EUVD-2016-2288

Malware in sbrugna...

EUVD-2020-26735

Malware in sbrugna...

EUVD-2016-8665

Malware in sbrugna...

EUVD-2016-2287

Malware in sbrugna...

kaizen-kintone-plugins.com Cross Site Scripting vulnerability OBB-3391724

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cybozu Kintone Mobile Information Disclosure Vulnerability

Cybozu Kintone Mobile is an office application for mobile platforms from Cybozu Japan. The program supports file uploading, editing records, and push notifications. An information disclosure vulnerability exists in Cybozu Kintone Mobile versions 1.0.0 through 2.5 for the Android-based platform. T...

CVE-2020-5573

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

CVE-2020-5573

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

Design/Logic Flaw

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

CVE-2020-5573

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

CVE-2020-5573

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

CVE-2020-5573

The CVE-2020-5573 issue affects Cybozu Cybozu Kintone Mobile for Android, versions 1.0.0 to 2.5. An information disclosure vulnerability allows an attacker to obtain credential information registered in the product via unspecified vectors. The advisory entries across sources (NVD, RH, CNVD, JVN, ...

PT-2020-18548

Name of the Vulnerable Software and Affected Versions kintone mobile for Android versions 1.0.0 through 2.5 Description The issue allows an attacker to obtain credential information registered in the product via unspecified vectors. Recommendations For versions 1.0.0 through 2.5, update to a...

JVN#78745667: Multiples security updates for multiple Cybozu products

Cybozu, Inc. has released multiple security updates for multiple Cybozu products. CyVDB-2465 Credential Disclosure Vulnerability - CVE-2020-5572 CyVDB-2484 Credential Disclosure Vulnerability - CVE-2020-5573 Impact A user who can login to the product may obtain sensitive information registered in...

CVE-2020-5573: Exposure of Sensitive Information to an Unauthorized Actor

Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors...

CVE-2016-7816

The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Code injection

The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-7816

The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2016-7816

The CVE-2016-7816 issue affects Cybozu kintone mobile for Android (1.0.6 and earlier). The root cause is that the app fails to verify X.509 certificates from SSL servers in WebView, enabling a man-in-the-middle attacker to spoof servers and capture sensitive information via a crafted certificate....

CVE-2016-7816

The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...