Filtered by vendor Cybozu
Subscriptions
Total
325 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2024-23304 | 1 Cybozu | 1 Kunai | 2025-06-04 | 7.5 High |
Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performing certain operations. | ||||
CVE-2024-31403 | 1 Cybozu | 1 Garoon | 2025-05-28 | 5.4 Medium |
Incorrect authorization vulnerability in Cybozu Garoon 5.0.0 to 6.0.0 allows a remote authenticated attacker to alter and/or obtain the data of Memo. | ||||
CVE-2024-31404 | 1 Cybozu | 1 Garoon | 2025-05-28 | 4.3 Medium |
Insertion of sensitive information into sent data issue exists in Cybozu Garoon 5.5.0 to 6.0.0, which may allow a user who can log in to the product to view the data of Scheduler. | ||||
CVE-2022-44608 | 1 Cybozu | 1 Cybozu Remote Service | 2025-04-23 | 7.5 High |
Uncontrolled resource consumption vulnerability in Cybozu Remote Service 4.0.0 to 4.0.3 allows a remote authenticated attacker to consume huge storage space, which may result in a denial-of-service (DoS) condition. | ||||
CVE-2016-4907 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors. | ||||
CVE-2016-4871 | 1 Cybozu | 1 Office | 2025-04-20 | N/A |
Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service. | ||||
CVE-2016-4906 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai. | ||||
CVE-2016-1214 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. | ||||
CVE-2017-2146 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu. | ||||
CVE-2017-2145 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors. | ||||
CVE-2016-1194 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service. | ||||
CVE-2016-1217 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2. | ||||
CVE-2016-1215 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2. | ||||
CVE-2016-4865 | 1 Cybozu | 1 Office | 2025-04-20 | N/A |
Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows attackers with administrator rights to inject arbitrary web script or HTML via the Customapp function. | ||||
CVE-2016-1186 | 1 Cybozu | 1 Kintone | 2025-04-20 | N/A |
Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates. | ||||
CVE-2016-1218 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
SQL injection vulnerability in Cybozu Garoon before 4.2.2. | ||||
CVE-2016-1187 | 1 Cybozu | 1 Kunai | 2025-04-20 | N/A |
Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates. | ||||
CVE-2016-1219 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use. | ||||
CVE-2016-1213 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. | ||||
CVE-2016-1220 | 1 Cybozu | 1 Garoon | 2025-04-20 | N/A |
Cybozu Garoon before 4.2.2 does not properly restrict access. |