Lucene search

K

Cybozu Remote Service Security Vulnerabilities

cve
cve

CVE-2024-23304

Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performing certain...

7.5CVSS

7.4AI Score

0.001EPSS

2024-02-06 05:15 AM
11
cve
cve

CVE-2023-46278

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.1.0 to 4.1.1 allows a remote authenticated attacker to consume huge storage space or cause significantly delayed...

6.5CVSS

6.2AI Score

0.001EPSS

2023-11-01 12:15 AM
8
cve
cve

CVE-2022-26838

Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service (DoS)...

6.5CVSS

6.2AI Score

0.001EPSS

2023-08-03 03:15 PM
11
cve
cve

CVE-2023-26595

Denial-of-service (DoS) vulnerability in Message of Cybozu Garoon 4.10.0 to 5.9.2 allows a remote authenticated attacker to cause a denial of service...

6.5CVSS

6.1AI Score

0.001EPSS

2023-05-23 02:15 AM
21
cve
cve

CVE-2022-44608

Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service (DoS)...

7.5CVSS

7.2AI Score

0.002EPSS

2022-12-07 04:15 AM
31
cve
cve

CVE-2022-29892

Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to repeatedly display errors in certain functions and cause a denial-of-service...

6.5CVSS

6.4AI Score

0.001EPSS

2022-07-04 07:15 AM
39
8
cve
cve

CVE-2021-20805

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified...

5.4CVSS

5.4AI Score

0.001EPSS

2021-10-13 09:15 AM
26
cve
cve

CVE-2021-20804

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service (DoS) condition via unspecified...

6.5CVSS

6.3AI Score

0.001EPSS

2021-10-13 09:15 AM
18
cve
cve

CVE-2021-20806

Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...

6.1CVSS

6.5AI Score

0.001EPSS

2021-10-13 09:15 AM
20
cve
cve

CVE-2021-20802

HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the...

5.3CVSS

5.7AI Score

0.002EPSS

2021-10-13 09:15 AM
22
cve
cve

CVE-2021-20803

Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management...

5.4CVSS

5.6AI Score

0.001EPSS

2021-10-13 09:15 AM
22
cve
cve

CVE-2021-20807

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified...

6.1CVSS

6.3AI Score

0.001EPSS

2021-10-13 09:15 AM
25
cve
cve

CVE-2021-20798

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified...

5.4CVSS

5.4AI Score

0.001EPSS

2021-10-13 09:15 AM
22
cve
cve

CVE-2021-20797

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla...

5.4CVSS

5.8AI Score

0.001EPSS

2021-10-13 09:15 AM
26
cve
cve

CVE-2021-20800

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified...

5.4CVSS

5.4AI Score

0.001EPSS

2021-10-13 09:15 AM
19
cve
cve

CVE-2021-20795

Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified...

8.8CVSS

8.9AI Score

0.001EPSS

2021-10-13 09:15 AM
21
cve
cve

CVE-2021-20796

Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified...

6.5CVSS

6.5AI Score

0.001EPSS

2021-10-13 09:15 AM
26
cve
cve

CVE-2021-20799

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified...

5.4CVSS

5.4AI Score

0.001EPSS

2021-10-13 09:15 AM
19
cve
cve

CVE-2021-20801

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the information stored in the product via unspecified vectors. This issue occurs only when using Mozilla...

6.5CVSS

6.3AI Score

0.001EPSS

2021-10-13 09:15 AM
18
cve
cve

CVE-2018-16169

Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified...

8.8CVSS

8.5AI Score

0.003EPSS

2019-01-09 11:29 PM
26
cve
cve

CVE-2018-16170

Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files via unspecified...

8.1CVSS

7.6AI Score

0.003EPSS

2019-01-09 11:29 PM
22
cve
cve

CVE-2018-16172

Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered client...

6.5CVSS

7AI Score

0.002EPSS

2019-01-09 11:29 PM
18
cve
cve

CVE-2018-16171

Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecified...

8.8CVSS

8.8AI Score

0.004EPSS

2019-01-09 11:29 PM
25
cve
cve

CVE-2018-0529

Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified...

4.3CVSS

5.2AI Score

0.001EPSS

2018-06-26 02:29 PM
21