rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-20739 
WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S all versions allows an unauthenticated network-adjacent attacker to execute an arbitrary OS command via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: ELECOM CO.,LTD.
product: WRC-300FEBK, WRC-F300NF, WRC-733FEBK, WRH-300RD, WRH-300BK, WRH-300SV, WRH-300WH, WRH-H300WH, WRH-H300BK, WRH-300BK-S, and WRH-300WH-S
Published: 2021-07-07T07:05:26.000Z
CVE-2021-20740 
Hitachi Virtual File Platform Versions prior to 5.5.3-09 and Versions prior to 6.4.3-09, and NEC Storage M Series NAS Gateway Nh4a/Nh8a versions prior to FOS 5.5.3-08(NEC2.5.4a) and Nh4b/Nh8b, Nh4c/Nh8c versions prior to FOS 6.4.3-08(NEC3.4.2) allow remote authenticated attackers to execute arbitrary OS commands with root privileges via unspecified vectors.
Problem types: description: OS Command Injection
Affected products: vendor: Hitachi and NEC Corporation
product: Hitachi Virtual File Platform and NEC Storage M Series NAS Gateway which uses Hitachi Virtual File Platform
Published: 2021-06-28T00:50:31.000Z
CVE-2021-20741 
Cross-site scripting vulnerability in Hitachi Application Server Help (Hitachi Application Server V10 Manual (Windows) version 10-11-01 and earlier and Hitachi Application Server V10 Manual (UNIX) version 10-11-01 and earlier) allows a remote attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Hitachi
product: Hitachi Application Server Help
Published: 2021-06-22T01:35:53.000Z
CVE-2021-20742 
Cross-site scripting vulnerability in EC-CUBE Business form output plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script via unspecified vector.
Problem types: description: Cross-site scripting
Affected products: vendor: EC-CUBE CO.,LTD.
product: EC-CUBE Business form output plugin (for EC-CUBE 3.0 series)
Published: 2021-06-22T01:35:55.000Z
CVE-2021-20743 
Cross-site scripting vulnerability in EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.4 allows a remote attacker to inject an arbitrary script by leading a user to a specially crafted page and to perform a specific operation.
Problem types: description: Cross-site scripting
Affected products: vendor: EC-CUBE CO.,LTD.
product: EC-CUBE Email newsletters management plugin (for EC-CUBE 3.0 series)
Published: 2021-06-22T01:35:56.000Z
CVE-2021-20744 
Cross-site scripting vulnerability in EC-CUBE Category contents plugin (for EC-CUBE 3.0 series) versions prior to version 1.0.1 allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation.
Problem types: description: Cross-site scripting
Affected products: vendor: EC-CUBE CO.,LTD.
product: EC-CUBE Category contents plugin (for EC-CUBE 3.0 series)
Published: 2021-06-22T01:35:58.000Z
CVE-2021-20745 
Inkdrop versions prior to v5.3.1 allows an attacker to execute arbitrary OS commands on the system where it runs by loading a file or code snippet containing an invalid iframe into Inkdrop.
Problem types: description: OS Command Injection
Affected products: vendor: Takuya Matsuyama
product: Inkdrop
Published: 2021-06-28T00:50:33.000Z
CVE-2021-20746 
Cross-site scripting vulnerability in WordPress Popular Posts 5.3.2 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Hector Cabrera
product: WordPress Popular Posts
Published: 2021-06-28T00:50:35.000Z
CVE-2021-20747 
Improper authorization in handler for custom URL scheme vulnerability in Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
Problem types: description: Improper Authorization in Handler for Custom URL Scheme
Affected products: vendor: Retty Inc.
product: Retty App
Published: 2021-07-14T01:20:23.000Z
CVE-2021-20748 
Retty App for Android versions prior to 4.8.13 and Retty App for iOS versions prior to 4.11.14 uses a hard-coded API key for an external service. By exploiting this vulnerability, API key for an external service may be obtained by analyzing data in the app.
Problem types: description: Use of Hard-coded Credentials
Affected products: vendor: Retty Inc.
product: Retty App
Published: 2021-07-14T01:20:25.000Z
CVE-2021-20749 
Cross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro Multi-User Type ver5.7.0 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: nendeb
product: 'Fudousan plugin' series
Published: 2021-06-28T00:50:37.000Z
CVE-2021-20750 
Cross-site scripting vulnerability in EC-CUBE EC-CUBE 3.0.0 to 3.0.18-p2 (EC-CUBE 3 series) and EC-CUBE 4.0.0 to 4.0.5-p1 (EC-CUBE 4 series) allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation.
