cybozu Vulnerability Advisory Catalog

Total 330 security vulnerabilities recorded for cybozu software and firmware.

← Back to All Vendors
CVE-2019-5928 MEDIUM
Component: garoon

Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.6.3 allows remote attackers to inject arbitrary web script or HTML via Customize Item f...

📅 2019-05-17
CVSS 6.1 Dossier →
Component: garoon

Cybozu Garoon 3.0.0 to 4.10.0 allows remote attackers to bypass access restriction to view information available only for a sign-on user via Single si...

📅 2019-01-09
CVSS 7.5 Dossier →
Component: remote_service_manager

Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, t...

📅 2019-01-09
CVSS 6.5 Dossier →
Component: remote_service_manager

Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecif...

📅 2019-01-09
CVSS 8.8 Dossier →
Component: remote_service_manager

Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files vi...

📅 2019-01-09
CVSS 8.1 Dossier →
Component: remote_service_manager

Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors....

📅 2019-01-09
CVSS 8.8 Dossier →
CVE-2018-0705 CRITICAL
Component: dezie

Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests....

📅 2019-01-09
CVSS 9.1 Dossier →
Component: office

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen....

📅 2019-01-09
CVSS 7.5 Dossier →
Component: office

Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests....

📅 2019-01-09
CVSS 7.5 Dossier →
Component: mailwise

Directory traversal vulnerability in Cybozu Mailwise 5.0.0 to 5.4.5 allows remote attackers to delete arbitrary files via unspecified vectors....

📅 2019-01-09
CVSS 7.5 Dossier →
Component: garoon

Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vectors....

📅 2018-11-15
CVSS 8.1 Dossier →
Component: garoon

SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to execute arbi...

📅 2018-07-26
CVSS 8.8 Dossier →
CVE-2018-0567 MEDIUM
Component: office

Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors...

📅 2018-06-26
CVSS 6.3 Dossier →
CVE-2018-0566 MEDIUM
Component: office

Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass authentication to obtain the schedules without access privilege via unspecifie...

📅 2018-06-26
CVSS 4.3 Dossier →
CVE-2018-0565 MEDIUM
Component: office

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified ve...

📅 2018-06-26
CVSS 6.1 Dossier →
CVE-2018-0559 MEDIUM
Component: mailwise

Cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'Address' via unsp...

📅 2018-06-26
CVSS 6.1 Dossier →
CVE-2018-0558 MEDIUM
Component: mailwise

Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'Syst...

📅 2018-06-26
CVSS 6.1 Dossier →
CVE-2018-0557 MEDIUM
Component: mailwise

Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Det...

📅 2018-06-26
CVSS 6.1 Dossier →
CVE-2018-0529 MEDIUM
Component: office

Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified vectors....

📅 2018-06-26
CVSS 4.3 Dossier →
CVE-2018-0528 MEDIUM
Component: office

Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to access via unsp...

📅 2018-06-26
CVSS 4.3 Dossier →
CVE-2018-0527 MEDIUM
Component: office

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified ve...

📅 2018-06-26
CVSS 6.1 Dossier →
CVE-2018-0526 MEDIUM
Component: office

Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors....

📅 2018-06-26
CVSS 4.3 Dossier →
CVE-2018-0551 MEDIUM
Component: garoon

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via un...

📅 2018-04-16
CVSS 5.4 Dossier →
CVE-2018-0550 MEDIUM
Component: garoon

Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified ...

📅 2018-04-16
CVSS 4.3 Dossier →
Page 7 of 14 (330 Total Records)