Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

cybozu garoon 3.7.2 vulnerabilities and exploits

(subscribe to this query)
578
VMScore
CVE-2013-6931
SQL injection vulnerability in the API in Cybozu Garoon 3.7.x prior to 3.7.3 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2013-6929.
Cybozu Garoon 3.7.0Cybozu Garoon 3.7.1Cybozu Garoon 3.7.2
356
VMScore
CVE-2016-1192
Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 up to and including 4.2 allows remote authenticated users to read a log file via unspecified vectors.
Cybozu Garoon 4.0.1Cybozu Garoon 3.7.5Cybozu Garoon 3.7.4Cybozu Garoon 3.7.3Cybozu Garoon 3.7.2Cybozu Garoon 3.7.1Cybozu Garoon 3.7.0Cybozu Garoon 4.2.0Cybozu Garoon 4.0.3Cybozu Garoon 4.0.2Cybozu Garoon 4.0.0
445
VMScore
CVE-2016-1193
Cybozu Garoon 3.7 up to and including 4.2 allows remote malicious users to obtain sensitive email-reading information via unspecified vectors.
Cybozu Garoon 3.7.2Cybozu Garoon 3.7.1Cybozu Garoon 3.7.0Cybozu Garoon 4.2.0Cybozu Garoon 4.0.3Cybozu Garoon 4.0.2Cybozu Garoon 4.0.1Cybozu Garoon 3.7.5Cybozu Garoon 3.7.3Cybozu Garoon 4.0.0Cybozu Garoon 3.7.4
312
VMScore
CVE-2017-2255
Cross-site scripting vulnerability in Cybozu Garoon 3.7.0 to 4.2.5 allows an malicious user to inject arbitrary web script or HTML via "Rich text" function of the application "Space".
Cybozu Garoon 3.7.3Cybozu Garoon 4.0.3Cybozu Garoon 4.2.1Cybozu Garoon 4.2.2Cybozu Garoon 4.2.4Cybozu Garoon 4.0.1Cybozu Garoon 4.2.0Cybozu Garoon 3.7.0Cybozu Garoon 3.7.1Cybozu Garoon 3.7.2Cybozu Garoon 3.7.4Cybozu Garoon 4.2.3Cybozu Garoon 4.2.5Cybozu Garoon 3.7.5Cybozu Garoon 4.0.2
534
VMScore
CVE-2014-1989
Cybozu Garoon 3.0 up to and including 3.7 SP3 allows remote authenticated users to bypass intended access restrictions and delete schedule information via unspecified API calls.
Cybozu Garoon 3.0.0Cybozu Garoon 3.0.1Cybozu Garoon 3.0.2Cybozu Garoon 3.7Cybozu Garoon 3.7.0Cybozu Garoon 3.7.1Cybozu Garoon 3.7.2Cybozu Garoon 3.1.0Cybozu Garoon 3.1.2Cybozu Garoon 3.5.3Cybozu Garoon 3.5.5Cybozu Garoon 3.1.3Cybozu Garoon 3.5.0Cybozu Garoon 3.5.1Cybozu Garoon 3.5.2Cybozu Garoon 3.0.3Cybozu Garoon 3.1.1Cybozu Garoon 3.5.4
623
VMScore
CVE-2015-5649
Cybozu Garoon 3.x up to and including 3.7.5 and 4.x up to and including 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by lev...
Cybozu Garoon 3.5.3Cybozu Garoon 3.5.4Cybozu Garoon 3.5.5Cybozu Garoon 3.7Cybozu Garoon 3.0.3Cybozu Garoon 3.1.0Cybozu Garoon 3.1.1Cybozu Garoon 3.1.2Cybozu Garoon 3.7.3Cybozu Garoon 4.0.0Cybozu Garoon 4.0.3Cybozu Garoon 3.0.0Cybozu Garoon 3.0.2Cybozu Garoon 3.1.3Cybozu Garoon 3.5.1Cybozu Garoon 3.7.1Cybozu Garoon 3.0.1Cybozu Garoon 3.5.0Cybozu Garoon 3.5.2Cybozu Garoon 3.7.0Cybozu Garoon 3.7.2
356
VMScore
CVE-2016-1188
Cybozu Garoon 3.x and 4.x prior to 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors.
Cybozu Garoon 4.2.0Cybozu Garoon 4.0.3Cybozu Garoon 4.0.2Cybozu Garoon 4.0.1Cybozu Garoon 3.5.0Cybozu Garoon 3.1.3Cybozu Garoon 3.1.2Cybozu Garoon 3.1.1Cybozu Garoon 3.7.2Cybozu Garoon 3.7.1Cybozu Garoon 3.7.0Cybozu Garoon 3.5.5Cybozu Garoon 4.0.0Cybozu Garoon 3.7.4Cybozu Garoon 3.5.3Cybozu Garoon 3.5.1Cybozu Garoon 3.1.0Cybozu Garoon 3.7.5Cybozu Garoon 3.7.3Cybozu Garoon 3.5.4Cybozu Garoon 3.5.2
356
VMScore
CVE-2016-1190
Cybozu Garoon 3.1 up to and including 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors.
Cybozu Garoon 3.7.4Cybozu Garoon 3.7.3Cybozu Garoon 3.7.2Cybozu Garoon 3.7.1Cybozu Garoon 4.2.0Cybozu Garoon 4.0.3Cybozu Garoon 3.5.2Cybozu Garoon 3.5.1Cybozu Garoon 3.5.0Cybozu Garoon 3.1.3Cybozu Garoon 4.0.1Cybozu Garoon 3.7.5Cybozu Garoon 3.7.0Cybozu Garoon 3.5.4Cybozu Garoon 3.1.1Cybozu Garoon 4.0.2Cybozu Garoon 4.0.0Cybozu Garoon 3.5.5Cybozu Garoon 3.5.3Cybozu Garoon 3.1.2Cybozu Garoon 3.1.0
356
VMScore
CVE-2017-2254
Cybozu Garoon 3.5.0 to 4.2.5 allows an malicious user to cause a denial of service in the application menu's edit function via specially crafted input
Cybozu Garoon 4.2.3Cybozu Garoon 4.2.4Cybozu Garoon 4.2.5Cybozu Garoon 3.5.0Cybozu Garoon 4.2.1Cybozu Garoon 3.5.5Cybozu Garoon 3.7.0Cybozu Garoon 3.7.1Cybozu Garoon 3.7.2Cybozu Garoon 4.0.3Cybozu Garoon 3.5.2Cybozu Garoon 3.5.4Cybozu Garoon 3.7.4Cybozu Garoon 4.0.1Cybozu Garoon 4.2.0Cybozu Garoon 3.7.3Cybozu Garoon 4.2.2Cybozu Garoon 3.5.1Cybozu Garoon 3.5.3Cybozu Garoon 3.7.5Cybozu Garoon 4.0.2
490
VMScore
CVE-2016-1189
Cybozu Garoon 3.x and 4.x prior to 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet via unspecified vectors.
Cybozu Garoon 3.5.5Cybozu Garoon 3.5.4Cybozu Garoon 3.5.3Cybozu Garoon 3.5.2Cybozu Garoon 4.0.1Cybozu Garoon 4.0.0Cybozu Garoon 3.7.5Cybozu Garoon 3.7.4Cybozu Garoon 3.1.1Cybozu Garoon 3.1.0Cybozu Garoon 4.2.0Cybozu Garoon 4.0.2Cybozu Garoon 3.7.3Cybozu Garoon 3.7.1Cybozu Garoon 3.5.0Cybozu Garoon 3.1.2Cybozu Garoon 4.0.3Cybozu Garoon 3.7.2Cybozu Garoon 3.7.0Cybozu Garoon 3.5.1Cybozu Garoon 3.1.3
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook