4 results (0.004 seconds)

CVSS: 4.6EPSS: 0%CPEs: 1EXPL: 0

CVE-2020-5572

https://notcve.org/view.php?id=CVE-2020-5572

29 May 2020 — Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors. Android App "Mailwise for Android" versiones 1.0.0 hasta 2.5, permite a un atacante obtener información de credenciales registrada en el producto por medio de vectores no especificados. • https://jvn.jp/en/jp/JVN78745667/index.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 9.0EPSS: 4%CPEs: 5EXPL: 0

CVE-2014-5314

https://notcve.org/view.php?id=CVE-2014-5314

24 Nov 2014 — Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages. Desbordamiento de buffer en Cybozu Office 9 y 10 anterior a 10.1.0, Mailwise 4 y 5 anterior a 5.1.4, y Dezie 8 anterior a 8.1.1 permite a usuarios remotos autenticados ejecutar código arbitrario a través de mensajes de email. • http://jvn.jp/en/jp/JVN14691234/index.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 8.8EPSS: 0%CPEs: 18EXPL: 0

CVE-2013-2305

https://notcve.org/view.php?id=CVE-2013-2305

25 Apr 2013 — Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords. Falsificación de petición en sitios cruzados (CSRF) en Cybozu Office antes de v8.1.6 y v9.x antes de v9.3.0, Cybozu Dezie antes de v8.0.7 y Cybozu Mailwise antes de v5.0.4 permite a atacantes remotos secuestrar la autenticación de los usuarios ... • http://cs.cybozu.co.jp/information/20130415up10.php • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 6.1EPSS: 0%CPEs: 25EXPL: 0

CVE-2011-1334

https://notcve.org/view.php?id=CVE-2011-1334

29 Jun 2011 — Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system." Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Cybozu Office v6, Cybozu Garoon v2.0.0 hasta v2.1.3, Cybozu Dezie antes de v6.1, Cybozu MailWise antes de v3.1, ... • http://cybozu.co.jp/products/dl/notice/detail/0019.html • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •