Filtered by vendor Cybozu
Subscriptions
Filtered by product Office
Subscriptions
Total
71 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2019-6023 | 1 Cybozu | 1 Office | 2024-11-21 | 4.3 Medium |
Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to bypass access restriction which may result in obtaining data without access privileges via the application 'Address'. | ||||
CVE-2019-6022 | 1 Cybozu | 1 Office | 2024-11-21 | 6.5 Medium |
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp' function. | ||||
CVE-2018-0704 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via Keitai Screen. | ||||
CVE-2018-0703 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.1 allows remote attackers to delete arbitrary files via HTTP requests. | ||||
CVE-2018-0567 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass access restriction to access and write non-public data via unspecified vectors. | ||||
CVE-2018-0566 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
Cybozu Office 10.0.0 to 10.8.0 allows authenticated attackers to bypass authentication to obtain the schedules without access privilege via unspecified vectors. | ||||
CVE-2018-0565 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.8.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | ||||
CVE-2018-0529 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified vectors. | ||||
CVE-2018-0528 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to access via unspecified vectors. | ||||
CVE-2018-0527 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | ||||
CVE-2018-0526 | 1 Cybozu | 1 Office | 2024-11-21 | N/A |
Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors. |