rainbutterfly/cve_corpus huggingface dataset:
CVE-2020-5520 
The netprint App for iOS 3.2.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: Fuji Xerox Co.,Ltd.
product: netprint App for iOS
Published: 2020-01-27T09:35:27.000Z
CVE-2020-5521 
The kantan netprint App for iOS 2.0.2 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: Fuji Xerox Co.,Ltd.
product: kantan netprint App for iOS
Published: 2020-01-27T09:35:27.000Z
CVE-2020-5522 
The kantan netprint App for Android 2.0.3 and earlier does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: Fuji Xerox Co.,Ltd.
product: kantan netprint App for Android
Published: 2020-01-27T09:35:27.000Z
CVE-2020-5523 
Android App 'MyPallete' and some of the Android banking applications based on 'MyPallete' do not verify X.509 certificates from servers, and also do not properly validate certificates with host-mismatch, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: NTT Data Corporation
product: 'MyPallete' and some of the Android banking applications that use 'MyPallete'
Published: 2020-01-28T05:25:48.000Z
CVE-2020-5524 
Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via UPnP function.
Problem types: description: OS Command Injection
Affected products: vendor: NEC Corporation
product: Aterm series
Published: 2020-02-21T09:15:19.000Z
CVE-2020-5525 
Aterm series (Aterm WF1200C firmware Ver1.2.1 and earlier, Aterm WG1200CR firmware Ver1.2.1 and earlier, Aterm WG2600HS firmware Ver1.3.2 and earlier) allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via management screen.
Problem types: description: OS Command Injection
Affected products: vendor: NEC Corporation
product: Aterm series
Published: 2020-02-21T09:15:19.000Z
CVE-2020-5526 
The AWMS Mobile App for Android 2.0.0 to 2.0.5 and for iOS 2.0.0 to 2.0.8 does not verify X.509 certificates from servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
Problem types: description: Fails to verify SSL certificates
Affected products: vendor: Fuji Xerox Co.,Ltd.
product: AWMS Mobile App
Published: 2020-01-31T03:35:17.000Z
CVE-2020-5527 
When MELSOFT transmission port (UDP/IP) of Mitsubishi Electric MELSEC iQ-R series (all versions), MELSEC iQ-F series (all versions), MELSEC Q series (all versions), MELSEC L series (all versions), and MELSEC F series (all versions) receives massive amount of data via unspecified vectors, resource consumption occurs and the port does not process the data properly. As a result, it may fall into a denial-of-service (DoS) condition. The vendor states this vulnerability only affects Ethernet communication functions.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Mitsubishi Electric Corporation
product: MELSOFT transmission port (UDP/IP) of multiple Mitsubishi Electric MELSEC series
Published: 2020-03-30T07:10:14.000Z
CVE-2020-5528 
Cross-site scripting vulnerability in Movable Type series (Movable Type 7 r.4603 and earlier (Movable Type 7), Movable Type 6.5.2 and earlier (Movable Type 6.5), Movable Type Advanced 7 r.4603 and earlier (Movable Type Advanced 7), Movable Type Advanced 6.5.2 and earlier (Movable Type Advanced 6.5), Movable Type Premium 1.26 and earlier (Movable Type Premium), and Movable Type Premium Advanced 1.26 and earlier (Movable Type Premium Advanced)) allows remote attackers to inject arbitrary web script or HTML in the block editor and the rich text editor via a specially crafted URL.
Problem types: description: Cross-site scripting
Affected products: vendor: Six Apart Ltd
product: Movable Type series
Published: 2020-02-06T09:30:14.000Z
CVE-2020-5529 
HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is done in an improper way, hence a malicious JavaScript code can execute arbitrary Java code on the application.
Problem types: description: Remote code execution
Affected products: vendor: HtmlUnit Project
product: HtmlUnit
Published: 2020-02-11T08:35:12.000Z
CVE-2020-5530 
Cross-site request forgery (CSRF) vulnerability in Easy Property Listings versions prior to 3.4 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Merv Barrett
product: Easy Property Listings
Published: 2020-02-18T05:30:16.000Z
CVE-2020-5531 
Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000 MELSEC-Q Series C Controller Module(Q24DHCCPU-V, Q24DHCCPU-VG User Ethernet port (CH1, CH2): First 5 digits of serial number 21121 or before), MELSEC iQ-R Series C Controller Module / C Intelligent Function Module(R12CCPU-V Ethernet port (CH1, CH2): First 2 digits of serial number 11 or before, and RD55UP06-V Ethernet port: First 2 digits of serial number 08 or before), and MELIPC Series MI5000(MI5122-VW Ethernet port (CH1): First 2 digits of serial number 03 or before, or the firmware version 03 or before) allow remote attackers to cause a denial of service and/or malware being executed via unspecified vectors.
Problem types: description: Denial-of-service (DoS) and malware execution
Affected products: vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000
Published: 2020-02-17T06:55:15.000Z
CVE-2020-5532 
ilbo App (ilbo App for Android prior to version 1.1.8 and ilbo App for iOS prior to version 1.2.01) allows an attacker on the same network segment to bypass authentication and to view the images which were recorded by the other ilbo user's device via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: EXTRUN Ltd.
product: ilbo App
Published: 2020-02-14T08:40:14.000Z
CVE-2020-5533 
Cross-site scripting vulnerability in Aterm WG2600HS firmware Ver1.3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: NEC Corporation
product: Aterm WG2600HS
Published: 2020-02-21T09:15:20.000Z
CVE-2020-5534 
Aterm WG2600HS firmware Ver1.3.2 and earlier allows an authenticated attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: NEC Corporation
product: Aterm WG2600HS
Published: 2020-02-21T09:15:20.000Z
CVE-2020-5535 
OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to execute arbitrary OS commands with root privileges via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: Plat'Home Co.,Ltd.
product: OpenBlocks IoT VX2
Published: 2020-03-04T01:35:19.000Z
CVE-2020-5536 
OpenBlocks IoT VX2 prior to Ver.4.0.0 (Ver.3 Series) allows an attacker on the same network segment to bypass authentication and to initialize the device via unspecified vectors.
Problem types: description: Authentication bypass
Affected products: vendor: Plat'Home Co.,Ltd.
product: OpenBlocks IoT VX2
Published: 2020-03-04T01:35:19.000Z
CVE-2020-5537 
Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors.
Problem types: description: Remote code execution
Affected products: vendor: Cybozu, Inc.
product: Cybozu Desktop for Windows
Published: 2020-05-25T05:00:17.000Z
CVE-2020-5538 
Improper Access Control in PALLET CONTROL Ver. 6.3 and earlier allows authenticated attackers to execute arbitrary code with the SYSTEM privilege on the computer where PALLET CONTROL is installed via unspecified vectors. PalletControl 7 to 9.1 are not affected by this vulnerability, however under the environment where PLS Management Add-on Module is used, all versions are affected.
Problem types: description: Improper Access Control
Affected products: vendor: JAL Information Technology Co., Ltd.
product: PALLET CONTROL
Published: 2020-05-11T04:40:14.000Z
CVE-2020-5539 
GRANDIT Ver.1.6, Ver.2.0, Ver.2.1, Ver.2.2, Ver.2.3, and Ver.3.0 do not properly manage sessions, which allows remote attackers to impersonate an arbitrary user and then alter or disclose the information via unspecified vectors.
Problem types: description: Fails to manage sessions
Affected products: vendor: GRANDIT CORPORATION
product: GRANDIT
Published: 2020-03-02T07:00:24.000Z
CVE-2020-5540 
Cross-site scripting vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to inject arbitrary script or HTML via a specially crafted URL.
Problem types: description: Cross-site scripting
Affected products: vendor: CyberSolutions Inc.
product: CyberMail
Published: 2020-08-25T02:20:21.000Z
CVE-2020-5541 
Open redirect vulnerability in CyberMail Ver.6.x and Ver.7.x allows remote attackers to redirect users to arbitrary sites and conduct phishing attacks via a specially crafted URL.
Problem types: description: Open Redirect
Affected products: vendor: CyberSolutions Inc.
product: CyberMail
Published: 2020-08-25T02:20:21.000Z
CVE-2020-5542 
Buffer error vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet.
Problem types: description: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric MELQIC IU1 series
Published: 2020-03-16T01:25:47.000Z
CVE-2020-5543 
TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier does not properly manage sessions, which allows remote attackers to stop the network functions or execute malware via a specially crafted packet.
Problem types: description: Fails to manage sessions
Affected products: vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric MELQIC IU1 series
Published: 2020-03-16T01:25:48.000Z
CVE-2020-5544 
Null Pointer Dereference vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet.
Problem types: description: NULL Pointer Dereference
Affected products: vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric MELQIC IU1 series
Published: 2020-03-16T01:25:48.000Z
CVE-2020-5545 
TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to bypass access restriction and to stop the network functions or execute malware via a specially crafted packet.
Problem types: description: Fails to restrict access
Affected products: vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric MELQIC IU1 series
Published: 2020-03-16T01:25:49.000Z
CVE-2020-5546 
Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows an attacker on the same network segment to stop the network functions or execute malware via a specially crafted packet.
Problem types: description: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')
Affected products: vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric MELQIC IU1 series
Published: 2020-03-16T01:25:49.000Z
CVE-2020-5547 
Resource Management Errors vulnerability in TCP function included in the firmware of Mitsubishi Electric MELQIC IU1 series IU1-1M20-D firmware version 1.0.7 and earlier allows remote attackers to stop the network functions or execute malware via a specially crafted packet.
Problem types: description: Resource Management Errors
Affected products: vendor: Mitsubishi Electric Corporation
product: Mitsubishi Electric MELQIC IU1 series
Published: 2020-03-16T01:25:50.000Z
CVE-2020-5548 
Yamaha LTE VoIP Router(NVR700W firmware Rev.15.00.15 and earlier), Yamaha Gigabit VoIP Router(NVR510 firmware Rev.15.01.14 and earlier), Yamaha Gigabit VPN Router(RTX810 firmware Rev.11.01.33 and earlier, RTX830 firmware Rev.15.02.09 and earlier, RTX1200 firmware Rev.10.01.76 and earlier, RTX1210 firmware Rev.14.01.33 and earlier, RTX3500 firmware Rev.14.00.26 and earlier, and RTX5000 firmware Rev.14.00.26 and earlier), Yamaha Broadband VoIP Router(NVR500 firmware Rev.11.00.38 and earlier), and Yamaha Firewall(FWX120 firmware Rev.11.03.27 and earlier) allow remote attackers to cause a denial of service via unspecified vectors.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: Yamaha Corporation
product: Yamaha network devices
Published: 2020-04-01T11:15:15.000Z
CVE-2020-5549 
Cross-site request forgery (CSRF) vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier and Enterprise Ver. 2.0.1 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Plat'Home Co.,Ltd.
product: EasyBlocks IPv6
Published: 2020-04-08T07:50:23.000Z
CVE-2020-5550 
Session fixation vulnerability in EasyBlocks IPv6 Ver. 2.0.1 and earlier, and Enterprise Ver. 2.0.1 and earlier allows remote attackers to impersonate a registered user and log in the management console, that may result in information alteration/disclosure via unspecified vectors.
Problem types: description: Session fixation
Affected products: vendor: Plat'Home Co.,Ltd.
product: EasyBlocks IPv6
Published: 2020-04-08T07:50:23.000Z
CVE-2020-5551 
Toyota 2017 Model Year DCU (Display Control Unit) allows an unauthenticated attacker within Bluetooth range to cause a denial of service attack and/or execute an arbitrary command. The affected DCUs are installed in Lexus (LC, LS, NX, RC, RC F), TOYOTA CAMRY, and TOYOTA SIENNA manufactured in the regions other than Japan from Oct. 2016 to Oct. 2019. An attacker with certain knowledge on the target vehicle control system may be able to send some diagnostic commands to ECUs with some limited availability impacts; the vendor states critical vehicle controls such as driving, turning, and stopping are not affected.
Problem types: description: Denial-of-service (DoS)
Affected products: vendor: TOYOTA MOTOR CORPORATION
product: DCU (Display Control Unit)
Published: 2020-03-30T04:05:13.000Z
CVE-2020-5552 
Cross-site scripting vulnerability in mailform version 1.04 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: keitai-site.net
product: mailform
Published: 2020-03-25T01:25:27.000Z
CVE-2020-5553 
mailform version 1.04 allows remote attackers to execute arbitrary PHP code via unspecified vectors.
Problem types: description: Remote code execution
Affected products: vendor: keitai-site.net
product: mailform
Published: 2020-03-25T01:25:27.000Z
CVE-2020-5554 
Directory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write arbitrary files via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: EKAKIN
product: Shihonkanri Plus GOOUT
Published: 2020-03-25T01:25:28.000Z
CVE-2020-5555 
Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper input validation issue.
Problem types: description: Improper Input Validation
Affected products: vendor: EKAKIN
product: Shihonkanri Plus GOOUT
Published: 2020-03-25T01:25:28.000Z
CVE-2020-5556 
Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: EKAKIN
product: Shihonkanri Plus GOOUT
Published: 2020-03-25T01:25:29.000Z
CVE-2020-5557 
Cross-site scripting vulnerability in CuteNews 2.0.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: CutePHP.com
product: CuteNews
Published: 2020-03-25T01:25:29.000Z
CVE-2020-5558 
CuteNews 2.0.1 allows remote authenticated attackers to execute arbitrary PHP code via unspecified vectors.
Problem types: description: Remote code execution
Affected products: vendor: CutePHP.com
product: CuteNews
Published: 2020-03-25T01:25:29.000Z
CVE-2020-5559 
Cross-site scripting vulnerability in WL-Enq 1.11 and 1.12 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: WonderLink
product: WL-Enq
Published: 2020-03-25T01:25:30.000Z
CVE-2020-5560 
WL-Enq 1.11 and 1.12 allows remote attackers to execute arbitrary OS commands with the administrative privilege via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: WonderLink
product: WL-Enq
Published: 2020-03-25T01:25:30.000Z
CVE-2020-5561 
Keijiban Tsumiki v1.15 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: Mash room - Free CGI -
product: Keijiban Tsumiki
Published: 2020-03-25T01:25:31.000Z
CVE-2020-5562 
Server-side request forgery (SSRF) vulnerability in Cybozu Garoon 4.6.0 to 4.6.3 allows a remote attacker with an administrative privilege to issue arbitrary HTTP requests to other web servers via V-CUBE Meeting function.
