Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
13.html - https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html - https://www.oracle.com/security-alerts/cpujan2020.html - http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html - http://www.oracle.com/technetwork/security-advisory/cpuoct2017-3236626.html - https://security.netapp.com/advisory/ntap-20180629-0006/ - https://github.com/kawasima/struts1-forever/commit/eda3a79907ed8fcb0387a0496d0cb14332f250e8 - http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html - https://bugzilla.redhat.com/show_bug.cgi?id=1343540 - https://security-tracker.debian.org/tracker/CVE-2016-1182
CVE ID: CVE-2016-1183 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-05T22:48:13.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: NTT Data TERASOLUNA Server Framework for Java(WEB) 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname. Additional Analyst Notes: - CVE Program Container: References: - http://www.fujitsu.com/jp/products/software/resources/condition/security/vulnerabilities/2016/index.html#CVE-2016-1183 - http://jvn.jp/en/jp/JVN74659077/index.html - http://jvnd
dition/security/vulnerabilities/2016/index.html#CVE-2016-1183 - http://jvn.jp/en/jp/JVN74659077/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000098
CVE ID: CVE-2016-1184 State: PUBLISHED Published: 2017-04-21T14:00:00 Last Updated: 2024-08-05T22:48:13.450Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tokyo Star bank App for Android before 1.4 and Tokyo Star bank App for iOS before 1.4 do not validate SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000049.html - http://jvn.jp/en/jp/JVN00272277/index.html - http://www.tokyostarbank.co.jp/important151222.html
CVE ID: CVE-2016-1185 State: PUBLISHED Published: 2016-04-25T18:00:00 Last Updated: 2024-08-05T22:48:13.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Cybozu kintone mobile application 1.x before 1.0.6 for Android allows attackers to discover an authentication token via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN89026267/index.html - http://www.securityfocus.com/bid/96842 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000055 - https://support.cybozu.com/ja-jp/article/9479
CVE ID: CVE-2016-1186 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-05T22:48:13.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/97976 - http://jvn.jp/en/jp/JVN91816422/index.html - https://support.cybozu.com/ja-jp/article/9480 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000056.html
CVE ID: CVE-2016-1187 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-05T22:48:13.497Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9446 - http://jvn.jp/en/jp/JVN11994518/index.html - https://support.cybozu.com/ja-jp/article/9495 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000060.html
CVE ID: CVE-2016-1188 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-05T22:48:13.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to send spoofed e-mail messages via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN18975349/index.html - https://support.cybozu.com/ja-jp/article/8845 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000077 - https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03
CVE ID: CVE-2016-1189 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-05T22:48:13.489Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying a portlet via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN18975349/index.html - https://support.cybozu.com/ja-jp/article/9020 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000093 - https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03
CVE ID: CVE-2016-1190 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-05T22:48:13.496Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon 3.1 through 4.2 allows remote authenticated users to bypass intended restrictions on MultiReport reading via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/8877 - http://jvn.jp/en/jp/JVN18975349/index.html - https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000094
CVE ID: CVE-2016-1191 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-05T22:48:13.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the Files function in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to modify settings via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000078 - http://jvn.jp/en/jp/JVN14749391/index.html - https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03
