1544 matches found
CVE-2017-2258
Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications"...
CVE-2017-2254
Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input...
CVE-2017-2255
Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space"...
CVE-2017-2254
Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input...
CVE-2017-2257
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function...
CVE-2017-2255
Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space"...
Input validation
Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input...
Cross site scripting
Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space"...
Cross site scripting
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Memo"...
Directory traversal
Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications"...
Cross site scripting
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function...
CVE-2017-2254
CVE-2017-2254 affects Cybozu Garoon versions 3.5.0 to 4.2.5. The vulnerability is a denial-of-service in the application menu’s edit function triggered by specially crafted input. Underlying cause and exact exploit vector are not elaborated in the provided documents beyond noting a DoS condition....
CVE-2017-2256
CVE-2017-2256 affects Cybozu Garoon 3.0.0 to 4.2.5, with a stored cross-site scripting (XSS) vulnerability in the Rich text functionality of the Memo application that can cause arbitrary script execution in the user’s browser. The issue is documented across multiple sources (NVD/NVD CVE entry; JV...
CVE-2017-2255
CVE-2017-2255 affects Cybozu Garoon versions 3.7.0 to 4.2.5 and is a stored XSS in the Rich text function of the Space app. Public sources (NVD, JVN/OpenVAS) confirm the vulnerability is a client-side script injection that could execute in an authenticated user’s browser. The connected OpenVAS en...
CVE-2017-2255
Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via "Rich text" function of the application "Space"...
CVE-2017-2254
Cybozu Garoon 3.5.0 to 4.2.5 allows an attacker to cause a denial of service in the application menu's edit function via specially crafted input...
CVE-2017-2258
Directory traversal vulnerability in Cybozu Garoon 4.2.4 to 4.2.5 allows an attacker to read arbitrary files via Garoon SOAP API "WorkflowHandleApplications"...
CVE-2017-2257
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.5 allows an attacker to inject arbitrary web script or HTML via mail function...
CVE-2017-2258
CVE-2017-2258 affects Cybozu Garoon 4.2.4–4.2.5 and is a directory traversal in the Garoon SOAP API “WorkflowHandleApplications” (CWE-22) that can allow an attacker to read arbitrary files. This vulnerability is documented across multiple feeds (NVD, CVE lists, OpenVAS) with a reported impact of ...