PT-2021-14261

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.0.0 through 3.1.9 Description: A cross-site scripting issue exists in the management screen, allowing a remote attacker to inject an arbitrary script. Recommendations: For Cybozu Remote Service versions 3.0.0...

CVE-2021-20799: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20807: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors...

PT-2021-14256

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: The issue allows a remote attacker to alter the information stored in the product due to an HTTP header injection vulnerability. Recommendations: For Cybozu Remote Service versio...

PT-2021-14249

Name of the Vulnerable Software and Affected Versions: Cybozu Remote Service versions 3.1.8 through 3.1.9 Description: A cross-site request forgery CSRF issue exists in the management screen, allowing a remote attacker to hijack the authentication of administrators. This could lead to unintended...

CVE-2021-20805: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

CVE-2021-20806: URL Redirection to Untrusted Site

Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

CVE-2021-20800: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

The vulnerability of the Cypress WICED BT Bluetooth Classic stack implementation for the CYW20735B1 device arises due to insufficient validation of input data. This allows a malicious actor to trigger a service failure.

The vulnerability of the Cypress WICED BT Bluetooth Classic stack implementation for the CYW20735B1 device exists due to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to cause service failure...

CVE-2021-20797: Improper Neutralization of Input During Web Page Generation

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox...

The vulnerability of the Bluetooth Classic environment for developing IoT applications exists due to insufficient verification of input data, allowing attackers to trigger service failures.

The vulnerability of the Bluetooth Classic environment for developing IoT applications exists due to insufficient testing of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

The vulnerability of the VAPI service (vCenter API), a management tool for VMware vCenter Server and VMware Cloud Foundation virtualization platforms, allows a attacker to cause a service failure.

The vulnerability of the VAPI service vCenter API, a management tool for VMware vCenter Server and VMware Cloud Foundation virtualization platforms, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the drivers/usb/host/max3421-hcd.c component of the Linux operating system’s kernel lies in the use of memory after it is freed, allowing an attacker to trigger a service failure.

The vulnerability of the Linux operating system’s driver/usb/host/max3421-hcd.c component is related to the use of memory after it has been freed. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

JVN#52694228: Multiple vulnerabilities in Cybozu Remote Service

Cybozu Remote Service provided by Cybozu, Inc. contains multiple vulnerabilities listed below. CyVDB-525 Cross-site request forgery vulnerability in the management screen CWE-352 - CVE-2021-20795 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N| Base Score:...

Cybozu Remote Service 跨站请求伪造漏洞

A cross-site request forgery vulnerability exists in the Cybozu Remote Service management interface. A remote attacker can use this vulnerability to hijack the administrator's authentication and perform unintended actions...

Cybozu Remote Service 代码问题漏洞

An XML external entity injection vulnerability exists in Cybozu Remote Service, a remote service management software used by Cybozu Japan to access Cybozu's internal systems. An attacker could use this vulnerability to obtain information stored in the product...

Cybozu Remote Service 跨站脚本漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to inject arbitrary scripts...

Cybozu Remote Service 跨站脚本漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a cross-site scripting vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to inject arbitrary scripts...

Cybozu Remote Service 权限许可和访问控制问题漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems. a bypass vulnerability exists in the Cybozu Remote Service management interface. A remote authenticated attacker can use this vulnerability to change the data in the management interface...

Cybozu Remote Service 注入漏洞

Cybozu Remote Service is a remote service management software used to access Cybozu's internal systems by Cybozu Japan.Cybozu Remote Service is vulnerable to HTTP header injection. A remote attacker can use this vulnerability to alter information stored in the product...