Filtered by vendor Cybozu Subscriptions
Filtered by product Garoon Subscriptions
Total 192 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2016-4910 1 Cybozu 1 Garoon 2024-11-21 N/A
Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters via unspecified vectors.
CVE-2016-4909 1 Cybozu 1 Garoon 2024-11-21 N/A
Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a logged in user to force a logout via unspecified vectors.
CVE-2016-4908 1 Cybozu 1 Garoon 2024-11-21 N/A
Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors.
CVE-2016-4907 1 Cybozu 1 Garoon 2024-11-21 N/A
Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors.
CVE-2016-4906 1 Cybozu 1 Garoon 2024-11-21 N/A
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai.
CVE-2016-1220 1 Cybozu 1 Garoon 2024-11-21 N/A
Cybozu Garoon before 4.2.2 does not properly restrict access.
CVE-2016-1219 1 Cybozu 1 Garoon 2024-11-21 N/A
Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use.
CVE-2016-1218 1 Cybozu 1 Garoon 2024-11-21 N/A
SQL injection vulnerability in Cybozu Garoon before 4.2.2.
CVE-2016-1217 1 Cybozu 1 Garoon 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2.
CVE-2016-1216 1 Cybozu 1 Garoon 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2.
CVE-2016-1215 1 Cybozu 1 Garoon 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2.
CVE-2016-1214 1 Cybozu 1 Garoon 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2.
CVE-2016-1213 1 Cybozu 1 Garoon 2024-11-21 N/A
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites.
CVE-2016-1197 1 Cybozu 1 Garoon 2024-11-21 N/A
Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775.
CVE-2016-1196 1 Cybozu 1 Garoon 2024-11-21 N/A
Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776.
CVE-2016-1195 1 Cybozu 1 Garoon 2024-11-21 N/A
Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL.
CVE-2016-1194 1 Cybozu 1 Garoon 2024-11-21 N/A
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service.
CVE-2016-1193 1 Cybozu 1 Garoon 2024-11-21 N/A
Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors.
CVE-2016-1192 1 Cybozu 1 Garoon 2024-11-21 N/A
Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors.
CVE-2016-1191 1 Cybozu 1 Garoon 2024-11-21 N/A
Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors.