Page 6 of 53 results (0.002 seconds)

CVSS: 6.5EPSS: 0%CPEs: 20EXPL: 0

CVE-2014-1989

https://notcve.org/view.php?id=CVE-2014-1989

02 May 2014 — Cybozu Garoon 3.0 through 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls. Cybozu Garoon 3.0 hasta 3.7 SP3 permite a usuarios remotos autenticados evadir restricciones de acceso y eliminar información de planificación a través de llamadas API no especificadas. • http://jvn.jp/en/jp/JVN31230946/index.html • CWE-264: Permissions, Privileges, and Access Controls •

CVSS: 8.8EPSS: 0%CPEs: 42EXPL: 0

CVE-2013-6930

https://notcve.org/view.php?id=CVE-2013-6930

29 Jan 2014 — SQL injection vulnerability in the page-navigation implementation in Cybozu Garoon 2.0.0 through 2.0.6, 2.1.0 through 2.1.3, 2.5.0 through 2.5.4, 3.0.0 through 3.0.3, 3.5.0 through 3.5.5, and 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929. Vulnerabilidad de inyección de SQL en la implementación page-navigation de Cybozu Garoon 2.0.0 hasta la versión 2.0.6, 2.1.0 hasta 2.1.3, 2.5.0 hasta la versión 2... • http://cs.cybozu.co.jp/information/20140127up02.php • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 8.8EPSS: 0%CPEs: 3EXPL: 0

CVE-2013-6931

https://notcve.org/view.php?id=CVE-2013-6931

29 Jan 2014 — SQL injection vulnerability in the API in Cybozu Garoon 3.7.x before 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929. Vulnerabilidad de inyección de SQL en la API de Cybozu Garoon 3.7.x anterior a la versión 3.7.3 permite a usuarios remotos autenticados ejecutar comandos SQL arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2013-6929. • http://cs.cybozu.co.jp/information/20140127up03.php • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •