Lucene search
+L

1596 matches found

OSV
OSV
added 2021/10/13 9:15 a.m.9 views

CVE-2021-20799

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS6.2AI score0.00608EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/13 9:15 a.m.27 views

CVE-2021-20800

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS0.00605EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/13 9:15 a.m.8 views

CVE-2021-20801

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity XXE attacks and obtain the information stored in the product via unspecified vectors. This issue occurs only when using Mozilla Firefox...

6.5CVSS6.1AI score0.01064EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/13 9:15 a.m.20 views

CVE-2021-20796

Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors...

6.5CVSS0.01516EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/13 9:15 a.m.8 views

CVE-2021-20798

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS6.2AI score0.00608EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/13 9:15 a.m.23 views

CVE-2021-20799

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS0.00608EPSS
SaveExploits0References2
NVD
NVD
added 2021/10/13 9:15 a.m.21 views

CVE-2021-20798

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

5.4CVSS0.00608EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/13 9:15 a.m.6 views

CVE-2021-20795

Cross-site request forgery CSRF vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors...

8.8CVSS6.1AI score0.00556EPSS
SaveExploits0References2
OSV
OSV
added 2021/10/13 9:15 a.m.8 views

CVE-2021-20797

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox...

5.4CVSS6.1AI score0.00608EPSS
SaveExploits0References2
Prion
Prion
added 2021/10/13 9:15 a.m.13 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors...

6.8CVSS8.8AI score0.00556EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.19 views

Cross site scripting

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

3.5CVSS5.7AI score0.00605EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.22 views

Xxe

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity XXE attacks and obtain the information stored in the product via unspecified vectors. This issue occurs only when using Mozilla Firefox...

4CVSS6.6AI score0.01064EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.21 views

Cross site scripting

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

3.5CVSS5.7AI score0.00608EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.18 views

Open redirect

Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

5.8CVSS6.8AI score0.00821EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.19 views

Cross site scripting

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors...

3.5CVSS5.7AI score0.00608EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.21 views

Design/Logic Flaw

Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen...

4CVSS6AI score0.00716EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.22 views

Design/Logic Flaw

Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service DoS condition via unspecified vectors...

4CVSS6.5AI score0.01134EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.20 views

Design/Logic Flaw

HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product...

5CVSS6.1AI score0.00993EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.14 views

Cross site scripting

Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors...

4.3CVSS6.6AI score0.00754EPSS
SaveExploits0References2Affected Software1
Prion
Prion
added 2021/10/13 9:15 a.m.17 views

Cross site scripting

Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox...

3.5CVSS5.8AI score0.00608EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder