CVE-2021-20757

Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege...

CVE-2021-20761

Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege to alter the data of E-mail without the appropriate privilege...

CVE-2021-20760

Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the appropriate privilege...

Design/Logic Flaw

Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege...

Design/Logic Flaw

Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege...

Input validation

Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the appropriate privilege...

Input validation

Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files...

Input validation

Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate privilege...

Input validation

Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail without the appropriate privilege...

CVE-2021-20764

Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files...

CVE-2021-20764

CVE-2021-20764 relates to Cybozu Garoon, where an improper input validation in the Attaching Files feature (affecting Cybozu Garoon 4.0.0–5.0.2) can allow a remote attacker to alter the attached files data. The issue affects multiple Cybozu Garoon product versions listed in the CVE family, includ...

CVE-2021-20757

The CVE-2021-20757 issue affects Cybozu Garoon (versions 4.0.0 to 5.0.2) and is described as an operational restrictions bypass in the E-mail module. The vulnerability allows a remote authenticated attacker to alter Portal data without the appropriate privileges. The root cause is an access/privi...

CVE-2021-20757

Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege...

CVE-2021-20754

Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate privilege...

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation systems allows a perpetrator to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the CODESYS Control V2 Linux SysFile software suite for industrial automation exists because measures to neutralize special elements used in operating system commands have not been implemented. Exploiting this vulnerability can allow attackers to compromise the confidentialit...

CVE-2021-1487

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied...

CVE-2021-1487 Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Command Injection Vulnerability

A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Evolved Programmable Network EPN Manager could allow an authenticated, remote attacker to execute arbitrary commands on an affected system. The vulnerability is due to insufficient validation of user-supplied...

The vulnerability of the Libraries component in Java SE, Java SE Embedded, and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to create, delete, or alter access to critical data.

The vulnerability of the Libraries component in Java SE, Java SE Embedded, and Oracle GraalVM Enterprise Edition software platforms exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to create, delete, or alter access to critical data using netwo...

GHSA-H8HX-2C5R-32CF Cross-Site Request Forgery (CSRF) in trestle-auth

Impact A vulnerability in trestle-auth versions 0.4.0 and 0.4.1 allows an attacker to create a form that will bypass Rails' built-in CSRF protection when submitted by a victim with a trestle-auth admin session. This potentially allows an attacker to alter protected data, including admin account...

Cross-Site Request Forgery (CSRF) in trestle-auth

Impact A vulnerability in trestle-auth versions 0.4.0 and 0.4.1 allows an attacker to create a form that will bypass Rails' built-in CSRF protection when submitted by a victim with a trestle-auth admin session. This potentially allows an attacker to alter protected data, including admin account...