CVE ID: CVE-2016-1192 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-05T22:48:13.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the logging implementation in Cybozu Garoon 3.7 through 4.2 allows remote authenticated users to read a log file via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN14749391/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000095 - https://garoon.cybozu.co.jp/support/update/package/421sp1.html#03
CVE ID: CVE-2016-1193 State: PUBLISHED Published: 2016-06-25T21:00:00 Last Updated: 2024-08-05T22:48:13.499Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon 3.7 through 4.2 allows remote attackers to obtain sensitive email-reading information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN25765762/index.html - https://support.cybozu.com/ja-jp/article/8919 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000079
CVE ID: CVE-2016-1194 State: PUBLISHED Published: 2017-04-21T14:00:00 Last Updated: 2024-08-05T22:48:13.478Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/8983 - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000080.html - http://jvn.jp/en/jp/JVN26298347/index.html
CVE ID: CVE-2016-1195 State: PUBLISHED Published: 2016-06-19T15:00:00 Last Updated: 2024-08-05T22:48:13.488Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open redirect vulnerability in Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a crafted URL. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/8987 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000081 - http://jvn.jp/en/jp/JVN32218514/index.html
CVE ID: CVE-2016-1196 State: PUBLISHED Published: 2016-06-19T20:00:00 Last Updated: 2024-08-05T22:48:13.483Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN33879831/index.html - https://support.cybozu.com/ja-jp/article/8970 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000082
CVE ID: CVE-2016-1197 State: PUBLISHED Published: 2016-06-19T15:00:00 Last Updated: 2024-08-05T22:48:13.539Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Cybozu Garoon 4.x before 4.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2015-7775. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN37121456/index.html - https://support.cybozu.com/ja-jp/article/9303 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000083
CVE ID: CVE-2016-1198 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-05T22:48:13.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: Photopt for Android before 2.0.1 does not verify SSL certificates. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000050.html - http://jvn.jp/en/jp/JVN11815655/index.html - https://mypocket.ntt.com/photopt/info/info_001.html
CVE ID: CVE-2016-1199 State: PUBLISHED Published: 2016-04-30T10:00:00 Last Updated: 2024-08-05T22:48:13.513Z Vendors: n/a Products: n/a Problem Types: n/a Description: The login page in the management screen in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to bypass intended IP address restrictions via unspecified vectors, a different vulnerability than CVE-2016-1200. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN47473944/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000051 - http://www.ec-cube.net/info/weakness/weakness.php?id=65 - https://www.ec-cube.net/info/weakness/201604/
CVE ID: CVE-2016-1200 State: PUBLISHED Published: 2016-04-30T10:00:00 Last Updated: 2024-08-05T22:48:13.542Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management screen in LOCKON EC-CUBE 3.0.7 through 3.0.9 allows remote authenticated users to bypass intended access restrictions via unspecified vectors, a different vulnerability than CVE-2016-1199. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90503 - http://jvn.jp/en/jp/JVN11458774/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000052 - https://www.ec-cube.net/info/weakness/201604/ - http://www.ec-cube.net/info/weakness/weakness.php?id=66
CVE ID: CVE-2016-1201 State: PUBLISHED Published: 2016-04-30T10:00:00 Last Updated: 2024-08-05T22:48:13.554Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 3.0.0 through 3.0.9 allows remote attackers to hijack the authentication of administrators. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/90515 - http://www.ec-cube.net/info/weakness/weakness.php?id=67 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000053 - http://jvn.jp/en/jp/JVN73776243/index.html - https://www.ec-cube.net/info/weakness/201604/
CVE ID: CVE-2016-1202 State: PUBLISHED Published: 2016-04-25T18:00:00 Last Updated: 2024-08-05T22:48:13.547Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in Atom Electron before 0.33.5 allows local users to gain privileges via a Trojan horse Node.js module in a parent directory of a directory named on a require line. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/electron/electron/commit/9a2e2b365d061ec10cd861391fd5b1344af7194d - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000054 - https://github.com/electron/electron/pull/2976 - http://jvn.jp/en/jp/JVN00324715/index.html
