Vulnerability index

Browse CVEs

187 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Office HIGH 7.5
CVE-2018-0703

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests.

Fix: after 10.8.1
Fix from $1,950 2019-01-09
Office HIGH 7.5
CVE-2018-0704

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen.

Fix: after 10.8.1
Fix from $1,950 2019-01-09
Garoon HIGH 8.1
CVE-2018-0673

Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors.

Fix: after 4.6.3
Fix from $1,950 2018-11-15
Garoon HIGH 8.8
CVE-2018-0607

SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arb…

Fix: after 4.6.2
Fix from $1,950 2018-07-26
Office MEDIUM 6.3
CVE-2018-0567

Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vector…

Fix: after 10.8.0
Fix from $1,600 2018-06-26
Office MEDIUM 6.1
CVE-2018-0527

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified v…

Fix: after 10.7.0
Fix from $1,600 2018-06-26
Mailwise MEDIUM 6.1
CVE-2018-0557

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail De…

Fix: after 5.4.1
Fix from $1,600 2018-06-26
Mailwise MEDIUM 6.1
CVE-2018-0558

Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'Sys…

Fix: after 5.4.1
Fix from $1,600 2018-06-26
Mailwise MEDIUM 6.1
CVE-2018-0559

Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via uns…

Fix: after 5.4.1
Fix from $1,600 2018-06-26
Office MEDIUM 6.1
CVE-2018-0565

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified v…

Fix: after 10.8.0
Fix from $1,600 2018-06-26
Garoon HIGH 8.8
CVE-2018-0530

SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecifi…

Fix: after 4.2.6
Fix from $1,950 2018-04-16
Garoon MEDIUM 5.4
CVE-2018-0549

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via u…

Fix: after 4.6.0
Fix from $1,600 2018-04-16
Garoon MEDIUM 5.4
CVE-2018-0551

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via u…

Fix: after 4.6.1
Fix from $1,600 2018-04-16
Garoon MEDIUM 6.1
CVE-2017-2257

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function.

Mitigation only
Fix from $1,600 2017-08-29
Garoon MEDIUM 5.4
CVE-2017-2255

Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function…

Mitigation only
Fix from $1,600 2017-08-29
Garoon MEDIUM 5.4
CVE-2017-2256

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function…

Mitigation only
Fix from $1,600 2017-08-29
Kunai MEDIUM 6.1
CVE-2017-2172

Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unsp…

Mitigation only
Fix from $1,600 2017-07-07
Garoon MEDIUM 5.4
CVE-2017-2144

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page.

Mitigation only
Fix from $1,600 2017-07-07
Garoon MEDIUM 5.4
CVE-2017-2145

Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors.

Mitigation only
Fix from $1,600 2017-07-07
Dezie HIGH 7.5
CVE-2016-7833

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file v…

Mitigation only
Fix from $1,950 2017-06-09
Dezie MEDIUM 5.3
CVE-2016-7832

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file v…

Mitigation only
Fix from $1,600 2017-06-09
Garoon HIGH 8.8
CVE-2016-4907

Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors.

Mitigation only
Fix from $1,950 2017-06-09
Garoon HIGH 8.8
CVE-2016-7803

SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiRep…

Mitigation only
Fix from $1,950 2017-06-09
Garoon MEDIUM 6.5
CVE-2016-7802

Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vecto…

Mitigation only
Fix from $1,600 2017-06-09
Garoon MEDIUM 6.1
CVE-2016-4906

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" func…

Mitigation only
Fix from $1,600 2017-06-09
Kintone MEDIUM 5.9
CVE-2016-7816

The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers…

Fix: after 1.0.6
Fix from $1,600 2017-06-09
Office MEDIUM 5.4
CVE-2017-2114

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via…

Mitigation only
Fix from $1,600 2017-04-28
Garoon MEDIUM 5.4
CVE-2017-2092

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via u…

Mitigation only
Fix from $1,600 2017-04-28
Kunai MEDIUM 6.8
CVE-2016-1187

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates.

Mitigation only
Fix from $1,600 2017-04-21
Kintone MEDIUM 5.9
CVE-2016-1186

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.

Mitigation only
Fix from $1,600 2017-04-21