Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-20750 State: PUBLISHED Published: 2021-06-28T00:50:39 Last Updated: 2024-08-03T17:53:21.998Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in EC-CUBE EC-CUBE 3.0.0 to 3.0.18-p2 (EC-CUBE 3 series) and EC-CUBE 4.0.0 to 4.0.5-p1 (EC-CUBE 4 series) allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/weakness.php?id=79 - https://www.ec-cube.net/info/weakness/weakness.php?id=78 - https://jvn.jp/
c-cube.net/info/weakness/weakness.php?id=79 - https://www.ec-cube.net/info/weakness/weakness.php?id=78 - https://jvn.jp/en/jp/JVN95292458/index.html
CVE ID: CVE-2021-20751 State: PUBLISHED Published: 2021-06-28T00:50:41 Last Updated: 2024-08-03T17:53:22.017Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in EC-CUBE EC-CUBE 4.0.0 to 4.0.5-p1 (EC-CUBE 4 series) allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/weakness.php?id=78 - https://jvn.jp/en/jp/JVN95292458/index.html
CVE ID: CVE-2021-20752 State: PUBLISHED Published: 2021-07-01T05:45:15 Last Updated: 2024-08-03T17:53:21.976Z Vendors: IKaIKa Software Co.,LTD. Products: IkaIka RSS Reader Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in IkaIka RSS Reader all versions allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN15185184/index.html
CVE ID: CVE-2021-20753 State: PUBLISHED Published: 2021-08-18T05:35:49 Last Updated: 2024-08-03T17:53:22.023Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20754 State: PUBLISHED Published: 2021-08-18T05:35:51 Last Updated: 2024-08-03T17:53:22.053Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20755 State: PUBLISHED Published: 2021-08-18T05:35:53 Last Updated: 2024-08-03T17:53:22.065Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Viewing restrictions bypass Description: Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20756 State: PUBLISHED Published: 2021-08-18T05:35:54 Last Updated: 2024-08-03T17:53:22.061Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Viewing restrictions bypass Description: Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20757 State: PUBLISHED Published: 2021-08-18T05:35:56 Last Updated: 2024-08-03T17:53:22.116Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Operational restrictions bypass Description: Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20758 State: PUBLISHED Published: 2021-08-18T05:35:57 Last Updated: 2024-08-03T17:53:22.087Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authentication of administrators and perform an arbitrary operation via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20759 State: PUBLISHED Published: 2021-08-18T05:35:59 Last Updated: 2024-08-03T17:53:22.051Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Operational restrictions bypass Description: Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20760 State: PUBLISHED Published: 2021-08-18T05:36:01 Last Updated: 2024-08-03T17:53:22.102Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the appropriate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20761 State: PUBLISHED Published: 2021-08-18T05:36:02 Last Updated: 2024-08-03T17:53:22.095Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege to alter the data of E-mail without the appropriate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20762 State: PUBLISHED Published: 2021-08-18T05:36:04 Last Updated: 2024-08-03T17:53:22.067Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail without the appropriate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20763 State: PUBLISHED Published: 2021-08-18T05:36:05 Last Updated: 2024-08-03T17:53:22.118Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Operational restrictions bypass Description: Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the appropriate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20764 State: PUBLISHED Published: 2021-08-18T05:36:07 Last Updated: 2024-08-03T17:53:22.099Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20765 State: PUBLISHED Published: 2021-08-18T05:36:09 Last Updated: 2024-08-03T17:53:22.170Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20766 State: PUBLISHED Published: 2021-08-18T05:36:10 Last Updated: 2024-08-03T17:53:22.093Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20767 State: PUBLISHED Published: 2021-08-18T05:36:12 Last Updated: 