CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2016-1194
https://notcve.org/view.php?id=CVE-2016-1194
Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service. Cybozu Garoon en versiones anteriores a 4.2.1 permite a atacantes remotos provocar una denegación de servicio. • http://jvn.jp/en/jp/JVN26298347/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000080.html https://support.cybozu.com/ja-jp/article/8983 • CWE-399: Resource Management Errors •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2016-1213
https://notcve.org/view.php?id=CVE-2016-1213
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. La función "Scheduler" en Cybozu Garoon en versiones anteriores a 4.2.2 permite a atacantes remotos redirigir a los usuarios a sitios web arbitrarios. • http://jvn.jp/en/jp/JVN67266823/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000142 http://www.securityfocus.com/bid/92596 https://support.cybozu.com/ja-jp/article/9221 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2016-1216
https://notcve.org/view.php?id=CVE-2016-1216
Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2. Vulnerabilidad XSS en la función "New appointment" en Cybozu Garoon en versiones anteriores a 4.2.2. • http://jvn.jp/en/jp/JVN67595539/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000145.html http://www.securityfocus.com/bid/92601 https://support.cybozu.com/ja-jp/article/9223 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0CVE-2016-1218
https://notcve.org/view.php?id=CVE-2016-1218
SQL injection vulnerability in Cybozu Garoon before 4.2.2. Vulnerabilidad de inyección SQL en Cybozu Garoon en versiones anteriores a 4.2.2. • http://jvn.jp/en/jp/JVN83568336/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000147.html http://www.securityfocus.com/bid/92600 https://support.cybozu.com/ja-jp/article/9414 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2016-1217
https://notcve.org/view.php?id=CVE-2016-1217
Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2. Vulnerabilidad XSS en la función "Check available times" en Cybozu Garoon en versiones anteriores a 4.2.2. • http://jvn.jp/en/jp/JVN67595539/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000146.html http://www.securityfocus.com/bid/92601 https://support.cybozu.com/ja-jp/article/9235 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •