cybozu Vulnerability Advisory Catalog

Total 330 security vulnerabilities recorded for cybozu software and firmware.

← Back to All Vendors
CVE-2016-4908 MEDIUM
Component: garoon

Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings...

📅 2017-06-09
CVSS 4.3 Dossier →
Component: garoon

Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors....

📅 2017-06-09
CVSS 8.8 Dossier →
CVE-2016-4906 MEDIUM
Component: garoon

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" funct...

📅 2017-06-09
CVSS 6.1 Dossier →
CVE-2017-2116 MEDIUM
Component: office

Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vect...

📅 2017-04-28
CVSS 4.3 Dossier →
CVE-2017-2115 MEDIUM
Component: office

Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp" information via unspecified ve...

📅 2017-04-28
CVSS 4.3 Dossier →
CVE-2017-2114 MEDIUM
Component: office

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via ...

📅 2017-04-28
CVSS 5.4 Dossier →
Component: kunai

Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application....

📅 2017-04-28
CVSS 2.5 Dossier →
CVE-2017-2095 MEDIUM
Component: garoon

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the o...

📅 2017-04-28
CVSS 4.3 Dossier →
CVE-2017-2094 MEDIUM
Component: garoon

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or...

📅 2017-04-28
CVSS 4.3 Dossier →
CVE-2017-2093 MEDIUM
Component: garoon

Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors....

📅 2017-04-28
CVSS 4.3 Dossier →
CVE-2017-2092 MEDIUM
Component: garoon

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via un...

📅 2017-04-28
CVSS 5.4 Dossier →
CVE-2017-2091 MEDIUM
Component: garoon

Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phon...

📅 2017-04-28
CVSS 4.3 Dossier →
CVE-2016-7815 MEDIUM
Component: remote_service_manager

Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network....

📅 2017-04-28
CVSS 4.2 Dossier →
CVE-2016-1187 MEDIUM
Component: kunai

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates....

📅 2017-04-21
CVSS 6.8 Dossier →
CVE-2016-1186 MEDIUM
Component: kintone

Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates....

📅 2017-04-21
CVSS 5.9 Dossier →
CVE-2016-4841 MEDIUM
Component: mailwise

Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers....

📅 2017-04-21
CVSS 4.3 Dossier →
CVE-2016-1194 MEDIUM
Component: garoon

Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service....

📅 2017-04-21
CVSS 6.5 Dossier →
CVE-2016-4844 MEDIUM
Component: mailwise

Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks....

📅 2017-04-20
CVSS 4.3 Dossier →
CVE-2016-4843 MEDIUM
Component: mailwise

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information....

📅 2017-04-20
CVSS 6.5 Dossier →
CVE-2016-4842 MEDIUM
Component: mailwise

Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read....

📅 2017-04-20
CVSS 4.3 Dossier →
CVE-2016-1220 MEDIUM
Component: garoon

Cybozu Garoon before 4.2.2 does not properly restrict access....

📅 2017-04-20
CVSS 4.3 Dossier →
Component: garoon

SQL injection vulnerability in Cybozu Garoon before 4.2.2....

📅 2017-04-20
CVSS 8.8 Dossier →
CVE-2016-1217 MEDIUM
Component: garoon

Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2....

📅 2017-04-20
CVSS 6.1 Dossier →
CVE-2016-1216 MEDIUM
Component: garoon

Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2....

📅 2017-04-20
CVSS 6.1 Dossier →
Page 9 of 14 (330 Total Records)