CVE ID: CVE-2016-1203 State: PUBLISHED Published: 2023-10-31T12:38:05.419Z Last Updated: 2024-09-06T20:15:41.041Z Vendors: NetMove Corporation Products: SaAT Netizen installer, SaAT Netizen Problem Types: Improper file verification Description: Improper file verification vulnerability in SaAT Netizen installer ver.1.2.0.424 and earlier, and SaAT Netizen ver.1.2.0.8 (Build427) and earlier allows a remote unauthenticated attacker to conduct a man-in-the-middle attack. A successful exploitation may result in a malicious file being downloaded and executed. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://web-support.saat.jp/hc/ja/articles/44062229
tes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://web-support.saat.jp/hc/ja/articles/4406222933785 - https://jvn.jp/en/vu/JVNVU97339542/
CVE ID: CVE-2016-1205 State: PUBLISHED Published: 2016-04-28T01:00:00 Last Updated: 2024-08-05T22:48:13.457Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the shiro8 (1) category_freearea_ addition_plugin plugin 1.0 and (2) itemdetail_freearea_ addition_plugin plugin 1.0 for EC-CUBE allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN63384827/index.html - http://www.securityfocus.com/bid/88872 - http://www.ec-cube.net/products/detail.php?product_id=505 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000057
CVE ID: CVE-2016-1206 State: PUBLISHED Published: 2016-05-14T16:00:00 Last Updated: 2024-08-05T22:48:13.510Z Vendors: n/a Products: n/a Problem Types: n/a Description: The WPS implementation on I-O DATA DEVICE WN-GDN/R3, WN-GDN/R3-C, WN-GDN/R3-S, and WN-GDN/R3-U devices does not limit PIN guesses, which allows remote attackers to obtain network access via a brute-force attack. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN25674893/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000061 - http://www.iodata.jp/support/information/2016/wn-gdnr3_bfa/
CVE ID: CVE-2016-1207 State: PUBLISHED Published: 2016-05-14T16:00:00 Last Updated: 2024-08-05T22:48:13.578Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability on I-O DATA DEVICE WN-G300R devices with firmware 1.12 and earlier, WN-G300R2 devices with firmware 1.12 and earlier, and WN-G300R3 devices with firmware 1.01 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN22978346/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000062 - http://www.iodata.jp/support/information/2016/wn-g300r_xss/
CVE ID: CVE-2016-1208 State: PUBLISHED Published: 2016-05-14T15:00:00 Last Updated: 2024-08-05T22:48:13.546Z Vendors: n/a Products: n/a Problem Types: n/a Description: The server in Apple FileMaker before 14.0.4 on OS X allows remote attackers to read PHP source code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://help.filemaker.com/app/answers/detail/a_id/15364 - http://jvn.jp/en/jp/JVN91638315/index.html - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000063
CVE ID: CVE-2016-1209 State: PUBLISHED Published: 2016-05-14T15:00:00 Last Updated: 2024-08-05T22:48:13.521Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Ninja Forms plugin before 2.9.42.1 for WordPress allows remote attackers to conduct PHP object injection attacks via crafted serialized values in a POST request. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/ninja-forms/changelog/ - https://wpvulndb.com/vulnerabilities/8485 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000064 - https://ninjaforms.com/important-security-update-always-hurt-ones-love/ - http://www.rapid7.com/db/modules/exploit/unix/webapp/wp_ninja_forms_unauthenticate
urity-update-always-hurt-ones-love/ - http://www.rapid7.com/db/modules/exploit/unix/webapp/wp_ninja_forms_unauthenticated_file_upload - http://packetstormsecurity.com/files/137211/WordPress-Ninja-Forms-Unauthenticated-File-Upload.html - http://jvn.jp/en/jp/JVN44657371/index.html - http://www.pritect.net/blog/ninja-forms-2-9-42-critical-security-vulnerabilities
CVE ID: CVE-2016-1210 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-05T22:48:13.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: The 105 BANK app 1.0 and 1.1 for Android and 1.0 for iOS does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000065.html - http://jvn.jp/en/jp/JVN11877654/index.html
CVE ID: CVE-2016-1211 State: PUBLISHED Published: 2016-06-04T14:00:00 Last Updated: 2024-08-05T22:48:13.534Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Epoch Web Mailing List 0.31 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000066 - http://jvn.jp/en/jp/JVN43076390/index.html - http://www.psl.ne.jp/perl/ml/index.html
