CVE-2020-5582

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to alter the data for the file attached to Report via unspecified vectors...

CVE-2020-5583

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors...

CVE-2020-5583

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors...

CVE-2020-5583: Undefined Security Weakness

Cybozu Garoon 4.0.0 to 5.0.1 allows remote authenticated attackers to bypass access restriction to obtain unauthorized Multi-Report's data via unspecified vectors...

Cybozu Garoon Bypass View Privilege Vulnerability

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A security vulnerability exists in Cybozu Garoon versions 4.0.0 to 5.0.1. A remote attacker can exploit the...

megasport.ua Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1104318 Security Researcher raviakp1004 Helped patch 667 vulnerabilities Received 4 Coordinated Disclosure badges Received 5 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting megasport.ua website and...

Unauthorized Access Vulnerability in Sailsoft FineBI

FineBI is a Business Intelligence Business Intelligence product launched by Fansoft, which can analyze the existing informatization data of the enterprise independently by the end business users, help the enterprise to find and solve the existing problems, assist the enterprise to adjust the...

CVE-2018-19335

Google Monorail before 2018-06-07 has a Cross-Site Search XS-Search vulnerability because CSV downloads are affected by CSRF, and calculations of download times for requests with a crafted groupby value can be used to obtain sensitive information about the content of bug reports...

CVE-2017-1157

IBM Jazz Reporting Service JRS 5.0 and 6.0 could allow an authenticated attacker to access report data that should be restricted to authorized users. IBM X-Force ID: 122788...

CVE-2017-1157

IBM Jazz Reporting Service JRS 5.0 and 6.0 could allow an authenticated attacker to access report data that should be restricted to authorized users. IBM X-Force ID: 122788...

PT-2017-12107

Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service JRS versions 5.0 through 6.0 Description The issue allows an authenticated attacker to access report data that should be restricted to authorized users. Recommendations For versions 5.0 through 6.0, update to a versi...

Code injection

OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files...

CVE-2014-8149

OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files...

CVE-2014-8149

OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files...

Mozilla Firefox/Firefox ESR/Thunderbird Information Disclosure Vulnerability

Mozilla Firefox/Thunderbird is a web browser/email client released by Mozilla. An information disclosure vulnerability exists in Mozilla Firefox/Firefox ESR/Thunderbird, which can be exploited by remote attackers to obtain sensitive information by accessing the crash report data stream...

PT-2010-5210

Name of the Vulnerable Software and Affected Versions Spree versions 0.11.x through 0.11.1 Spree versions 0.30.x before 0.30.0 Description The issue allows remote attackers to obtain sensitive information via vectors involving API endpoints such as "admin/products.json", "admin/users.json", or...