Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2019-5931 State: PUBLISHED Published: 2019-05-17T15:25:54 Last Updated: 2024-08-04T20:09:23.902Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Improper Input Validation Description: Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/34283/
CVE ID: CVE-2019-5932 State: PUBLISHED Published: 2019-05-17T15:25:54 Last Updated: 2024-08-04T20:09:23.808Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Portal'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/34276/
CVE ID: CVE-2019-5933 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.760Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 4.0.0 to 4.10.0 allows remote authenticated attackers to bypass access restriction to view the Bulletin Board without view privileges via the application 'Bulletin'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35307/
CVE ID: CVE-2019-5934 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.805Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: SQL Injection Description: SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application 'logging'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35306/
CVE ID: CVE-2019-5935 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.846Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to change user information without access privileges via the Item function of User Information. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35497/
CVE ID: CVE-2019-5936 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.687Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Directory traversal Description: Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access privileges via the application 'Work Flow'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35484/
CVE ID: CVE-2019-5937 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.752Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user information. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35493/
CVE ID: CVE-2019-5938 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.904Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35494/
CVE ID: CVE-2019-5939 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.922Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35495/
CVE ID: CVE-2019-5940 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.936Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Scheduler'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35490/
CVE ID: CVE-2019-5941 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.852Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35489/
CVE ID: CVE-2019-5942 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.980Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function of application 'Cabinet'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35485/
CVE ID: CVE-2019-5943 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:24.031Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the application 'Bulletin' and the application 'Cabinet'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35486/
CVE ID: CVE-2019-5944 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:24.000Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Fails to restrict access Description: Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify privileges via the application 'Address'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35487/
CVE ID: CVE-2019-5945 State: PUBLISHED Published: 2019-05-17T15:25:55 Last Updated: 2024-08-04T20:09:23.967Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Information Disclosure Description: Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35488/
CVE ID: CVE-2019-5946 State: PUBLISHED Published: 2019-05-17T15:25:56 Last Updated: 2024-08-04T20:09:23.919Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Open Redirect Description: Open redirect vulnerability in Cybozu Garoon 4.2.4 to 4.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the Login Screen. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35492/
CVE ID: CVE-2019-5947 State: PUBLISHED Published: 2019-05-17T15:25:56 Last Updated: 2024-08-04T20:09:23.915Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the application 'Cabinet'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN58849431/index.html - https://kb.cybozu.support/article/35496/
CVE ID: CVE-2019-5953 State: PUBLISHED Published: 2019-05-17T15:25:56 Last Updated: 2024-08-04T20:09:23.991Z Vendors: The GNU Projec Products: GNU Wget Problem Types: Buffer Overflow Description: Buffer overflow in GNU Wget 1.20.1 and earlier allows remote attackers to cause a denial-of-service (DoS) or may execute an arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.gnu.org/software/wget/ - http://jvn.jp/en/jp/JVN25261088/index.html - https://support.f5.com/csp/article/K14560101 - https://security.gentoo.org/glsa/201908-19 - https://access.redhat.com/errata/RHSA-2019:2979 - https://access.redhat.com/errata/RHSA-2019:3168
CVE ID: CVE-2019-5954 State: PUBLISHED Published: 2019-05-17T15:25:56 Last Updated: 2024-08-04T20:09:23.965Z Vendors: East Japan Railway Company Products: JR East Japan train operation information push notification App for Android Problem Types: Fails to restrict access Description: JR East Japan train operation information push notification App for Android version 1.2.4 and earlier allows remote attackers to bypass access restriction to obtain or alter the user's registered information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.jreast.co.jp/press/2018/20190310.pdf - http://jvn.jp/en/jp/JVN01119243/index.html
CVE ID: CVE-2019-5955 State: PUBLISHED Published: 2019-05-17T15:25:56 Last Updated: 2024-08-04T20:09:23.984Z Vendors: CREATE S.D CO., LTD. Products: CREATE SD official App for Android Problem Types: Fails to restrict access Description: CREATE SD official App for Android version 1.0.2 and earlier allows remote attackers to bypass access restriction to lead a user to access an arbitrary website via vulnerable application and conduct phishing attacks. Additional Analyst Notes: - CVE Program Container: References: - https://www.create-sd.co.jp/Portals/0/pdf/appsec_en.pdf - http://jvn.jp/en/jp/JVN87655507/index.html
CVE ID: CVE-2019-5956 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:23.962Z Vendors: WonderCMS Products: 2.6.0 and earlier Problem Types: Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors. Description: Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/vu/JVNVU93628467/index.html
CVE ID: CVE-2019-5957 State: PUBLISHED Published: 2019-05-17T15:25:56 Last Updated: 2024-08-04T20:09:23.990Z Vendors: Ministry of Internal Affairs and Communications Products: Installer of Electronic reception and examination of application for radio licenses Online Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installer of Electronic reception and examination of application for radio licenses Online 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.denpa.soumu.go.jp/public/prog/onlineInstaller_downlo
l Analyst Notes: - CVE Program Container: References: - https://www.denpa.soumu.go.jp/public/prog/onlineInstaller_download.html - http://jvn.jp/en/jp/JVN91361851/index.html
CVE ID: CVE-2019-5958 State: PUBLISHED Published: 2019-05-17T15:25:56 Last Updated: 2024-08-04T20:09:24.036Z Vendors: Ministry of Internal Affairs and Communications Products: Electronic reception and examination of application for radio licenses Offline Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Electronic reception and examination of application for radio licenses Offline 1.0.9.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://www.denpa.soumu.go.jp/public/prog/offlineInstaller_download.html - http://jvn.jp
rogram Container: References: - https://www.denpa.soumu.go.jp/public/prog/offlineInstaller_download.html - http://jvn.jp/en/jp/JVN69903953/index.html
CVE ID: CVE-2019-5960 State: PUBLISHED Published: 2019-07-05T13:18:31 Last Updated: 2024-08-04T20:09:23.956Z Vendors: Custom4Web Products: WP Open Graph Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in WP Open Graph 1.6.1 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN33652328/index.html
CVE ID: CVE-2019-5961 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.937Z Vendors: Tsukurito, Inc. Products: Android App 'Tootdon for Mastodon' Problem Types: Fails to verify SSL certificates Description: The Android App 'Tootdon for Mastodon' version 3.4.1 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - http://blog.mastodon-tootdon.com/entry/2019/05/20/204019 - https://jvn.jp/en/jp/JVN57806517/index.html
CVE ID: CVE-2019-5962 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.984Z Vendors: Zoho SalesIQ Team Products: Zoho SalesIQ Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/zoho-salesiq/ - https://jvn.jp/en/jp/JVN88962935/index.html - https://wpvulndb.com/vulnerabilities/9433
CVE ID: CVE-2019-5963 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.962Z Vendors: Zoho SalesIQ Team Products: Zoho SalesIQ Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Zoho SalesIQ 1.0.8 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/zoho-salesiq/ - https://jvn.jp/en/jp/JVN88962935/index.html - https://wpvulndb.com/vulnerabilities/9433
CVE ID: CVE-2019-5964 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.938Z Vendors: A.T.WORKS, Inc. Products: iDoors Reader Problem Types: Authentication bypass Description: iDoors Reader 2.10.17 and earlier allows an attacker on the same network segment to bypass authentication to access the management console and operate the product via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://idoors.jp/info/20190701 - https://jvn.jp/en/jp/JVN28218613/index.html
CVE ID: CVE-2019-5965 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.957Z Vendors: SiteBridge Inc. Products: Joruri Mail Problem Types: Open Redirect Description: Open redirect vulnerability in Joruri Mail 2.1.4 and earlier allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://joruri.org/docs/2018060400041/ - https://jvn.jp/en/jp/JVN58052567/index.html
