Show filters
34 Total Results
Displaying 11-20 of 34
Sort by:
Attacker Value
Unknown
CVE-2016-4872
Disclosure Date: April 17, 2017 (last updated November 26, 2024)
Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of unauthorized projects via a breadcrumb trail.
0
Attacker Value
Unknown
CVE-2016-4867
Disclosure Date: April 17, 2017 (last updated November 26, 2024)
Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction to view unauthorized project information via the Project function.
0
Attacker Value
Unknown
CVE-2016-4869
Disclosure Date: April 17, 2017 (last updated November 26, 2024)
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed.
0
Attacker Value
Unknown
CVE-2016-4865
Disclosure Date: April 17, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Customapp function.
0
Attacker Value
Unknown
CVE-2016-4871
Disclosure Date: April 17, 2017 (last updated November 26, 2024)
Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.
0
Attacker Value
Unknown
CVE-2016-4866
Disclosure Date: April 17, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Project function.
0
Attacker Value
Unknown
CVE-2016-4874
Disclosure Date: April 17, 2017 (last updated November 26, 2024)
Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack.
0
Attacker Value
Unknown
CVE-2016-4873
Disclosure Date: April 17, 2017 (last updated November 26, 2024)
Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to execute unintended operations via the Project function.
0
Attacker Value
Unknown
CVE-2016-4870
Disclosure Date: April 17, 2017 (last updated November 26, 2024)
Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the Schedule function.
0
Attacker Value
Unknown
CVE-2016-4868
Disclosure Date: April 17, 2017 (last updated November 26, 2024)
Email header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to inject arbitrary email headers to send unintended emails via specially crafted requests.
0
