Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2018-0506 State: PUBLISHED Published: 2018-01-26T16:00:00 Last Updated: 2024-08-05T03:28:11.025Z Vendors: SeeLook Products: Nootka Problem Types: OS Command Injection Description: Nootka 1.4.4 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN10103841/index.html
CVE ID: CVE-2018-0507 State: PUBLISHED Published: 2018-01-26T16:00:00 Last Updated: 2024-08-05T03:28:10.680Z Vendors: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Products: FLET'S VIRUS CLEAR Easy Setup & Application Tool, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in FLET'S VIRUS CLEAR Easy Setup & Application Tool ver.11 and earlier versions, FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool ver.11 and earlier versions allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https:/
a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN26255241/index.html
CVE ID: CVE-2018-0508 State: PUBLISHED Published: 2018-02-01T14:00:00 Last Updated: 2024-08-05T03:28:11.163Z Vendors: kkcal Products: epg search result viewer(kkcald) Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://dbit.web.fc2.com/ - https://jvn.jp/en/jp/JVN91393903/index.html
CVE ID: CVE-2018-0509 State: PUBLISHED Published: 2018-02-01T14:00:00 Last Updated: 2024-08-05T03:28:10.623Z Vendors: kkcal Products: epg search result viewer(kkcald) Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in epg search result viewer (kkcald) 0.7.21 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://dbit.web.fc2.com/ - https://jvn.jp/en/jp/JVN91393903/index.html
CVE ID: CVE-2018-0510 State: PUBLISHED Published: 2018-02-01T14:00:00 Last Updated: 2024-08-05T03:28:10.826Z Vendors: kkcal Products: epg search result viewer(kkcald) Problem Types: Buffer Overflow Description: Buffer overflow in epg search result viewer (kkcald) 0.7.19 and earlier allows remote attackers to perform unintended operations or execute DoS (denial of service) attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://dbit.web.fc2.com/ - https://jvn.jp/en/jp/JVN91393903/index.html
CVE ID: CVE-2018-0511 State: PUBLISHED Published: 2018-02-01T14:00:00 Last Updated: 2024-08-05T03:28:10.649Z Vendors: Jordy Meow Products: WP Retina 2x Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WP Retina 2x prior to version 5.2.2 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/1802137/#file1 - https://jvn.jp/en/jp/JVN30636823/index.html
CVE ID: CVE-2018-0512 State: PUBLISHED Published: 2018-02-08T14:00:00 Last Updated: 2024-08-05T03:28:11.046Z Vendors: I-O DATA DEVICE, INC. Products: IP address setting tool "MagicalFinder" Problem Types: OS Command Injection Description: Devices with IP address setting tool "MagicalFinder" provided by I-O DATA DEVICE, INC. allow authenticated attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN36048131/index.html - http://www.iodata.jp/support/information/2018/magicalfinder/
CVE ID: CVE-2018-0513 State: PUBLISHED Published: 2018-02-08T14:00:00 Last Updated: 2024-08-05T03:28:10.868Z Vendors: MT Systems Co., Ltd. Products: MTS Simple Booking C, MTS Simple Booking Business Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in MTS Simple Booking C, MTS Simple Booking Business version 1.28.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN99312352/index.html - http://mtssb.mt-systems.jp/jvn99312352/
CVE ID: CVE-2018-0514 State: PUBLISHED Published: 2018-02-08T14:00:00 Last Updated: 2024-08-05T03:28:11.191Z Vendors: futomi Co., Ltd. Products: MP Form Mail CGI eCommerce Edition Problem Types: OS Command Injection Description: MP Form Mail CGI eCommerce Edition Ver 2.0.13 and earlier allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN15462187/index.html - http://www.futomi.com/library/mpmailec.html#history
CVE ID: CVE-2018-0515 State: PUBLISHED Published: 2018-02-16T17:00:00 Last Updated: 2024-08-05T03:28:10.921Z Vendors: NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION Products: "FLET'S Azukeru Backup Tool" Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in "FLET'S Azukeru Backup Tool" version 1.5.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://flets.com/azukeru/login/news/info_180213.html - https://jvn.jp/en/jp/JVN04564808/index.html
CVE ID: CVE-2018-0516 State: PUBLISHED Published: 2018-02-16T17:00:00 Last Updated: 2024-08-05T03:28:11.195Z Vendors: NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION Products: FLET'S v4 / v6 address selection tool Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in FLET'S v4 / v6 address selection tool allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN87403477/index.html - http://flets-w.com/topics/2018/20180207a.html
CVE ID: CVE-2018-0517 State: PUBLISHED Published: 2018-02-08T14:00:00 Last Updated: 2024-08-05T03:28:11.086Z Vendors: KDDI CORPORATION Products: Anshin net security for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN70615027/index.html
CVE ID: CVE-2018-0518 State: PUBLISHED Published: 2018-02-23T15:00:00 Last Updated: 2024-08-05T03:28:11.157Z Vendors: LINE Corporation Products: LINE for iOS Problem Types: Fails to verify SSL certificates Description: LINE for iOS version 7.1.3 to 7.1.5 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://linecorp.com/en/security/article/136 - https://jvn.jp/en/jp/JVN75453852/index.html
CVE ID: CVE-2018-0519 State: PUBLISHED Published: 2018-02-23T15:00:00 Last Updated: 2024-08-05T03:28:11.070Z Vendors: FUJI SOFT INCORPORATED Products: FS010W Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN83834277/index.html
CVE ID: CVE-2018-0520 State: PUBLISHED Published: 2018-02-23T15:00:00 Last Updated: 2024-08-05T03:28:11.092Z Vendors: FUJI SOFT INCORPORATED Products: FS010W Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in FS010W firmware FS010W_00_V1.3.0 and earlier allows an attacker to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN83834277/index.html
CVE ID: CVE-2018-0521 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T03:28:11.054Z Vendors: BUFFALO INC. Products: WXR-1900DHP2 Problem Types: Authentication bypass Description: Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://buffalo.jp/support_s/s20180223.html - https://jvn.jp/en/jp/JVN97144273/index.html
CVE ID: CVE-2018-0522 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T03:28:11.098Z Vendors: BUFFALO INC. Products: WXR-1900DHP2 Problem Types: Buffer Overflow Description: Buffer overflow in Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary code via a specially crafted file. Additional Analyst Notes: - CVE Program Container: References: - http://buffalo.jp/support_s/s20180223.html - https://jvn.jp/en/jp/JVN97144273/index.html
CVE ID: CVE-2018-0523 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T03:28:11.129Z Vendors: BUFFALO INC. Products: WXR-1900DHP2 Problem Types: OS Command Injection Description: Buffalo WXR-1900DHP2 firmware Ver.2.48 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://buffalo.jp/support_s/s20180223.html - https://jvn.jp/en/jp/JVN97144273/index.html
CVE ID: CVE-2018-0524 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T03:28:11.125Z Vendors: Jubatus Community Products: Jubatus Problem Types: Remote code execution Description: Jubatus 1.0.2 and earlier allows remote code execution via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jubatus/jubatus/blob/master/ChangeLog.rst - https://jvn.jp/en/jp/JVN56132776/index.html
CVE ID: CVE-2018-0525 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T03:28:11.124Z Vendors: Jubatus Community Products: Jubatus Problem Types: Directory traversal Description: Directory traversal vulnerability in Jubatus 1.0.2 and earlier allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jubatus/jubatus/blob/master/ChangeLog.rst - https://jvn.jp/en/jp/JVN56132776/index.html
CVE ID: CVE-2018-0526 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 10.0.0 to 10.7.0 allow remote attackers to display an image located in an external server via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN51737843/index.html - https://support.cybozu.com/ja-jp/article/10030
CVE ID: CVE-2018-0527 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.177Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/10029 - http://jvn.jp/en/jp/JVN51737843/index.html
CVE ID: CVE-2018-0528 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.059Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Authentication bypass Description: Cybozu Office 10.0.0 to 10.7.0 allows authenticated attackers to bypass authentication to view the schedules that are not permitted to access via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9812 - http://jvn.jp/en/jp/JVN51737843/index.html
CVE ID: CVE-2018-0529 State: PUBLISHED Published: 2018-06-26T14:00:00 Last Updated: 2024-08-05T03:28:11.191Z Vendors: Cybozu, Inc. Products: Cybozu Office Problem Types: Denial-of-service (DoS) Description: Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/10052 - http://jvn.jp/en/jp/JVN51737843/index.html
CVE ID: CVE-2018-0530 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.188Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: SQL Injection Description: SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9326 - http://jvn.jp/en/jp/JVN65268217/index.html
CVE ID: CVE-2018-0531 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.181Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notification settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9349 - http://jvn.jp/en/jp/JVN65268217/index.html
CVE ID: CVE-2018-0532 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.154Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9378 - http://jvn.jp/en/jp/JVN65268217/index.html
CVE ID: CVE-2018-0533 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.146Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9375 - http://jvn.jp/en/jp/JVN65268217/index.html
CVE ID: CVE-2018-0534 State: PUBLISHED Published: 2018-03-22T13:00:00 Last Updated: 2024-08-05T03:28:11.159Z Vendors: FlaFla... Products: ArsenoL Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in ArsenoL Version 0.5 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN30864198/index.html
CVE ID: CVE-2018-0535 State: PUBLISHED Published: 2018-03-22T13:00:00 Last Updated: 2024-08-05T03:28:11.113Z Vendors: Kagaminokuni Products: PHP 2chBBS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in PHP 2chBBS version bbs18c allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN48774168/index.html
