Filtered by vendor Cybozu
Subscriptions
Filtered by product Garoon
Subscriptions
Total
192 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2016-4908 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors. | ||||
CVE-2016-4907 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors. | ||||
CVE-2016-4906 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai. | ||||
CVE-2016-1220 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
Cybozu Garoon before 4.2.2 does not properly restrict access. | ||||
CVE-2016-1219 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use. | ||||
CVE-2016-1218 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
SQL injection vulnerability in Cybozu Garoon before 4.2.2. | ||||
CVE-2016-1217 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2. | ||||
CVE-2016-1216 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2. | ||||
CVE-2016-1215 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2. | ||||
CVE-2016-1214 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. | ||||
CVE-2016-1213 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. | ||||
CVE-2016-1194 | 1 Cybozu | 1 Garoon | 2024-11-21 | N/A |
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service. |