2024-08-03T17:53:22.163Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20768 State: PUBLISHED Published: 2021-08-18T05:36:13 Last Updated: 2024-08-03T17:53:22.105Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Operational restrictions bypass Description: Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to delete the data of Scheduler and MultiReport without the appropriate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20769 State: PUBLISHED Published: 2021-08-18T05:36:15 Last Updated: 2024-08-03T17:53:22.153Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20770 State: PUBLISHED Published: 2021-08-18T05:36:16 Last Updated: 2024-08-03T17:53:22.066Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20771 State: PUBLISHED Published: 2021-08-18T05:36:18 Last Updated: 2024-08-03T17:53:22.117Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20772 State: PUBLISHED Published: 2021-08-18T05:36:20 Last Updated: 2024-08-03T17:53:22.116Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Information Disclosure Description: Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the title of Bulletin without the viewing privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20773 State: PUBLISHED Published: 2021-08-18T05:36:21 Last Updated: 2024-08-03T17:53:22.159Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Vulnerability where information is deleted unintentionally Description: There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0, which may allow a remote authenticated attacker to delete the route information Workflow without the appropriate privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20774 State: PUBLISHED Published: 2021-08-18T05:36:23 Last Updated: 2024-08-03T17:53:22.071Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20775 State: PUBLISHED Published: 2021-08-18T05:36:24 Last Updated: 2024-08-03T17:53:22.133Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the data of Comment and Space without the viewing privilege. Additional Analyst Notes: - CVE Program Container: References: - https://cs.cybozu.co.jp/2021/007206.html - https://jvn.jp/en/jp/JVN54794245/index.html
CVE ID: CVE-2021-20776 State: PUBLISHED Published: 2021-07-07T07:05:28 Last Updated: 2024-08-03T17:53:22.094Z Vendors: A-Stage Inc. Products: SCT-40CM01SR and AT-40CM01SR Problem Types: Improper Authentication Description: Improper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to bypass access restriction and execute an arbitrary command via telnet. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN21636825/index.html
CVE ID: CVE-2021-20777 State: PUBLISHED Published: 2021-07-07T07:05:29 Last Updated: 2024-08-03T17:53:22.082Z Vendors: G.U. CO., LTD. Products: GU App for Android Problem Types: Improper Authorization in Handler for Custom URL Scheme Description: Improper authorization in handler for custom URL scheme vulnerability in GU App for Android versions from 4.8.0 to 5.0.2 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN25850723/index.html
CVE ID: CVE-2021-20778 State: PUBLISHED Published: 2021-07-01T05:45:17 Last Updated: 2024-08-03T17:53:22.168Z Vendors: EC-CUBE CO.,LTD. Products: EC-CUBE Problem Types: Improper Access Control Description: Improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series) allows a remote attacker to bypass access restriction and obtain sensitive information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.ec-cube.net/info/weakness/weakness.php?id=80 - https://jvn.jp/en/jp/JVN57942445/index.html - http://jvn.jp/en/jp/JVN57942445/index.html
CVE ID: CVE-2021-20779 State: PUBLISHED Published: 2021-07-07T07:05:31 Last Updated: 2024-08-03T17:53:22.371Z Vendors: codemiq Products: WordPress Email Template Designer - WP HTML Mail Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in WordPress Email Template Designer - WP HTML Mail versions prior to 3.0.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/wp-html-mail/ - https://codemiq.com/en/ - https://jvn.jp/en/jp/JVN42880365/index.html
CVE ID: CVE-2021-20780 State: PUBLISHED Published: 2021-07-07T07:05:33 Last Updated: 2024-08-03T17:53:22.382Z Vendors: realmag777 Products: WPCS - WordPress Currency Switcher Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/currency-switcher/ - https://pluginus.net/ - https://jvn.jp/en/jp/JVN91372527/index.html
CVE ID: CVE-2021-20781 State: PUBLISHED Published: 2021-07-14T01:20:26 Last Updated: 2024-08-03T17:53:22.558Z Vendors: realmag777 Products: WordPress Meta Data Filter & Taxonomies Filter Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions prior to v.2.2.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wp-filter.com/update-v-2-2-8-v-1-2-8/ - https://wp-filter.com/ - https://jvn.jp/en/jp/JVN48413554/index.html
CVE ID: CVE-2021-20782 State: PUBLISHED Published: 2021-07-14T01:20:28 Last Updated: 2024-08-03T17:53:22.376Z Vendors: Tips and Tricks HQ Products: Software License Manager Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/software-license-manager/ - https://www.tipsandtricks-hq.com/software-license-manager-plugin-for-wordpress - https://jvn.jp/en/jp/JVN89054582/index.html
CVE ID: CVE-2021-20783 State: PUBLISHED Published: 2021-07-28T00:45:24 Last Updated: 2024-08-03T17:53:22.630Z Vendors: SoftBank Products: Optical BB unit E-WMTA2.3 Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN34364599/index.html
CVE ID: CVE-2021-20784 State: PUBLISHED Published: 2021-07-14T01:20:29 Last Updated: 2024-12-03T01:14:05.653Z Severity: MEDIUM (CVSS 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: voidtools Products: Everything Problem Types: CWE-644 Description: HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website that uses the product. Additional Analyst Notes: - CVE Program Container: References: - https://www.voidtools.com/downloads/ - https://www.voidtools.com/ - https://jvn.jp/en/jp/JVN68971465/
CVE ID: CVE-2021-20785 State: PUBLISHED Published: 2021-07-28T00:45:26 Last Updated: 2024-08-03T17:53:22.640Z Vendors: Japan Total System Co.,Ltd. Products: GroupSession Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to inject an arbitrary script by sending a specially crafted request to a specific URL. Additional Analyst Notes: - CVE Program Container: References: - https://groupsession.jp/info/info-news
a specific URL. Additional Analyst Notes: - CVE Program Container: References: - https://groupsession.jp/info/info-news/security202107 - https://jvn.jp/en/jp/JVN86026700/index.html
CVE ID: CVE-2021-20786 State: PUBLISHED Published: 2021-07-28T00:45:27 Last Updated: 2024-08-03T17:53:22.490Z Vendors: Japan Total System Co.,Ltd. Products: GroupSession Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to hijack the authentication of administrators via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://groupsession.jp/info/in
specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://groupsession.jp/info/info-news/security202107 - https://jvn.jp/en/jp/JVN86026700/index.html
CVE ID: CVE-2021-20787 State: PUBLISHED Published: 2021-07-28T00:45:29 Last Updated: 2024-08-03T17:53:22.442Z Vendors: Japan Total System Co.,Ltd. Products: GroupSession Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to inject an arbitrary script by sending a specially crafted request to a specific URL. Additional Analyst Notes: - CVE Program Container: References: - https://groupsession.jp/info/info-news
CVE ID: CVE-2021-20788 State: PUBLISHED Published: 2021-07-28T00:45:31 Last Updated: 2024-08-03T17:53:22.474Z Vendors: Japan Total System Co.,Ltd. Products: GroupSession Problem Types: Server-Side Request Forgery (SSRF) Description: Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote authenticated attacker to conduct a port scan from the product and/or obtain information from the internal Web server. Additional Analyst Notes: - CVE Program Container: Re
he product and/or obtain information from the internal Web server. Additional Analyst Notes: - CVE Program Container: References: - https://groupsession.jp/info/info-news/security202107 - https://jvn.jp/en/jp/JVN86026700/index.html
CVE ID: CVE-2021-20789 State: PUBLISHED Published: 2021-07-28T00:45:32 Last Updated: 2024-08-03T17:53:22.634Z Vendors: Japan Total System Co.,Ltd. Products: GroupSession Problem Types: Open Redirect Description: Open redirect vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack via a specially crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://groupsession.jp/info/info-new
ally crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://groupsession.jp/info/info-news/security202107 - https://jvn.jp/en/jp/JVN86026700/index.html