Page 21 of 162 results (0.002 seconds)

CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-1220

https://notcve.org/view.php?id=CVE-2016-1220

Cybozu Garoon before 4.2.2 does not properly restrict access. Cybozu Garoon en versiones anteriores a 4.2.2 no restringe correctamente el acceso. • http://jvn.jp/en/jp/JVN93411577/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000149.html http://www.securityfocus.com/bid/92599 https://support.cybozu.com/ja-jp/article/9407 • CWE-284: Improper Access Control •

CVSS: 8.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-1218

https://notcve.org/view.php?id=CVE-2016-1218

SQL injection vulnerability in Cybozu Garoon before 4.2.2. Vulnerabilidad de inyección SQL en Cybozu Garoon en versiones anteriores a 4.2.2. • http://jvn.jp/en/jp/JVN83568336/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000147.html http://www.securityfocus.com/bid/92600 https://support.cybozu.com/ja-jp/article/9414 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-1214

https://notcve.org/view.php?id=CVE-2016-1214

Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. Vulnerabilidad XSS en la función "Response request" en Cybozu Garoon en versiones anteriores a 4.2.2. • http://jvn.jp/en/jp/JVN67595539/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000143.html http://www.securityfocus.com/bid/92601 https://support.cybozu.com/ja-jp/article/9222 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0

CVE-2016-1219

https://notcve.org/view.php?id=CVE-2016-1219

Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use. Cybozu Garoon en versiones anteriores a 4.2.2 permite a atacantes remotos eludir la autenticación de acceso a través de vectores relacionados con el uso de API. • http://jvn.jp/en/jp/JVN89211736/index.html http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000148.html http://www.securityfocus.com/bid/92598 https://support.cybozu.com/ja-jp/article/9408 • CWE-287: Improper Authentication •

CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 0

CVE-2016-1193

https://notcve.org/view.php?id=CVE-2016-1193

Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors. Cybozu Garoon 3.7 hasta la versión 4.2 permite a atacantes remotos obtener información sensible de la lectura de correo electrónico a través de vectores no especificados. • http://jvn.jp/en/jp/JVN25765762/index.html http://jvndb.jvn.jp/jvndb/JVNDB-2016-000079 https://support.cybozu.com/ja-jp/article/8919 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •