1087 matches found
CVE-2022-33311
Cybozu Office contains a browse restriction bypass in the Address Book for versions 10.0.0–10.8.5, allowing a remote authenticated attacker to obtain Address Book data via unspecified vectors. The issue is documented across multiple sources (e.g., NVD/JVN/Red Hat) with consistent impact: data dis...
PT-2022-21763 · Cybozu · Cybozu Office
Name of the Vulnerable Software and Affected Versions: Cybozu Office versions 10.0.0 through 10.8.5 Description: A browse restriction bypass issue in the Address Book of Cybozu Office allows a remote authenticated attacker to obtain Address Book data via unspecified vectors. Recommendations: For...
Fedora: Security Advisory for osmo (FEDORA-2022-e57547c384)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 35 Update: osmo-0.4.4-2.fc35
Osmo is a handy personal organizer which includes calendar, tasks manager and address book modules. It was designed to be a small, easy to use and good looking PIM tool to help to manage personal information. In current state the organizer is quite convenient in use - for example, user can perfor...
[SECURITY] Fedora 36 Update: osmo-0.4.4-2.fc36
Osmo is a handy personal organizer which includes calendar, tasks manager and address book modules. It was designed to be a small, easy to use and good looking PIM tool to help to manage personal information. In current state the organizer is quite convenient in use - for example, user can perfor...
CVE-2021-40180
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...
CVE-2021-40180
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...
CVE-2021-40180
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...
Design/Logic Flaw
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...
CVE-2021-40180
In the WeChat application 8.0.10 for Android and iOS, a mini program can obtain sensitive information from a user's address book via wx.searchContacts...
CVE-2021-40180
According to connected documents, CVE-2021-40180 affects WeChat app version 8.0.10 for Android and iOS, where a mini program can invoke wx.searchContacts to access the user's address book and obtain sensitive information. The root cause is a permissions/API misuse in the mini program environment ...
Tencent WeChat 信息泄露漏洞
Tencent WeChat 微信 is an online social networking application from the Chinese company Tencent. The program supports sending voice messages, videos, images, and text, among others. A security vulnerability exists in Tencent WeChat version 8.0.10, which stems from an applet that can obtain sensitiv...
Multiple vulnerabilities in Cybozu Office
Overview Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-839CyVDB-2300CyVDB-3109 Browse restriction bypass vulnerability in Cabinet CWE-284 - CVE-2022-32283 CyVDB-1795 Operation restriction bypass vulnerability in Project CWE-285 - CVE-2022-32544...
Cybozu Office 安全漏洞
Cybozu Office is a Web-based, cross-platform collaborative office solution from Cybozu. A security vulnerability exists in Cybozu Office that stems from improper access restrictions in the address book, which can be exploited by remote attackers to bypass the security restrictions and gain access...
GHSA-W3MQ-67MW-3P9F Magento Cross-Site Request Forgery (CSRF)
Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have CSRF resulting in deletion of a customer address from an address book, aka APPSEC-1433...
The vulnerability of the Windows Address Book on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Windows Address Book on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow a perpetrator to execute arbitrary code...
CVE-2022-26926
Windows Address Book Remote Code Execution Vulnerability...
CVE-2022-26926
Windows Address Book Remote Code Execution Vulnerability...