Lucene search
+L

1663 matches found

CVE
CVE
added 2017/08/28 8:00 p.m.70 views

CVE-2017-2257

CVE-2017-2257 : Cybozu Garoon versions 3.0.0 to 4.2.5 are affected by a cross-site scripting vulnerability in the mail function, allowing an attacker to inject arbitrary web script or HTML. Multiple connected sources (NVD listing and OpenVAS entry for Cybozu Garoon 3.0.0 – 4.2.5) corroborate this...

6.1CVSS6AI score0.00713EPSS
SaveExploits0References2Affected Software1
CNVD
CNVD
added 2017/08/22 12:00 a.m.11 views

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2017-25384)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...

5.4CVSS5.3AI score0.00538EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/08/22 12:00 a.m.9 views

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2017-25383)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...

6.1CVSS6AI score0.00713EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/08/22 12:00 a.m.6 views

Cybozu Garoon Denial of Service Vulnerability (CNVD-2017-25386)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A denial of service vulnerabilit...

4.9CVSS5.2AI score0.01057EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/08/22 12:00 a.m.8 views

Cybozu Garoon Directory Traversal Vulnerability (CNVD-2017-25382)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A directory traversal...

4.3CVSS5.1AI score0.01326EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/08/22 12:00 a.m.9 views

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2017-25385)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin boards, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...

5.4CVSS5.2AI score0.00538EPSS
SaveExploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2017/08/21 5:30 a.m.9 views

Multiple vulnerabilities in Cybozu Garoon

Overview Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Denial-of-service DoS vulnerability in the application menu's edit function CWE-20 - CVE-2017-2254 Stored cross-site scripting in the "Rich text" function of the application "Space" CWE-79 -...

6.1CVSS6.1AI score0.01326EPSS
SaveExploits0References19
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2017/08/21 12:00 a.m.71 views

JVN#63564682: Multiple vulnerabilities in Cybozu Garoon

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. Denial-of-service DoS vulnerability in the application menu's edit function CWE-20 - CVE-2017-2254 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H| Base Score: 5.5 CVSS...

6.1CVSS5.5AI score0.01326EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2017/07/18 12:00 a.m.23 views

Cybozu Garoon 3.0.0 - 4.2.4 Multiple Vulnerabilities

Cybozu Garoon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon"; ifdescription...

5.8CVSS5.3AI score0.00851EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2017/07/18 12:00 a.m.30 views

Cybozu Garoon 3.0.0 - 4.2.3 Multiple Vulnerabilities

Cybozu Garoon is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:cybozu:garoon"; ifdescription...

5.4CVSS4.9AI score0.01467EPSS
SaveExploits0
CNVD
CNVD
added 2017/07/11 12:00 a.m.9 views

Cybozu Garoon has an unspecified vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A security vulnerability exists i...

5.8CVSS6.8AI score0.00849EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/11 12:00 a.m.9 views

Cybozu Garoon Cross-Site Scripting Vulnerability (CNVD-2017-15107)

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A cross-site scripting...

4.8CVSS6.2AI score0.00603EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/07/11 12:00 a.m.9 views

Cybozu Garoon Session Fixation Vulnerability

Cybozu Garoon is a portal-type OA office system of Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions, and supports free switching among three languages Chinese, Japanese, and English. A session fixation vulnerability...

5.8CVSS7.1AI score0.00851EPSS
SaveExploits0References1
Prion
Prion
added 2017/07/07 1:29 p.m.22 views

Code injection

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page...

5.8CVSS5.4AI score0.00849EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2017/07/07 1:29 p.m.29 views

Cross site scripting

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu...

3.5CVSS5.1AI score0.00603EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2017/07/07 1:29 p.m.13 views

CVE-2017-2144

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page...

5.4CVSS5.8AI score0.00849EPSS
SaveExploits0References2
NVD
NVD
added 2017/07/07 1:29 p.m.26 views

CVE-2017-2144

Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page...

5.8CVSS5.4AI score0.00849EPSS
SaveExploits0References2
OSV
OSV
added 2017/07/07 1:29 p.m.12 views

CVE-2017-2146

Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu...

4.8CVSS5.9AI score0.00603EPSS
SaveExploits0References2
OSV
OSV
added 2017/07/07 1:29 p.m.13 views

CVE-2017-2145

Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors...

5.4CVSS5.9AI score0.00851EPSS
SaveExploits0References2
Prion
Prion
added 2017/07/07 1:29 p.m.24 views

Session fixation

Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors...

5.8CVSS5.5AI score0.00851EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder