1544 matches found
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors...
CVE-2017-2092
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Phone Messages function to alter the status of phone messages via unspecified vectors...
CVE-2017-2094
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in Workflow and the "MultiReport" function to alter or delete information via unspecified vectors...
CVE-2017-2092
Cybozu Garoon 3.0.0–4.2.3 is affected by CVE-2017-2092 (Cross-site scripting). The vulnerability, in Cybozu Garoon and addressed across connected sources, allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors, potentially enabling arbitrary script ex...
CVE-2017-2095
Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors...
CVE-2017-2091
Cybozu Garoon 3.0.0 to 4.2.3 is affected by CVE-2017-2091, an access restriction flaw in the Phone Messages function. The issue allows remote authenticated attackers to bypass access restrictions and alter the status of phone messages via unspecified vectors. Affected component: Phone Messages fe...
CVE-2017-2095
CVE-2017-2095 affects Cybozu Garoon 3.0.0 to 4.2.3. A remote authenticated attacker can bypass access restrictions in the mail function, resulting in alteration of the order of mail folders. The root cause is an access restriction flaw in the mail handling logic. remediation per the documents is ...
CVE-2017-2092
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2017-2093
Cybozu Garoon 3.0.0 to 4.2.3 allow remote attackers to obtain tokens used for CSRF protection via unspecified vectors...
CVE-2017-2093
Cybozu Garoon 3.0.0–4.2.3 is affected by CVE-2017-2093, where remote attackers may obtain tokens used for CSRF protection via unspecified vectors. This affects token disclosure and could assist CSRF exploitation. Affected product: Cybozu Garoon. Root cause details are not specified in the provide...
CVE-2016-1194
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service...
CVE-2016-1194
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service...
Denial of service
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service...
CVE-2016-1194
CVE-2016-1194 affects Cybozu Garoon (3.1–4.2), with the issue causing a remote-denial-of-service condition. Public documents consistently cite DoS by remote attackers and resource consumption, impacting Garoon prior to version 4.2.1. The vulnerability is evidenced across multiple sources (NVD, JV...
CVE-2016-1194
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service...
Code injection
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites...
Sql injection
SQL injection vulnerability in Cybozu Garoon before 4.2.2...