Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Vendors
Cybozu

Cybozu vulnerabilities

Products

Garoon198
Office71
Remote Service Manager22
Mailwise14
Office7
Dezie6
Kunai6
Live4
Kintone4
Collaborex2
Dezie2
Remote Service2

Newest

Known exploitedIn KEVPublic exploitFix available

cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction...CVE-2017-20944.3 MediumApril 28, 2017
cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via...CVE-2017-20934.3 MediumApril 28, 2017
cybozu garoon, cybozu, inc. cybozu garoon +1 moreCross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated...CVE-2017-20925.4 MediumApril 28, 2017
cybozu garoon, cybozu, inc. cybozu garoon +1 moreCybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction...CVE-2017-20914.3 MediumApril 28, 2017
cybozu remote service managerRemote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote...CVE-2016-78154.2 MediumApril 28, 2017
cybozu kunaiCybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify...CVE-2016-11876.8 MediumApril 21, 2017
cybozu kintoneKintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates.CVE-2016-11865.9 MediumApril 21, 2017
cybozu mailwiseCybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers.CVE-2016-48414.3 MediumApril 21, 2017
cybozu garoonCybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service.CVE-2016-11946.5 MediumApril 21, 2017
cybozu mailwiseCybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks.CVE-2016-48444.3 MediumApril 20, 2017
cybozu mailwiseCybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information.CVE-2016-48436.5 MediumApril 20, 2017
cybozu mailwiseCybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read.CVE-2016-48424.3 MediumApril 20, 2017
cybozu garoonCybozu Garoon before 4.2.2 does not properly restrict access.CVE-2016-12204.3 MediumApril 20, 2017
cybozu garoonSQL injection vulnerability in Cybozu Garoon before 4.2.2.CVE-2016-12188.8 HighApril 20, 2017
cybozu garoonCross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon...CVE-2016-12176.1 MediumApril 20, 2017
cybozu garoonCross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon...CVE-2016-12166.1 MediumApril 20, 2017
cybozu garoonCross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4...CVE-2016-12156.1 MediumApril 20, 2017
cybozu garoonCross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon...CVE-2016-12146.1 MediumApril 20, 2017
cybozu garoonThe "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users...CVE-2016-12136.1 MediumApril 20, 2017
cybozu garoonCybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors...CVE-2016-12199.8 CriticalApril 20, 2017
cybozu officeCybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download"...CVE-2016-48743.5 LowApril 17, 2017
cybozu officeCybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to execute unintended...CVE-2016-48734.3 MediumApril 17, 2017
cybozu officeCybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions...CVE-2016-48724.3 MediumApril 17, 2017
cybozu officeCybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service.CVE-2016-48716.5 MediumApril 17, 2017
cybozu officeCross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated...CVE-2016-48705.4 MediumApril 17, 2017
cybozu officeCybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page...CVE-2016-48696.5 MediumApril 17, 2017
cybozu officeEmail header injection vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote attackers to...CVE-2016-48684.3 MediumApril 17, 2017
cybozu officeCybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restriction...CVE-2016-48674.3 MediumApril 17, 2017
cybozu officeCross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with...CVE-2016-48664.8 MediumApril 17, 2017
cybozu officeCross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with...CVE-2016-48654.8 MediumApril 17, 2017
cybozu garoonCybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading...CVE-2016-11937.5 HighJune 25, 2016
cybozu garoonCybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions...CVE-2016-11906.5 MediumJune 25, 2016
cybozu garoonCybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended...CVE-2016-11898.1 HighJune 25, 2016
cybozu garoonCybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail...CVE-2016-11886.5 MediumJune 25, 2016
cybozu garoonCybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended...CVE-2016-11964.3 MediumJune 19, 2016
cybozu garoonDirectory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2...CVE-2016-11924.3 MediumJune 19, 2016
cybozu garoonDirectory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1...CVE-2016-11915.3 MediumJune 19, 2016
cybozu garoonCybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which...CVE-2015-77764.3 MediumJune 19, 2016
cybozu garoonCross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote...CVE-2016-11976.1 MediumJune 19, 2016
cybozu garoonOpen redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to...CVE-2016-11957.4 HighJune 19, 2016
cybozu garoonCross-site scripting (XSS) vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users...CVE-2015-77755.4 MediumJune 19, 2016
cybozu kintoneThe Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover...CVE-2016-11852.5 LowApril 25, 2016
cybozu officecustomapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a...CVE-2016-11536.5 MediumFebruary 17, 2016
cybozu officeCybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to bypass intended access...CVE-2016-11525.4 MediumFebruary 17, 2016
cybozu officeMultiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0...CVE-2016-11518.8 HighFebruary 17, 2016
cybozu officeCross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote...CVE-2016-11506.1 MediumFebruary 17, 2016
cybozu officeCross-site scripting (XSS) vulnerability in Cybozu Office 9.0.0 through 10.3.0 allows remote...CVE-2016-11496.1 MediumFebruary 17, 2016
cybozu officecustomapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a...CVE-2015-84896.5 MediumFebruary 17, 2016
cybozu officeCybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a...CVE-2015-84884.3 MediumFebruary 17, 2016
cybozu officeCybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified...CVE-2015-84874.3 MediumFebruary 17, 2016
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open