Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-4869 State: PUBLISHED Published: 2017-04-17T15:00:00 Last Updated: 2024-08-06T00:46:38.556Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97715 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000191.html - http://jvn.jp/en/jp/JVN09736331/index.html - https://support.cybozu.com/ja-jp/article/9428
CVE ID: CVE-2016-4870 State: PUBLISHED Published: 2017-04-17T15:00:00 Last Updated: 2024-08-06T00:46:39.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to inject arbitrary web script or HTML via the Schedule function. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93281 - https://support.cybozu.com/ja-jp/article/9427 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000186.html - http://jvn.jp/en/jp/JVN06726266/index.html
CVE ID: CVE-2016-4871 State: PUBLISHED Published: 2017-04-17T15:00:00 Last Updated: 2024-08-06T00:46:39.435Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97716 - https://support.cybozu.com/ja-jp/article/9426 - http://jvn.jp/en/jp/JVN10092452/index.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000192.html
CVE ID: CVE-2016-4872 State: PUBLISHED Published: 2017-04-17T15:00:00 Last Updated: 2024-08-06T00:46:38.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to bypass access restrictions to view the names of unauthorized projects via a breadcrumb trail. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9424 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000188.html - http://www.securityfocus.com/bid/93461 - http://jvn.jp/en/jp/JVN07148816/index.html
CVE ID: CVE-2016-4873 State: PUBLISHED Published: 2017-04-17T15:00:00 Last Updated: 2024-08-06T00:46:38.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.0.0 to 10.4.0 allows remote authenticated attackers to execute unintended operations via the Project function. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9442 - http://www.securityfocus.com/bid/93461 - http://jvn.jp/en/jp/JVN07148816/index.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000189.html
CVE ID: CVE-2016-4874 State: PUBLISHED Published: 2017-04-17T15:00:00 Last Updated: 2024-08-06T00:46:38.544Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Office 9.0.0 through 10.4.0 allows remote attackers to conduct a "reflected file download" attack. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000193.html - https://support.cybozu.com/ja-jp/article/9434 - http://jvn.jp/en/jp/JVN11288252/index.html - http://www.securityfocus.com/bid/97719
CVE ID: CVE-2016-4875 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T00:46:38.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in the IVYWE (1) Assist plugin before 1.1.2.test20160906, (2) dataBox plugin before 0.0.0.20160906, and (3) userBox plugin before 0.0.0.20160906 for Geeklog allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ivywe/geeklog-ivywe/commit/3cdb4ebca5746ff1e02b7e434d5722044d1d09d1 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000167.html - http://jvn.jp/en/jp/
ebca5746ff1e02b7e434d5722044d1d09d1 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000167.html - http://jvn.jp/en/jp/JVN46087986/index.html - https://github.com/ivywe/geeklog-ivywe/commit/fe20a1bccdfec96125ab3d8dbee6ccbd0767c0be - http://www.securityfocus.com/bid/93123
CVE ID: CVE-2016-4876 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.229Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators to execute arbitrary PHP code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217 - http://basercms.net/security/JVN92765814
CVE ID: CVE-2016-4877 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.687Z Vendors: baserCMS Users Community Products: baserCMS plugin Mail Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4878 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:38.553Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4879 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.316Z Vendors: baserCMS Users Community Products: baserCMS plugin Mail Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4880 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.373Z Vendors: baserCMS Users Community Products: baserCMS plugin Blog Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4881 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.285Z Vendors: baserCMS Users Community Products: baserCMS plugin Blog Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4882 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.381Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4883 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.208Z Vendors: baserCMS Users Community Products: baserCMS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in baserCMS version 3.0.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4884 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.427Z Vendors: baserCMS Users Community Products: baserCMS plugin Blog Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Blog version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4885 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.832Z Vendors: baserCMS Users Community Products: baserCMS plugin Feed Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Feed version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4886 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.334Z Vendors: baserCMS Users Community Products: baserCMS plugin Mail Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Mail version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4887 State: PUBLISHED Published: 2017-05-12T18:00:00 Last Updated: 2024-08-06T00:46:39.465Z Vendors: baserCMS Users Community Products: baserCMS plugin Uploader Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in baserCMS plugin Uploader version 3.0.10 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://basercms.net/security/JVN92765814 - https://jvn.jp/en/jp/JVN92765814/index.html - http://www.securityfocus.com/bid/93217
CVE ID: CVE-2016-4888 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T00:46:39.808Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in ZOHO ManageEngine ServiceDesk Plus before 9.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93214 - http://jvn.jp/en/jp/JVN50347324/index.html - https://www.manageengine.com/products/service-desk/readme-9.2.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000169.html
CVE ID: CVE-2016-4889 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T00:46:39.264Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have unspecified impact by leveraging failure to restrict access to unknown functions. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000170.html - https://www.manageengine.com/products/service-desk/readme-9.0.html - http://www.securityfocus.com/bid/93215 - http://jvn.jp/en/jp/JVN89726415/index.html
CVE ID: CVE-2016-4890 State: PUBLISHED Published: 2017-04-14T18:00:00 Last Updated: 2024-08-06T00:46:39.266Z Vendors: n/a Products: n/a Problem Types: n/a Description: ZOHO ManageEngine ServiceDesk Plus before 9.2 uses an insecure method for generating cookies, which makes it easier for attackers to obtain sensitive password information by leveraging access to a cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93216 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000171.html - http://jvn.jp/en/jp/JVN72559412/index.html - https://www.manageengine.com/products/service-desk/readme-9.2.html
