cybozu Vulnerability Advisory Catalog

Total 330 security vulnerabilities recorded for cybozu software and firmware.

← Back to All Vendors
CVE-2012-4012 UNKNOWN
Component: kunai

The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary JavaScript code, and obtain se...

📅 2012-09-08
CVSS 4.3 Dossier →
CVE-2012-4011 UNKNOWN
Component: kunai

The Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or e...

📅 2012-09-08
CVSS 9.3 Dossier →
CVE-2012-4009 UNKNOWN
Component: cybozu_live

The WebView class in the Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary JavaScript code, and obtai...

📅 2012-08-31
CVSS 6.8 Dossier →
CVE-2012-4008 UNKNOWN
Component: cybozu_live

The Cybozu Live application 1.0.4 and earlier for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information ...

📅 2012-08-31
CVSS 6.8 Dossier →
CVE-2011-2677 UNKNOWN
Component: office

Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time card and at...

📅 2011-10-21
CVSS 5.5 Dossier →
CVE-2011-1335 UNKNOWN
Component: office

Cross-site scripting (XSS) vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via ...

📅 2011-06-29
CVSS 4.3 Dossier →
CVE-2011-1334 UNKNOWN
Component: office

Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, a...

📅 2011-06-29
CVSS 4.3 Dossier →
CVE-2011-1333 UNKNOWN
Component: garoon

Cross-site scripting (XSS) vulnerability in Cybozu Office 6 and Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web scri...

📅 2011-06-29
CVSS 4.3 Dossier →
CVE-2011-1332 UNKNOWN
Component: garoon

Cross-site scripting (XSS) vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via unspe...

📅 2011-06-29
CVSS 4.3 Dossier →
CVE-2010-2029 UNKNOWN
Component: cybozu_office

Cybozu Office 7 Ktai and Dotsales do not properly restrict access to the login page, which allows remote attackers to bypass authentication and obtain...

📅 2010-05-24
CVSS 5.8 Dossier →
CVE-2008-6744 UNKNOWN
Component: cybozu_dezie

Cross-site request forgery (CSRF) vulnerability in Cybozu Office 6, Cybozu Dezie before 6.0(1.0), and Cybozu Garoon 2.0.0 through 2.1.3 allows remote ...

📅 2009-04-23
CVSS 6.8 Dossier →
CVE-2008-6570 UNKNOWN
Component: garoon

Cross-site scripting (XSS) vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script...

📅 2009-03-31
CVSS 4.3 Dossier →
CVE-2008-6569 UNKNOWN
Component: garoon

Session fixation vulnerability in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to hijack web sessions via the session ID in the login pag...

📅 2009-03-31
CVSS 6.8 Dossier →
CVE-2006-4492 UNKNOWN
Component: cybozu_office

Unspecified vulnerability in Cybozu Office 6.5 Build 1.2 for Windows allows remote attackers to obtain sensitive information, including users and grou...

📅 2006-08-31
CVSS 5.0 Dossier →
CVE-2006-4491 UNKNOWN
Component: collaborex

Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1...

📅 2006-08-31
CVSS 4.0 Dossier →
CVE-2006-4490 UNKNOWN
Component: cybozu_office

Multiple directory traversal vulnerabilities in Cybozu Office before 6.6 Build 1.3 and Share 360 before 2.5 Build 0.3 allow remote authenticated users...

📅 2006-08-31
CVSS 4.0 Dossier →
CVE-2006-4444 UNKNOWN
Component: garoon

Multiple SQL injection vulnerabilities in Cybozu Garoon 2.1.0 for Windows allow remote authenticated users to execute arbitrary SQL commands via the (...

📅 2006-08-29
CVSS 6.5 Dossier →
CVE-2002-1960 UNKNOWN
Component: share360

Cross-site scripting (XSS) vulnerability in Cybozu Share360 1.1 allows remote attackers to inject arbitrary web script or HTML via an HTML link....

📅 2002-12-31
CVSS 4.3 Dossier →
Page 14 of 14 (330 Total Records)