Vulnerability index

Browse CVEs

63 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Kunai HIGH 7.5
CVE-2024-23304

Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performing certain…

Mitigation only
Fix from $1,950 2024-02-06
Remote Service Manager MEDIUM 6.5
CVE-2022-26838

Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-…

Mitigation only
Fix from $1,600 2023-08-03
Remote Service Manager MEDIUM 6.5
CVE-2021-20804

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service (DoS) condition via unspecified vectors.

Mitigation only
Fix from $1,600 2021-10-13
Remote Service Manager MEDIUM 5.4
CVE-2021-20803

Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the dat…

Mitigation only
Fix from $1,600 2021-10-13
Remote Service Manager MEDIUM 5.3
CVE-2021-20802

HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product.

Mitigation only
Fix from $1,600 2021-10-13
Remote Service Manager HIGH 8.8
CVE-2021-20795

Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack t…

Mitigation only
Fix from $1,950 2021-10-13
Remote Service Manager MEDIUM 6.5
CVE-2021-20796

Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitra…

Mitigation only
Fix from $1,600 2021-10-13
Remote Service Manager MEDIUM 6.5
CVE-2021-20801

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the information s…

Mitigation only
Fix from $1,600 2021-10-13
Remote Service Manager MEDIUM 5.4
CVE-2021-20797

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain th…

Mitigation only
Fix from $1,600 2021-10-13
Remote Service Manager MEDIUM 5.4
CVE-2021-20798

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject …

Mitigation only
Fix from $1,600 2021-10-13
Remote Service Manager MEDIUM 5.4
CVE-2021-20799

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject …

Mitigation only
Fix from $1,600 2021-10-13
Remote Service Manager MEDIUM 5.4
CVE-2021-20800

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitr…

Mitigation only
Fix from $1,600 2021-10-13
Garoon MEDIUM 6.1
CVE-2017-2257

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function.

Mitigation only
Fix from $1,600 2017-08-29
Garoon MEDIUM 5.4
CVE-2017-2255

Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function…

Mitigation only
Fix from $1,600 2017-08-29
Garoon MEDIUM 5.4
CVE-2017-2256

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function…

Mitigation only
Fix from $1,600 2017-08-29
Kunai MEDIUM 6.1
CVE-2017-2172

Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unsp…

Mitigation only
Fix from $1,600 2017-07-07
Garoon MEDIUM 5.4
CVE-2017-2144

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page.

Mitigation only
Fix from $1,600 2017-07-07
Garoon MEDIUM 5.4
CVE-2017-2145

Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors.

Mitigation only
Fix from $1,600 2017-07-07
Dezie HIGH 7.5
CVE-2016-7833

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file v…

Mitigation only
Fix from $1,950 2017-06-09
Dezie MEDIUM 5.3
CVE-2016-7832

Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file v…

Mitigation only
Fix from $1,600 2017-06-09
Garoon HIGH 8.8
CVE-2016-4907

Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors.

Mitigation only
Fix from $1,950 2017-06-09
Garoon HIGH 8.8
CVE-2016-7803

SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiRep…

Mitigation only
Fix from $1,950 2017-06-09
Garoon MEDIUM 6.5
CVE-2016-7802

Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vecto…

Mitigation only
Fix from $1,600 2017-06-09
Garoon MEDIUM 6.1
CVE-2016-4906

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" func…

Mitigation only
Fix from $1,600 2017-06-09
Office MEDIUM 5.4
CVE-2017-2114

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via…

Mitigation only
Fix from $1,600 2017-04-28
Garoon MEDIUM 5.4
CVE-2017-2092

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via u…

Mitigation only
Fix from $1,600 2017-04-28
Kunai MEDIUM 6.8
CVE-2016-1187

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates.

Mitigation only
Fix from $1,600 2017-04-21
Kintone MEDIUM 5.9
CVE-2016-1186

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.

Mitigation only
Fix from $1,600 2017-04-21
Garoon MEDIUM 6.5
CVE-2016-1194

Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service.

No fix yet
Fix from $1,600 2017-04-21
Mailwise MEDIUM 6.5
CVE-2016-4843

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.

Mitigation only
Fix from $1,600 2017-04-20