Show filters
197 Total Results
Displaying 151-160 of 197
Sort by:
Attacker Value
Unknown
CVE-2015-5649
Disclosure Date: October 08, 2015 (last updated October 05, 2023)
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain group-administration privileges.
0
Attacker Value
Unknown
CVE-2014-1995
Disclosure Date: July 20, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Map search functionality in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-1996
Disclosure Date: July 20, 2014 (last updated October 05, 2023)
Cybozu Garoon 3.7 before SP4 allows remote authenticated users to bypass intended access restrictions, and execute arbitrary code or cause a denial of service, via an API call.
0
Attacker Value
Unknown
CVE-2014-1987
Disclosure Date: July 20, 2014 (last updated October 05, 2023)
The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-1993
Disclosure Date: July 20, 2014 (last updated October 05, 2023)
The Portlets subsystem in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to bypass intended access restrictions via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-1992
Disclosure Date: July 20, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Messages functionality in Cybozu Garoon 3.1.x, 3.5.x, and 3.7.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-1994
Disclosure Date: July 20, 2014 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in the Notices portlet in Cybozu Garoon 2.x and 3.x before 3.7 SP4 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-1989
Disclosure Date: May 02, 2014 (last updated October 05, 2023)
Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls.
0
Attacker Value
Unknown
CVE-2014-1988
Disclosure Date: May 02, 2014 (last updated October 05, 2023)
The Phone Messages feature in Cybozu Garoon 2.0.0 through 3.7 SP2 allows remote authenticated users to cause a denial of service (resource consumption) via unspecified vectors.
0
Attacker Value
Unknown
CVE-2014-0820
Disclosure Date: February 27, 2014 (last updated October 05, 2023)
Directory traversal vulnerability in the download feature in Cybozu Garoon 2.x through 2.5.4 and 3.x through 3.7 SP3 allows remote authenticated users to read arbitrary files via unspecified vectors.
0