Problem types: description: Server-Side Request Forgery (SSRF)
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-04-28T03:15:28.000Z
CVE-2020-5563 
Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in the affected product via the API.
Problem types: description: Improper Authentication
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-04-28T03:15:28.000Z
CVE-2020-5564 
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to inject arbitrary web script or HTML via the application 'E-mail'.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-04-28T03:15:29.000Z
CVE-2020-5565 
Improper input validation vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows a remote authenticated attacker to alter the application's data via the applications 'Workflow' and 'MultiReport'.
Problem types: description: Improper Input Validation
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-04-28T03:15:29.000Z
CVE-2020-5566 
Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'.
Problem types: description: Improper Authorization
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-04-28T03:15:30.000Z
CVE-2020-5567 
Improper authentication vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote attackers to obtain data in Application Menu.
Problem types: description: Improper Authentication
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-04-28T03:15:30.000Z
CVE-2020-5568 
Cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 5.0.0 allows remote attackers to inject arbitrary web script or HTML via the applications 'Messages' and 'Bulletin Board'.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2020-04-28T03:15:31.000Z
CVE-2020-5569 
An unquoted search path vulnerability exists in HDD Password tool (for Windows) version 1.20.6620 and earlier which is stored in CANVIO PREMIUM 3TB(HD-MB30TY, HD-MA30TY, HD-MB30TS, HD-MA30TS), CANVIO PREMIUM 2TB(HD-MB20TY, HD-MA20TY, HD-MB20TS, HD-MA20TS), CANVIO PREMIUM 1TB(HD-MB10TY, HD-MA10TY, HD-MB10TS, HD-MA10TS), CANVIO SLIM 1TB(HD-SB10TK, HD-SB10TS), and CANVIO SLIM 500GB(HD-SB50GK, HD-SA50GK, HD-SB50GS, HD-SA50GS), and which was downloaded before 2020 May 10. Since it registers Windows services with unquoted file paths, when a registered path contains spaces, and a malicious executable is placed on a certain path, it may be executed with the privilege of the Windows service.
Problem types: description: Unquoted Search Path or Element
Affected products: vendor: Toshiba Electronic Devices & Storage Corporation
product: HDD Password tool (for Windows)
Published: 2020-04-20T07:25:14.000Z
CVE-2020-5570 
Cross-site scripting vulnerability in Sales Force Assistant version 11.2.48 and earlier allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: NI Consulting CO.,Ltd.
product: Sales Force Assistant
Published: 2020-04-28T05:50:17.000Z
CVE-2020-5571 
SHARP AQUOS series (AQUOS SH-M02 build number 01.00.05 and earlier, AQUOS SH-RM02 build number 01.00.04 and earlier, AQUOS mini SH-M03 build number 01.00.04 and earlier, AQUOS Keitai SH-N01 build number 01.00.01 and earlier, AQUOS L2 (UQ mobile/J:COM) build number 01.00.05 and earlier, AQUOS sense lite SH-M05 build number 03.00.04 and earlier, AQUOS sense (UQ mobile) build number 03.00.03 and earlier, AQUOS compact SH-M06 build number 02.00.02 and earlier, AQUOS sense plus SH-M07 build number 02.00.02 and earlier, AQUOS sense2 SH-M08 build number 02.00.05 and earlier, and AQUOS sense2 (UQ mobile) build number 02.00.06 and earlier) allow an attacker to obtain the sensitive information of the device via malicious applications installed on the device.
Problem types: description: Information Disclosure
Affected products: vendor: Sharp Corporation
product: SHARP AQUOS series
Published: 2020-04-23T07:40:15.000Z
CVE-2020-5572 
Android App 'Mailwise for Android' 1.0.0 to 1.0.1 allows an attacker to obtain credential information registered in the product via unspecified vectors.
Problem types: description: Information Disclosure
Affected products: vendor: Cybozu, Inc.
product: Android App 'Mailwise for Android'
Published: 2020-05-29T08:40:17.000Z
CVE-2020-5573 
Android App 'kintone mobile for Android' 1.0.0 to 2.5 allows an attacker to obtain credential information registered in the product via unspecified vectors.
Problem types: description: Information Disclosure
Affected products: vendor: Cybozu, Inc.
product: Android App 'kintone mobile for Android'
Published: 2020-05-29T08:40:17.000Z