CVE ID: CVE-2016-4891 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T00:46:39.239Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in SetsucoCMS all versions allows remote attackers to hijack the authentication of an administrator to change settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000196.html - http://www.securityfocus.com/bid/93475 - http://jvn.jp/en/jp/JVN80157683/index.html
CVE ID: CVE-2016-4892 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T00:46:39.228Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting vulnerability in SetsucoCMS all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000197.html - http://jvn.jp/en/jp/JVN80157683/index.html - http://www.securityfocus.com/bid/93475
CVE ID: CVE-2016-4893 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T00:46:39.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the SetsucoCMS all versions allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93475 - http://jvn.jp/en/jp/JVN80157683/index.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000198.html
CVE ID: CVE-2016-4894 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T00:46:39.305Z Vendors: n/a Products: n/a Problem Types: n/a Description: SetsucoCMS all versions allows remote attackers to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93475 - http://jvn.jp/en/jp/JVN80157683/index.html - http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-000199.html
CVE ID: CVE-2016-4895 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T00:46:39.448Z Vendors: n/a Products: n/a Problem Types: n/a Description: SetsucoCMS all versions allows remote authenticated attackers to conduct code injection attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/93475 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000200.html - http://jvn.jp/en/jp/JVN80157683/index.html
CVE ID: CVE-2016-4896 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T00:46:39.449Z Vendors: n/a Products: n/a Problem Types: n/a Description: SetsucoCMS all versions does not properly manage sessions, which allows remote attackers to disclose or alter unauthorized information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000201.html - http://www.securityfocus.com/bid/93475 - http://jvn.jp/en/jp/JVN80157683/index.html
CVE ID: CVE-2016-4897 State: PUBLISHED Published: 2017-04-12T22:00:00 Last Updated: 2024-08-06T00:46:39.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in (1) filter/save_forward.cgi, (2) filter/save.cgi, (3) /man/search.cgi in Usermin before 1.690. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN32504719/index.html - http://www.securityfocus.com/bid/93477 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000202.html
CVE ID: CVE-2016-4898 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-06T00:46:39.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2016/haavoittuvuus-2016-134.html
CVE ID: CVE-2016-4899 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-06T00:46:39.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: The datamover module in the Linux version of NovaBACKUP DataCenter before 09.06.03.0353 is vulnerable to remote command execution via unspecified attack vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.viestintavirasto.fi/en/cybersecurity/vulnerabilities/2016/haavoittuvuus-2016-134.html
CVE ID: CVE-2016-4900 State: PUBLISHED Published: 2017-05-22T16:00:00 Last Updated: 2024-08-06T00:46:39.234Z Vendors: Evernote Products: Evernote for Windows Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Evernote for Windows versions prior to 6.3 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN03251132/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000206 - http://www.securityfocus.com/bid/93572 - https://evernote.com/security/updates/#win
CVE ID: CVE-2016-4901 State: PUBLISHED Published: 2017-05-22T16:00:00 Last Updated: 2024-08-06T00:46:39.886Z Vendors: National Tax Agency Products: The installer of e-Tax Software Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in The installer of e-Tax Software all versions allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN63012325/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000207 - http://www.e-tax.nta.go.jp/topics/topics_281014.htm - http://www.securityfocus.com/bid/93606
CVE ID: CVE-2016-4902 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T00:46:39.972Z Vendors: Japan Agency for Local Authority Information Systems Products: The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)", The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)", The Public Certification Service for Individuals "The JPKI user's software" Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in The Public Certification Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.0.1 and earlier, The Public Certi
tion Service for Individuals "The JPKI user's software (for Windows 7 and later)" Ver3.0.1 and earlier, The Public Certification Service for Individuals "The JPKI user's software (for Windows Vista)" Ver3.0.1 and earlier and The Public Certification Service for Individuals "The JPKI user's software" Ver2.6 and earlier allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN91002412/index.html - http://www.securityfocus.com/bid/94087
CVE ID: CVE-2016-4903 State: PUBLISHED Published: 2017-05-22T16:00:00 Last Updated: 2024-08-06T00:46:39.469Z Vendors: Olive Design Products: WP-OliveCart, WP-OliveCartPro Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.wp-olivecart.com/news/20160925.html - http://www.securityfocus.com/bid/93790 - https://jvn.jp/en/jp/JVN14567604/index.html
CVE ID: CVE-2016-4904 State: PUBLISHED Published: 2017-05-22T16:00:00 Last Updated: 2024-08-06T00:46:39.864Z Vendors: Olive Design Products: WP-OliveCart, WP-OliveCartPro Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows remote attackers to hijack the authentication of a user to perform unintended operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000209.html - http://www.wp-olivecart.com/news/20160925.html - http://www.securityfocus.com/bid/93790 - http
/JVNDB-2016-000209.html - http://www.wp-olivecart.com/news/20160925.html - http://www.securityfocus.com/bid/93790 - https://jvn.jp/en/jp/JVN14567604/index.html
CVE ID: CVE-2016-4905 State: PUBLISHED Published: 2017-05-22T16:00:00 Last Updated: 2024-08-06T00:46:39.878Z Vendors: Olive Design Products: WP-OliveCart, WP-OliveCartPro Problem Types: SQL Injection Description: SQL injection vulnerability in the WP-OliveCart versions prior to 3.1.3 and WP-OliveCartPro versions prior to 3.1.8 allows attackers with administrator rights to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.wp-olivecart.com/news/20160925.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000210.html - http://www.securityfocus.com/bid/93790 - https://jvn.jp/en/jp/JVN14567604/index.html
CVE ID: CVE-2016-4906 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T00:46:39.522Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94969 - https://support.cybozu.com/ja-jp/article/9511 - https://jvn.jp/en/jp/JVN12281353/index.html
CVE ID: CVE-2016-4907 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T00:46:39.385Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Information Disclosure Description: Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9441 - http://www.securityfocus.com/bid/94965 - https://jvn.jp/en/jp/JVN13218253/index.html