Authentication flaw

Operation restriction bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Portal...

Authentication flaw

Operation restriction bypass vulnerability in Link of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Link...

Authentication flaw

Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow...

Input validation

Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Space...

Authentication flaw

Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter and/or obtain the data of Cabinet...

Authentication flaw

Operation restriction bypass vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.5.1 allow a remote authenticated attacker to alter the data of Bulletin...

CVE-2022-28718

CVE-2022-28718 affects Cybozu Garoon, specifically the Bulletin module. The issue is an Operation restriction bypass that allows a remote authenticated attacker to alter Bulletin data. Affected versions are Cybozu Garoon 4.0.0 through 5.5.1 (and related ranges listed in the JVN/NVD records). Impa...

CVE-2022-28692

CVE-2022-28692 concerns Cybozu Garoon’s Scheduler component, with an improper input validation flaw in versions 4.0.0–5.5.1. The issue can allow a remote authenticated attacker to alter Scheduler data. Affected product: Cybozu Garoon (Scheduler). Root cause: input validation weakness in Scheduler...

CVE-2022-28692

Improper input validation vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Scheduler...

CVE-2022-27661

CVE-2022-27661 is an operation restriction bypass vulnerability in Cybozu Garoon workflows. A remote authenticated attacker can alter Workflow data in Cybozu Garoon versions 4.0.0 through 5.5.1. Multiple connected sources (NVD, Red Hat, JVN, JVN DB, CNVD, CNNVD, PRION) confirm the issue and ident...

CVE-2022-27661

Operation restriction bypass vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter the data of Workflow...

CVE-2022-26368

Browse restriction bypass and operation restriction bypass vulnerability in Cabinet of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to alter and/or obtain the data of Cabinet...

CVE-2022-26054

CVE-2022-26054 is an operation restriction bypass vulnerability in Cybozu Garoon’s Link component, affecting versions 4.0.0 through 5.5.1. The flaw—rooted in improper privilege management in Link—permits a remote authenticated attacker to alter Link data. Affects Cybozu Garoon (portal/ OA suite) ...

PT-2022-17644 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.5.1 Description: The issue allows a remote authenticated attacker to alter the data of Link. This is due to an operation restriction bypass vulnerability. Recommendations: For versions 4.0.0 through 5.5....

PT-2022-18558 · Cybozu · Cybozu Garoon

Name of the Vulnerable Software and Affected Versions: Cybozu Garoon versions 4.0.0 through 5.5.1 Description: The issue allows a remote authenticated attacker to bypass operation restrictions in the Workflow of Cybozu Garoon and alter the data of Workflow. Recommendations: For Cybozu Garoon...

Design/Logic Flaw

A vulnerability has been identified in SICAM GridEdge Essential ARM All versions V2.6.6, SICAM GridEdge Essential Intel All versions V2.6.6, SICAM GridEdge Essential with GDS ARM All versions V2.6.6, SICAM GridEdge Essential with GDS Intel All versions V2.6.6. The affected software does not requi...

CVE-2022-20765

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...

Cross site scripting

A vulnerability in the web applications of Cisco UCS Director could allow an authenticated, remote attacker to conduct a cross-site scripting attack on an affected system. This vulnerability is due to unsanitized user input. An attacker could exploit this vulnerability by submitting custom...

CVE-2017-15090

An issue has been found in the DNSSEC validation component of PowerDNS Recursor from 4.0.0 and up to and including 4.0.6, where the signatures might have been accepted as valid even if the signed data was not in bailiwick of the DNSKEY used to sign it. This allows an attacker in position of...

Authentication flaw

Screen Creator Advance2, HMI GC-A2 series, and Real time remote monitoring and control tool Screen Creator Advance2 versions prior to Ver.0.1.1.3 Build01, HMI GC-A2 seriesGC-A22W-CW, GC-A24W-CW, GC-A26W-CW, GC-A24, GC-A24-M, GC-A25, GC-A26, and GC-A26-J2, and Real time remote monitoring and contr...