CVE ID: CVE-2016-1212 State: PUBLISHED Published: 2016-06-05T01:00:00 Last Updated: 2024-08-05T22:48:13.523Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in futomi MP Form Mail CGI Professional Edition 3.2.3 and earlier allows remote authenticated administrators to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000069 - http://jvn.jp/en/jp/JVN42545812/index.html - http://www.futomi.com/library/info/2016/201605.html
CVE ID: CVE-2016-1213 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-05T22:48:13.611Z Vendors: n/a Products: n/a Problem Types: n/a Description: The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN67266823/index.html - http://www.securityfocus.com/bid/92596 - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000142 - https://support.cybozu.com/ja-jp/article/9221
CVE ID: CVE-2016-1214 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-05T22:48:13.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000143.html - http://jvn.jp/en/jp/JVN67595539/index.html - https://support.cybozu.com/ja-jp/article/9222 - http://www.securityfocus.com/bid/92601
CVE ID: CVE-2016-1215 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-05T22:48:13.598Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000144.html - https://support.cybozu.com/ja-jp/article/9223 - http://jvn.jp/en/jp/JVN67595539/index.html - http://www.securityfocus.com/bid/92601
CVE ID: CVE-2016-1216 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-05T22:48:13.601Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9223 - http://jvn.jp/en/jp/JVN67595539/index.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000145.html - http://www.securityfocus.com/bid/92601
CVE ID: CVE-2016-1217 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-05T22:48:13.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN67595539/index.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000146.html - https://support.cybozu.com/ja-jp/article/9235 - http://www.securityfocus.com/bid/92601
CVE ID: CVE-2016-1218 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-05T22:48:13.577Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Cybozu Garoon before 4.2.2. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000147.html - http://www.securityfocus.com/bid/92600 - http://jvn.jp/en/jp/JVN83568336/index.html - https://support.cybozu.com/ja-jp/article/9414
CVE ID: CVE-2016-1219 State: PUBLISHED Published: 2017-04-20T17:00:00 Last Updated: 2024-08-05T22:48:13.638Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN89211736/index.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000148.html - http://www.securityfocus.com/bid/92598 - https://support.cybozu.com/ja-jp/article/9408
CVE ID: CVE-2016-1220 State: PUBLISHED Published: 2017-04-20T18:00:00 Last Updated: 2024-08-05T22:48:13.607Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cybozu Garoon before 4.2.2 does not properly restrict access. Additional Analyst Notes: - CVE Program Container: References: - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000149.html - https://support.cybozu.com/ja-jp/article/9407 - http://jvn.jp/en/jp/JVN93411577/index.html - http://www.securityfocus.com/bid/92599
CVE ID: CVE-2016-1221 State: PUBLISHED Published: 2017-04-21T20:00:00 Last Updated: 2024-08-05T22:48:13.652Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jetstar App for iOS before 3.0.0 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN43529183/index.html - http://jvndb.jvn.jp/en/contents/2016/JVNDB-2016-000067.html
CVE ID: CVE-2016-1222 State: PUBLISHED Published: 2016-06-05T01:00:00 Last Updated: 2024-08-05T22:48:13.637Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Kobe Beauty php-contact-form before 2016-05-18 allows remote attackers to inject arbitrary web script or HTML via a crafted URI. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/kobebeauty/php-contact-form/commit/e7d094ca8ab15215c32d6fa04d17e8519c8d21cf - http://www.kobe-beauty.co.jp/php-contact-form/ - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000070 - http://jvn.jp/en/jp/JVN85112513/index.html
CVE ID: CVE-2016-1223 State: PUBLISHED Published: 2016-06-19T01:00:00 Last Updated: 2024-08-05T22:48:13.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Trend Micro Office Scan 11.0, Worry-Free Business Security Service 5.x, and Worry-Free Business Security 9.0 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN48847535/index.html - http://esupport.trendmicro.com/solution/ja-JP/1114102.aspx - http://jvndb.jvn.jp/jvndb/JVNDB-2016-000074