Show filters
20 Total Results
Displaying 11-20 of 20
Sort by:
Attacker Value
Unknown
CVE-2016-4906
Disclosure Date: June 09, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai.
0
Attacker Value
Unknown
CVE-2016-4910
Disclosure Date: June 09, 2017 (last updated November 26, 2024)
Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters via unspecified vectors.
0
Attacker Value
Unknown
CVE-2016-4908
Disclosure Date: June 09, 2017 (last updated November 26, 2024)
Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors.
0
Attacker Value
Unknown
CVE-2016-7802
Disclosure Date: June 09, 2017 (last updated November 26, 2024)
Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
0
Attacker Value
Unknown
CVE-2016-7803
Disclosure Date: June 09, 2017 (last updated November 26, 2024)
SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" function.
0
Attacker Value
Unknown
CVE-2017-2094
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-2093
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-2095
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-2092
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2017-2091
Disclosure Date: April 28, 2017 (last updated November 26, 2024)
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors.
0
