Directory traversal

Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors...

CVE-2016-1191

Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors...

CVE-2016-1192

Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors...

CVE-2015-7776

Cybozu Garoon 3.x and 4.x before 4.2.0 does not properly restrict loading of IMG elements, which makes it easier for remote attackers to track users via a crafted HTML e-mail message, a different vulnerability than CVE-2016-1196...

CVE-2016-1191

CVE-2016-1191 refers to a directory traversal vulnerability in Cybozu Garoon’s Files function (versions 3.x–4.2.1 before 4.2.1). The underlying issue allows an unauthenticated, remote attacker to change settings via the Files component. Affected products: Cybozu Garoon 3.0–4.2 (and related 3.x ra...

CVE-2016-1196

Cybozu Garoon 3.x and 4.x before 4.2.1 are affected by CVE-2016-1196. The issue allows remote authenticated users to bypass access restrictions and retrieve sensitive Address Book information via an API call. According to the provided data, exploitation details are not described beyond the authen...

CVE-2015-7776

CVE-2015-7776 affects Cybozu Garoon 3.x and 4.x prior to 4.2.0. The vulnerability arises from improper restriction on loading IMG elements in HTML email, enabling remote attackers to track users via crafted messages. The issue is explicitly described as a different vulnerability from CVE-2016-119...

CVE-2016-1192

The CVE-2016-1192 issue affects Cybozu Garoon 3.7–4.2, with a vulnerability in the logging function that allows remote authenticated users to read restricted log files via directory traversal. The root cause is in the logging path (directory traversal in the logging function), and the JVN and NVD...

CVE-2016-1197

Cross-site scripting XSS vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775...

CVE-2016-1195

Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

CVE-2016-1195

Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

Open redirect

Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

Cross site scripting

Cross-site scripting XSS vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-1197...

CVE-2015-7775

Cross-site scripting XSS vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-1197...

CVE-2016-1195

Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL...

CVE-2016-1197

Cross-site scripting XSS vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775...

CVE-2016-1197

CVE-2016-1197 affects Cybozu Garoon 4.x versions prior to 4.2.1. The vulnerability is a cross-site scripting (XSS) flaw that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The available documents attribute the issue to Cybozu Garoon, with referenced entrie...

CVE-2016-1195

CVE-2016-1195 is an open redirect vulnerability in Cybozu Garoon 3.x and 4.x prior to 4.2.1. A crafted URL can redirect users to arbitrary sites, enabling phishing attempts. Affected product: Cybozu Garoon (3.x – 4.x up to 4.2.1). Root cause: open redirect handling in the application’s URL proces...

CVE-2015-7775

CVE-2015-7775 is an XSS vulnerability in Cybozu Garoon 4.0.3 that allows remote authenticated users to inject arbitrary script/HTML via unspecified vectors; it is noted as a different vulnerability from CVE-2016-1197. The connected records also include CVE-2016-1197, an XSS flaw in Cybozu Garoon ...

CVE-2015-7775

Cross-site scripting XSS vulnerability in Cybozu Garoon 4.0.3 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2016-1197...