CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2020-5572
https://notcve.org/view.php?id=CVE-2020-5572
Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors. Android App "Mailwise for Android" versiones 1.0.0 hasta 2.5, permite a un atacante obtener información de credenciales registrada en el producto por medio de vectores no especificados. • https://jvn.jp/en/jp/JVN78745667/index.html https://kb.cybozu.support/article/36411 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0CVE-2020-5573
https://notcve.org/view.php?id=CVE-2020-5573
Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors. Android App "kintone mobile for Android" versiones 1.0.0 hasta 2.5, permite a un atacante obtener información de credenciales registrada en el producto por medio de vectores no especificados. • https://jvn.jp/en/jp/JVN78745667/index.html https://kb.cybozu.support/article/36211 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 9.8EPSS: 8%CPEs: 1EXPL: 0CVE-2020-5537
https://notcve.org/view.php?id=CVE-2020-5537
Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors. Cybozu Desktop para Windows versiones 2.0.23 hasta 2.2.40, permite una ejecución de código remota por medio de vectores no especificados. • http://jvn.jp/en/jp/JVN59552136/index.html https://jvn.jp/en/jp/JVN59552136/index.html https://kb.cybozu.support/article/36329 • CWE-20: Improper Input Validation •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-5568
https://notcve.org/view.php?id=CVE-2020-5568
Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications 'Messages' and 'Bulletin Board'. Una vulnerabilidad de tipo cross-site scripting en Cybozu Garoon versiones 4.6.0 hasta 5.0.0, permite a atacantes remotos inyectar scripts web o HTML arbitrario por medio de las aplicaciones "Messages" y "Bulletin Board". • https://jvn.jp/en/jp/JVN35649781/index.html https://kb.cybozu.support/article/36302 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2020-5566
https://notcve.org/view.php?id=CVE-2020-5566
Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'. Una vulnerabilidad de autorización inapropiada en Cybozu Garoon versiones 4.0.0 hasta 4.10.3, permite a atacantes autentificados remotos alterar los datos de la aplicación por medio de las aplicaciones "E-mail" y "Messages". • https://jvn.jp/en/jp/JVN35649781/index.html https://kb.cybozu.support/article/36113 •