PT-2024-19796 · Cybozu · Cybozu Kunai For Android

Name of the Vulnerable Software and Affected Versions: Cybozu KUNAI for Android versions 3.0.20 through 3.0.21 Description: The issue allows a remote unauthenticated attacker to cause a denial-of-service DoS condition by performing certain operations. Recommendations: For versions 3.0.20 through...

CVE-2017-2172

Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2172

Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2172

CVE-2017-2172 is a cross-site scripting vulnerability in Cybozu KUNAI for Android versions 3.0.0–3.0.6. The flaw allows remote attackers to inject arbitrary web script or HTML via unspecified vectors within the mobile client. Root cause is CWE-79 (XSS); impact is arbitrary script execution in the...

CVE-2017-2172

Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cybozu KUNAI for Android Cross-Site Scripting Vulnerability

Cybozu KUNAI for Android is an Android-based application from Cybozu, Inc. that allows you to quickly use Cybozu's licensed software. A cross-site scripting vulnerability exists in Cybozu KUNAI versions 3.0.0 through 3.0.6 for Android. A remote attacker can exploit the vulnerability to inject...

Cybozu KUNAI for Android vulnerable to cross-site scripting

Overview Cybozu KUNAI for Android is mobile client software for using Cybozu from an Android device. Cybozu KUNAI for Android contains a cross-site scripting vulnerability CWE-79 due to an issue in mobile view mode. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its...

JVN#56588965: Cybozu KUNAI for Android vulnerable to cross-site scripting

Cybozu KUNAI for Android is mobile client software for using Cybozu from an Android device. Cybozu KUNAI for Android contains a cross-site scripting vulnerability CWE-79 due to an issue in mobile view mode. Impact An arbitrary script may be executed on the user's web browser. Solution Update the...

Code injection

Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application...

CVE-2017-2109

Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application...

CVE-2017-2109

Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application...

CVE-2017-2109

Cybozu KUNAI for Android (versions 3.0.4–3.0.5.1) is affected. The vulnerability causes log information to be output during the first data synchronization, even if the log output feature is disabled, which may allow another malicious Android application to access the logs. Root cause described in...

CVE-2017-2109

Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application...

CVE-2016-1187

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates...

Code injection

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates...

CVE-2016-1187

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates...

CVE-2016-1187

CVE-2016-1187 affects Cybozu KUNAI: iPhone in versions 2.0.3–3.1.5 and Android in 2.1.2–3.0.4 fail to verify SSL server certificates. This causes a potential man-in-the-middle risk, allowing eavesdropping on encrypted communications. Impact is the ability for an attacker on the network to interce...

CVE-2016-1187

Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates...

Cybozu KUNAI for Android information management vulnerability

Overview Cybozu KUNAI for Android is a mobile client software for using Cybozu from an Android device. Cybozu KUNAI for Android provides a function to output log information when synchronizing data with Cybozu, however the function is disabled by default. Cybozu KUNAI for Android contains an issu...