1663 matches found
CVE-2018-0550
Cybozu Garoon vulnerability CVE-2018-0550 affects versions 3.5.0 to 4.6.1. An authenticated remote attacker can bypass access restrictions to view the closed title of the Cabinet (via unspecified vectors). The issue is documented under CVE-2018-0550 and is listed among multiple related vulnerabil...
CVE-2018-0530
CVE-2018-0530 is a SQL injection vulnerability in Cybozu Garoon, affecting versions 3.5.0 through 4.2.6. It enables remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors in the application address component. The issue is documented across multiple sources (NVD, ...
CVE-2018-0533
Cybozu Garoon contains an authentication bypass flaw CVE-2018-0533 that allows remote authenticated users to bypass access restrictions and alter data in session authentication settings. Affected products/versions include Cybozu Garoon 3.0.0 to 4.2.6 (and related entries covering 3.0.0–4.2.6 acro...
Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2018-08049)
Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...
Cybozu Garoon Browsing Restriction Bypass Vulnerability (CNVD-2018-08809)
Cybozu Garoon is an office software with Chinese, Japanese, and English languages. A browsing restriction bypass vulnerability exists in the application "Cabinet" in Cybozu Garoon 3.5.0 through 4.6.1. The vulnerability can be exploited by users who can log in to the product to view folder names...
Cybozu Garoon SQL Injection Vulnerability (CNVD-2018-08343)
Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A SQL injection vulnerability exists in Cybozu...
Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2018-08048)
Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, etc. and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting vulnerability exists in...
Cybozu Garoon Browsing Restriction Bypass Vulnerability
Cybozu Garoon is an office software with Chinese, Japanese, and English languages. A browsing restriction bypass vulnerability exists in the application "Space" in Cybozu Garoon 4.0.0 through 4.6.0. The vulnerability can be exploited by users who can log in to the product to view the closed...
Cybozu Garoon Operation Limit Bypass Vulnerability
Cybozu Garoon is an office software with Chinese, Japanese, and English languages. An operation restriction bypass vulnerability exists in "Folder Settings" in Cybozu Garoon 3.0.0 through 4.2.6. The vulnerability can be exploited by a user with administrative privileges for one or more folders to...
Cybozu Garoon Operation Limit Bypass Vulnerability (CNVD-2018-08812)
Cybozu Garoon is an office software with Chinese, Japanese, and English languages. An operation restriction bypass vulnerability exists in the login authentication settings in Cybozu Garoon 3.0.0 through 4.2.6. The vulnerability can be exploited by users logging in to the product with...
Cybozu Garoon Operational Limit Bypass Vulnerability (CNVD-2018-08811)
Cybozu Garoon is an office software with Chinese, Japanese, and English languages. An operation restriction bypass vulnerability exists in the session authentication settings in Cybozu Garoon 3.0.0 through 4.2.6. The vulnerability can be exploited by users logging in to the product with...
JVN#65268217: Multiple vulnerabilities in Cybozu Garoon
Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. SQL injection in the application "Address" CWE-89 - CVE-2018-0530 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N| Base Score: 6.5 CVSS v2| AV:N/AC:L/Au:S/C:P/I:N/A:N|...
Cybozu Garoon 3.0.0 - 4.2.5 Multiple XSS Vulnerabilities
Cybozu Garoon is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Cybozu Garoon 3.5.0 - 4.2.5 DoS Vulnerability
Cybozu Garoon is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon";...
Cybozu Garoon 4.2.4 - 4.2.5 Directory Traversal Vulnerability
Cybozu Garoon is prone to a directory traversal vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon";...
Cybozu Garoon 3.7.0 - 4.2.5 'Rich text' Function XSS Vulnerability
Cybozu Garoon is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon...
CVE-2017-2258
Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications"...
CVE-2017-2256
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo"...