Browse CVEs

HIGH 7.5 CVE-2018-0703 Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests. Office after 10.8.1 Fix from $1,9502019-01-09 HIGH 7.5 CVE-2018-0704 Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen. Office after 10.8.1 Fix from $1,9502019-01-09 HIGH 8.1 CVE-2018-0673 Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors. Garoon after 4.6.3 Fix from $1,9502018-11-15 HIGH 8.8 CVE-2018-0607 SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arb… Garoon after 4.6.2 Fix from $1,9502018-07-26 MEDIUM 6.3 CVE-2018-0567 Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vector… Office after 10.8.0 Fix from $1,6002018-06-26 MEDIUM 6.1 CVE-2018-0527 Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified v… Office after 10.7.0 Fix from $1,6002018-06-26 MEDIUM 6.1 CVE-2018-0557 Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail De… Mailwise after 5.4.1 Fix from $1,6002018-06-26 MEDIUM 6.1 CVE-2018-0558 Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'Sys… Mailwise after 5.4.1 Fix from $1,6002018-06-26 MEDIUM 6.1 CVE-2018-0559 Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via uns… Mailwise after 5.4.1 Fix from $1,6002018-06-26 MEDIUM 6.1 CVE-2018-0565 Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified v… Office after 10.8.0 Fix from $1,6002018-06-26 HIGH 8.8 CVE-2018-0530 SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecifi… Garoon after 4.2.6 Fix from $1,9502018-04-16 MEDIUM 5.4 CVE-2018-0549 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via u… Garoon after 4.6.0 Fix from $1,6002018-04-16 MEDIUM 5.4 CVE-2018-0551 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via u… Garoon after 4.6.1 Fix from $1,6002018-04-16 MEDIUM 6.1 CVE-2017-2257 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function. Garoon Mitigation only Fix from $1,6002017-08-29 MEDIUM 5.4 CVE-2017-2255 Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function… Garoon Mitigation only Fix from $1,6002017-08-29 MEDIUM 5.4 CVE-2017-2256 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function… Garoon Mitigation only Fix from $1,6002017-08-29 MEDIUM 6.1 CVE-2017-2172 Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unsp… Kunai Mitigation only Fix from $1,6002017-07-07 MEDIUM 5.4 CVE-2017-2144 Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page. Garoon Mitigation only Fix from $1,6002017-07-07 MEDIUM 5.4 CVE-2017-2145 Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors. Garoon Mitigation only Fix from $1,6002017-07-07 HIGH 7.5 CVE-2016-7833 Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file v… Dezie Mitigation only Fix from $1,9502017-06-09 MEDIUM 5.3 CVE-2016-7832 Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file v… Dezie Mitigation only Fix from $1,6002017-06-09 HIGH 8.8 CVE-2016-4907 Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors. Garoon Mitigation only Fix from $1,9502017-06-09 HIGH 8.8 CVE-2016-7803 SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiRep… Garoon Mitigation only Fix from $1,9502017-06-09 MEDIUM 6.5 CVE-2016-7802 Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vecto… Garoon Mitigation only Fix from $1,6002017-06-09 MEDIUM 6.1 CVE-2016-4906 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" func… Garoon Mitigation only Fix from $1,6002017-06-09 MEDIUM 5.9 CVE-2016-7816 The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers… Kintone after 1.0.6 Fix from $1,6002017-06-09 MEDIUM 5.4 CVE-2017-2114 Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via… Office Mitigation only Fix from $1,6002017-04-28 MEDIUM 5.4 CVE-2017-2092 Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via u… Garoon Mitigation only Fix from $1,6002017-04-28 MEDIUM 6.8 CVE-2016-1187 Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates. Kunai Mitigation only Fix from $1,6002017-04-21 MEDIUM 5.9 CVE-2016-1186 Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates. Kintone Mitigation only Fix from $1,6002017-04-21