CVE ID: CVE-2018-0536 State: PUBLISHED Published: 2018-03-22T13:00:00 Last Updated: 2024-08-05T03:28:11.201Z Vendors: Gundam Cult QQQ Products: QQQ SYSTEMS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN64990648/index.html
CVE ID: CVE-2018-0537 State: PUBLISHED Published: 2018-03-22T13:00:00 Last Updated: 2024-08-05T03:28:11.112Z Vendors: Gundam Cult QQQ Products: QQQ SYSTEMS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via quiz_op.cgi. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN96655441/index.html
CVE ID: CVE-2018-0538 State: PUBLISHED Published: 2018-03-22T13:00:00 Last Updated: 2024-08-05T03:28:11.121Z Vendors: Gundam Cult QQQ Products: QQQ SYSTEMS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in QQQ SYSTEMS ver2.24 allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN46471407/index.html
CVE ID: CVE-2018-0539 State: PUBLISHED Published: 2018-03-22T13:00:00 Last Updated: 2024-08-05T03:28:11.169Z Vendors: Gundam Cult QQQ Products: QQQ SYSTEMS Problem Types: Command Injection Description: QQQ SYSTEMS version 2.24 allows an attacker to execute arbitrary commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN22536871/index.html
CVE ID: CVE-2018-0540 State: PUBLISHED Published: 2018-03-22T13:00:00 Last Updated: 2024-08-05T03:28:11.142Z Vendors: K_OKADA Products: ViX Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in ViX version 2.21.148.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN56764650/index.html
CVE ID: CVE-2018-0541 State: PUBLISHED Published: 2018-03-22T13:00:00 Last Updated: 2024-08-05T03:28:11.179Z Vendors: Hisayuki Nomura Products: Tiny FTP Daemon Problem Types: Buffer Overflow Description: Buffer overflow in Tiny FTP Daemon Ver0.52d allows an attacker to cause a denial-of-service (DoS) condition or execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN92259864/index.html
CVE ID: CVE-2018-0542 State: PUBLISHED Published: 2018-03-22T13:00:00 Last Updated: 2024-08-05T03:28:11.121Z Vendors: LunarNight Laboratory Products: WebProxy Problem Types: Directory traversal Description: Directory traversal vulnerability in WebProxy version 1.7.8 allows an attacker to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN87226910/index.html
CVE ID: CVE-2018-0543 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T03:28:11.166Z Vendors: WoodyBells Products: Jtrim Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Jtrim 1.53c and earlier (Installer) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://woodybells.com/jtrim.html - https://jvn.jp/en/jp/JVN71816327/index.html
CVE ID: CVE-2018-0544 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T03:28:11.151Z Vendors: WoodyBells Products: WinShot Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in WinShot 1.53a and earlier (Installer) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://woodybells.com/winshot.html - https://jvn.jp/en/jp/JVN01837169/index.html
CVE ID: CVE-2018-0545 State: PUBLISHED Published: 2018-04-09T13:00:00 Last Updated: 2024-08-05T03:28:11.198Z Vendors: LXR Project Products: LXR Problem Types: OS Command Injection Description: LXR version 1.0.0 to 2.3.0 allows remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN72589538/index.html - http://lxr.sourceforge.net/en/bugsandlimits.php
CVE ID: CVE-2018-0546 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T03:28:11.126Z Vendors: Soflyy Products: WP All Import Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.6 for WordPress allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://plugins.trac.wordpress.org/changeset/1742744/ - https://wordpress.org/plugins/wp-all-import/#developers - https://jvn.jp/en/jp/JVN33527174/index.html
CVE ID: CVE-2018-0547 State: PUBLISHED Published: 2018-03-09T16:00:00 Last Updated: 2024-08-05T03:28:11.085Z Vendors: Soflyy Products: WP All Import Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WP All Import plugin prior to version 3.4.7 for WordPress allows an attacker to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-all-import/#developers - https://jvn.jp/en/jp/JVN60032768/index.html - https://plugins.trac.wordpress.org/changeset/1827741/
CVE ID: CVE-2018-0548 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.143Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9886 - http://jvn.jp/en/jp/JVN65268217/index.html
CVE ID: CVE-2018-0549 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.157Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN65268217/index.html - https://support.cybozu.com/ja-jp/article/10058
CVE ID: CVE-2018-0550 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.097Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 3.5.0 to 4.6.1 allows remote authenticated attackers to bypass access restriction to view the closed title of "Cabinet" via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/10056 - http://jvn.jp/en/jp/JVN65268217/index.html
CVE ID: CVE-2018-0551 State: PUBLISHED Published: 2018-04-16T13:00:00 Last Updated: 2024-08-05T03:28:11.193Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.1 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/10211 - http://jvn.jp/en/jp/JVN65268217/index.html