CVE-2021-20756

Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing privilege...

CVE-2021-20756

Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing privilege...

CVE-2021-20755

Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing privilege...

CVE-2021-20755

Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing privilege...

Input validation

Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the data of Comment and Space without the viewing privilege...

Design/Logic Flaw

Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing privilege...

CVE-2021-20756

CVE-2021-20756 affects Cybozu Garoon Address module (versions 4.0.0–5.0.2). The vulnerability is a viewing restrictions bypass that allows a remote authenticated attacker to obtain address data without the proper viewing privilege. Impact is consistent with other Cybozu Garoon disclosures in the ...

CVE-2021-20755

Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing privilege...

CVE-2021-20755

CVE-2021-20755 (Cybozu Garoon Portal viewing restriction bypass) is a vulnerability in Cybozu Garoon where a user who can log in can obtain portal data without the proper viewing privileges. The CVE is listed with a CVSSv3 base score of 4.3 (CVSSv2 base score 4.0). Affected products include Cyboz...

Advantech WebAccess/NMS Authorization Issue Vulnerability

Advantech WebAccess/NMS is a Web browser-based network management system NMS software package from Advantech, Taiwan, China.Advantech WebAccess/NMS is vulnerable to an authorization issue in versions prior to v3.0.3Build6299, which stems from the fact that the affected product has incorrect...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat Reader Document Cloud, as well as Adobe Acrobat 2017 and Adobe Acrobat Reader 2017, are related to memory usage after it is released. These vulnerabilities allow attackers to gain unauthorized access to protected information.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, and Adobe Acrobat Reader 2017 are related to the use of memory after it is freed. Exploiting these vulnerabilities can allow an attacker to gain...

Privilege Escalation

Icinga is vulnerable to privilege escalation. The vulnerability exists due to the ability to view most attributes of all config objects including ticketsalt of ApiListener due to the lack of sanitization...

CVE-2021-32069

The AWV component of Mitel MiCollab before 9.3 could allow an attacker to perform a Man-In-the-Middle attack due to improper TLS negotiation. A successful exploit could allow an attacker to view and modify data...

Cybozu Garoon Bulletin Information Disclosure Vulnerability

Cybozu Garoon is a portal-based OA office system of Cybozu Japan. An information disclosure vulnerability exists in Bulletin in Cybozu Garoon. An attacker can use this vulnerability to obtain the title of an announcement without viewing privileges...

Cybozu Garoon 信息泄露漏洞

Cybozu Garoon is a portal-based OA office system of Cybozu Japan. An information disclosure vulnerability exists in Bulletin in Cybozu Garoon. An attacker can use this vulnerability to obtain the title of an announcement without viewing privileges...

CVE-2021-37392

In RPCMS v1.8 and below, the "nickname" variable is not properly sanitized before being displayed on page. When the API functions are enabled, the attacker can use API to update user nickname with XSS payload and achieve stored XSS. Users who view the articles published by the injected user will...

CVE-2021-20478

IBM Cloud Pak System 2.3 could allow a local user in some situations to view the artifacts of another user in self service console. IBM X-Force ID: 197497...

CVE-2021-20478

CVE-2021-20478 affects IBM Cloud Pak System (V2.3). The vulnerability allows a local user to view artifacts belonging to another user in the self-service console. Affected: IBM Cloud Pak System from V2.3.3.0 through V2.3.3.3. Remediation: upgrade to V2.3.3.3 or apply Interim Fix 1 for 2.3.3.x as ...

DaviewIndy has an unspecified vulnerability

DaviewIndy is a document viewing application. The program supports the viewing of documents and images in many formats. A security vulnerability exists in DaviewIndy v8.98.7.0 and earlier versions, which can be exploited by an attacker to conduct arbitrary code execution...

Imagegear suffers from a denial of service vulnerability (CNVD-2021-50961)

ImageGear is a graphic image processing software with scanning, compression, viewing, printing, adding annotations, image editing and other features that enable developers to quickly develop image processing programs. Imagegear suffers from a denial of service vulnerability that can be exploited ...