Show filters
11 Total Results
Displaying 1-10 of 11
Sort by:
Attacker Value
Unknown
CVE-2017-2256
Disclosure Date: August 29, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo".
0
Attacker Value
Unknown
CVE-2017-2257
Disclosure Date: August 29, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function.
0
Attacker Value
Unknown
CVE-2017-2254
Disclosure Date: August 29, 2017 (last updated November 26, 2024)
Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input
0
Attacker Value
Unknown
CVE-2017-2255
Disclosure Date: August 29, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space".
0
Attacker Value
Unknown
CVE-2017-2145
Disclosure Date: July 07, 2017 (last updated November 26, 2024)
Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-2146
Disclosure Date: July 07, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu.
0
Attacker Value
Unknown
CVE-2017-2094
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-2093
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-2095
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-2092
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
0
