6002016-02-17 MEDIUM 5.4 CVE-2016-1152 Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions, and read or write to plan data, via unsp… Office Mitigation only Fix from $1,6002016-02-17 HIGH 8.8 CVE-2016-1151 Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authentication … Office Mitigation only Fix from $1,9502016-02-17 MEDIUM 6.1 CVE-2016-1150 Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns… Office Mitigation only Fix from $1,6002016-02-17 MEDIUM 6.1 CVE-2016-1149 Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns… Office Mitigation only Fix from $1,6002016-02-17 MEDIUM 6.5 CVE-2015-8489 customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessive database locking) via a cra… Office Mitigation only Fix from $1,6002016-02-17 MEDIUM 5.4 CVE-2015-8486 Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary report titles via unsp… Office Mitigation only Fix from $1,6002016-02-17 MEDIUM 5.4 CVE-2015-8485 Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access restrictions and read arbitrary posting titles via uns… Office Mitigation only Fix from $1,6002016-02-17 MEDIUM 5.4 CVE-2015-8484 Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended calendar-viewing restrictions via unspecified vectors, a diff… Office Mitigation only Fix from $1,6002016-02-17 HIGH 7.4 CVE-2015-8483 Open redirect vulnerability in Cybozu Office 10.2.0 through 10.3.0 allows remote attackers to redirect users to arbitrary web sites and conduct phish… Office Mitigation only Fix from $1,9502016-02-17 MEDIUM 6.1 CVE-2015-7798 Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns… Office No fix yet Fix from $1,6002016-02-17 MEDIUM 6.1 CVE-2015-7797 Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns… Office Mitigation only Fix from $1,6002016-02-17 MEDIUM 6.1 CVE-2015-7796 Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns… Office Mitigation only Fix from $1,6002016-02-17 MEDIUM 6.1 CVE-2015-7795 Cross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote attackers to inject arbitrary web script or HTML via uns… Office Mitigation only Fix from $1,6002016-02-17 HIGH 8.5 CVE-2015-5647 The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via… Garoon Mitigation only Fix from $1,9502015-10-12 HIGH 7.0 CVE-2015-5649 Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP inj… Garoon Mitigation only Fix from $1,9502015-10-08 HIGH 10.0 CVE-2014-1987 The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors. Garoon Mitigation only Fix from $1,9502014-07-20 HIGH 7.5 CVE-2014-1996 Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial o… Garoon Mitigation only Fix from $1,9502014-07-20 MEDIUM 6.0 CVE-2014-1989 Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspec… Garoon Mitigation only Fix from $1,6002014-05-02 MEDIUM 6.5 CVE-2014-0821 SQL injection vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to e… Garoon Mitigation only Fix from $1,6002014-02-27 MEDIUM 6.5 CVE-2013-6930 SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0… Garoon Mitigation only Fix from $1,6002014-01-29 MEDIUM 6.5 CVE-2013-6931 SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via un… Garoon Mitigation only Fix from $1,6002014-01-29 MEDIUM 5.8 CVE-2013-6006 Cybozu Garoon 3.5 through 3.7 SP2 allows remote attackers to bypass Keitai authentication via a modified user ID in a request. Garoon Mitigation only Fix from $1,6002013-12-28