cybozu Vulnerability Advisory Catalog

Total 330 security vulnerabilities recorded for cybozu software and firmware.

← Back to All Vendors
Component: office

Improper access control vulnerability in Bulletin Board of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restrictio...

📅 2021-03-18
CVSS 4.3 Dossier →
Component: office

Improper access control vulnerability in Scheduler of Cybozu Office 10.0.0 to 10.8.4 allows an authenticated attacker to bypass access restriction and...

📅 2021-03-18
CVSS 6.5 Dossier →
CVE-2020-5643 MEDIUM
Component: garoon

Improper input validation vulnerability in Cybozu Garoon 5.0.0 to 5.0.2 allows a remote authenticated attacker to delete some data of the bulletin boa...

📅 2020-11-06
CVSS 6.5 Dossier →
CVE-2020-5588 MEDIUM
Component: garoon

Path traversal vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to obtain unintended information via unspecifie...

📅 2020-06-30
CVSS 4.9 Dossier →
CVE-2020-5587 MEDIUM
Component: garoon

Cybozu Garoon 4.0.0 to 5.0.1 allow remote authenticated attackers to obtain unintended information via unspecified vectors....

📅 2020-06-30
CVSS 6.5 Dossier →
CVE-2020-5586 MEDIUM
Component: garoon

Cross-site scripting vulnerability in Cybozu Garoon 4.10.3 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspec...

📅 2020-06-30
CVSS 4.8 Dossier →
CVE-2020-5585 MEDIUM
Component: garoon

Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.0.1 allows attacker with administrator rights to inject an arbitrary script via unspeci...

📅 2020-06-30
CVSS 4.8 Dossier →
Component: garoon

Cybozu Garoon 4.0.0 to 5.0.1 allow remote attackers to obtain unintended information via unspecified vectors....

📅 2020-06-30
CVSS 7.5 Dossier →
CVE-2020-5583 MEDIUM
Component: garoon

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspeci...

📅 2020-06-30
CVSS 6.5 Dossier →
CVE-2020-5582 MEDIUM
Component: garoon

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via ...

📅 2020-06-30
CVSS 4.3 Dossier →
CVE-2020-5581 MEDIUM
Component: garoon

Path traversal vulnerability in Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to obtain unintended information via unspecified ve...

📅 2020-06-30
CVSS 6.5 Dossier →
Component: garoon

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to view and/or alter Single sign-on settings via unspe...

📅 2020-06-30
CVSS 8.1 Dossier →
CVE-2020-5573 MEDIUM
Component: kintone

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified ve...

📅 2020-05-29
CVSS 4.6 Dossier →
CVE-2020-5572 MEDIUM
Component: mailwise

Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vector...

📅 2020-05-29
CVSS 4.6 Dossier →
CVE-2020-5537 CRITICAL
Component: desktop

Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors....

📅 2020-05-25
CVSS 9.8 Dossier →
CVE-2020-5568 MEDIUM
Component: garoon

Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications...

📅 2020-04-28
CVSS 6.1 Dossier →
Component: garoon

Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu....

📅 2020-04-28
CVSS 7.5 Dossier →
CVE-2020-5566 MEDIUM
Component: garoon

Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the ap...

📅 2020-04-28
CVSS 4.3 Dossier →
CVE-2020-5565 MEDIUM
Component: garoon

Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via th...

📅 2020-04-28
CVSS 4.3 Dossier →
CVE-2020-5564 MEDIUM
Component: garoon

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application...

📅 2020-04-28
CVSS 6.1 Dossier →
CVE-2020-5563 MEDIUM
Component: garoon

Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via the API....

📅 2020-04-28
CVSS 5.3 Dossier →
CVE-2020-5562 MEDIUM
Component: garoon

Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue ar...

📅 2020-04-28
CVSS 4.9 Dossier →
CVE-2019-6023 MEDIUM
Component: office

Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without access pr...

📅 2019-12-26
CVSS 4.3 Dossier →
CVE-2019-6022 MEDIUM
Component: office

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp'...

📅 2019-12-26
CVSS 6.5 Dossier →
Page 5 of 14 (330 Total Records)