CVE ID: CVE-2019-5966 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.995Z Vendors: SiteBridge Inc. Products: Joruri Mail Problem Types: Fails to manage sessions Description: Joruri Mail 2.1.4 and earlier does not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and alter/disclose the information via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://joruri.org/docs/2018060400041/ - https://jvn.jp/en/jp/JVN58052567/index.html
CVE ID: CVE-2019-5967 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:24.037Z Vendors: SiteBridge Inc. Products: Joruri CMS 2017 Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Joruri CMS 2017 Release2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://joruri.org/docs/2018060400058/ - https://jvn.jp/en/jp/JVN29188908/index.html
CVE ID: CVE-2019-5968 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.982Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in GROWI v3.4.6 and earlier allows remote attackers to hijack the authentication of administrators via updating user's 'Basic Info'. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2019/06/04/growi-fix-jvn84876282/ - https://jvn.jp/en/jp/JVN84876282/index.html
CVE ID: CVE-2019-5969 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.956Z Vendors: WESEEK, Inc. Products: GROWI Problem Types: Open Redirect Description: Open redirect vulnerability in GROWI v3.4.6 and earlier allows remote attackersto redirect users to arbitrary web sites and conduct phishing attacks via the process of login. Additional Analyst Notes: - CVE Program Container: References: - https://weseek.co.jp/security/2019/06/04/growi-fix-jvn84876282/ - https://jvn.jp/en/jp/JVN84876282/index.html
CVE ID: CVE-2019-5970 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.964Z Vendors: SUKIMALAB.COM Products: Attendance Manager Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://attmgr.com/fixed-vulnerability-issue/ - https://wordpress.org/plugins/attendance-manager/#developers - https://jvn.jp/en/jp/JVN95685939/index.html - https://wpvulndb.com/vulnerabilities/9434
CVE ID: CVE-2019-5971 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.992Z Vendors: SUKIMALAB.COM Products: Attendance Manager Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Attendance Manager 0.5.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://attmgr.com/fixed-vulnerability-issue/ - https://wordpress.org/plugins/attendance-manager/#developers - https://jvn.jp/en/jp/JVN95685939/index.html - https://wpvulndb.com/vulnerabilities/9434
CVE ID: CVE-2019-5972 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:24.032Z Vendors: SUKIMALAB.COM Products: Online Lesson Booking Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://olbsys.com/fixed-vulnerability-issue/ - https://wordpress.org/plugins/online-lesson-booking-system/#developers - https://jvn.jp/en/jp/JVN96988995/index.html - https://wpvulndb.com/vulnerabilities/9435
CVE ID: CVE-2019-5973 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:24.005Z Vendors: SUKIMALAB.COM Products: Online Lesson Booking Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Online Lesson Booking 0.8.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://olbsys.com/fixed-vulnerability-issue/ - https://wordpress.org/plugins/online-lesson-booking-system/#developers - https://jvn.jp/en/jp/JVN96988995/index.html - https://wpvulndb.com/vulnerabilities/9435
CVE ID: CVE-2019-5974 State: PUBLISHED Published: 2019-07-05T13:20:17 Last Updated: 2024-08-04T20:09:23.944Z Vendors: Contest-Gallery Products: Contest Gallery Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Contest Gallery versions prior to 10.4.5 allows remote attackers to hijack the authentication of administrators via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://wordpress.org/plugins/contest-gallery/ - https://jvn.jp/en/jp/JVN80925867/index.html - https://wpvulndb.com/vulnerabilities/9436
CVE ID: CVE-2019-5975 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:23.994Z Vendors: Inc." Products: Cybozu Garoon Problem Types: Cross-site scripting Description: DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://kb.cybozu.support/article/35912 - http://jvn.jp/en/jp/JVN62618482/index.html
CVE ID: CVE-2019-5976 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:23.966Z Vendors: Inc." Products: Cybozu Garoon Problem Types: Denial-of-service (DoS) Description: Cybozu Garoon 4.0.0 to 4.10.2 allows an attacker with administrative rights to cause a denial of service condition via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN62618482/index.html - https://kb.cybozu.support/article/35913
CVE ID: CVE-2019-5977 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:23.979Z Vendors: Inc." Products: Cybozu Garoon Problem Types: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Description: Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN62618482/index.html - https://kb.cybozu.support/article/35915
CVE ID: CVE-2019-5978 State: PUBLISHED Published: 2019-09-12T15:58:55 Last Updated: 2024-08-04T20:09:23.986Z Vendors: Cybozu, Inc. Products: Cybozu Garoon Problem Types: Open Redirect Description: Open redirect vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via the application 'Scheduler'. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN62618482/index.html - https://kb.cybozu.support/article/35916