Problem types: description: Cross-site scripting
Affected products: vendor: EC-CUBE CO.,LTD.
product: EC-CUBE
Published: 2021-06-28T00:50:39.000Z
CVE-2021-20751 
Cross-site scripting vulnerability in EC-CUBE EC-CUBE 4.0.0 to 4.0.5-p1 (EC-CUBE 4 series) allows a remote attacker to inject an arbitrary script by leading an administrator or a user to a specially crafted page and to perform a specific operation.
Problem types: description: Cross-site scripting
Affected products: vendor: EC-CUBE CO.,LTD.
product: EC-CUBE
Published: 2021-06-28T00:50:41.000Z
CVE-2021-20752 
Cross-site scripting vulnerability in IkaIka RSS Reader all versions allows a remote attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: IKaIKa Software Co.,LTD.
product: IkaIka RSS Reader
Published: 2021-07-01T05:45:15.000Z
CVE-2021-20753 
Cross-site scripting vulnerability in Scheduler of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:35:49.000Z
CVE-2021-20754 
Improper input validation vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Workflow without the appropriate privilege.
Problem types: description: Improper Input Validation
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:35:51.000Z
CVE-2021-20755 
Viewing restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the viewing privilege.
Problem types: description: Viewing restrictions bypass
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:35:53.000Z
CVE-2021-20756 
Viewing restrictions bypass vulnerability in Address of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Address without the viewing privilege.
Problem types: description: Viewing restrictions bypass
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:35:54.000Z
CVE-2021-20757 
Operational restrictions bypass vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege.
Problem types: description: Operational restrictions bypass
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:35:56.000Z
CVE-2021-20758 
Cross-site request forgery (CSRF) vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to hijack the authentication of administrators and perform an arbitrary operation via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:35:57.000Z
CVE-2021-20759 
Operational restrictions bypass vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to alter the data of Portal without the appropriate privilege.
Problem types: description: Operational restrictions bypass
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:35:59.000Z
CVE-2021-20760 
Improper input validation vulnerability in User Profile of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to alter the data of User Profile without the appropriate privilege.
Problem types: description: Improper Input Validation
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:01.000Z
CVE-2021-20761 
Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker with an administrative privilege to alter the data of E-mail without the appropriate privilege.
Problem types: description: Improper Input Validation
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:02.000Z
CVE-2021-20762 
Improper input validation vulnerability in E-mail of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated to alter the data of E-mail without the appropriate privilege.
Problem types: description: Improper Input Validation
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:04.000Z
CVE-2021-20763 
Operational restrictions bypass vulnerability in Portal of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to obtain the data of Portal without the appropriate privilege.
Problem types: description: Operational restrictions bypass
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:05.000Z
CVE-2021-20764 
Improper input validation vulnerability in Attaching Files of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to alter the data of Attaching Files.
Problem types: description: Improper Input Validation
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:07.000Z
CVE-2021-20765 
Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:09.000Z
CVE-2021-20766 
Cross-site scripting vulnerability in Message of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:10.000Z
CVE-2021-20767 
Cross-site scripting vulnerability in Full Text Search of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:12.000Z
CVE-2021-20768 
Operational restrictions bypass vulnerability in Scheduler and MultiReport of Cybozu Garoon 4.0.0 to 5.0.2 allows a remote authenticated attacker to delete the data of Scheduler and MultiReport without the appropriate privilege.
Problem types: description: Operational restrictions bypass
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:13.000Z
CVE-2021-20769 
Cross-site scripting vulnerability in Bulletin of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:15.000Z
CVE-2021-20770 
Cross-site scripting vulnerability in Message of Cybozu Garoon 4.6.0 to 5.0.2 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:16.000Z
CVE-2021-20771 
Cross-site scripting vulnerability in some functions of E-Mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:18.000Z
CVE-2021-20772 
Information disclosure vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the title of Bulletin without the viewing privilege.
Problem types: description: Information Disclosure
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:20.000Z
CVE-2021-20773 
There is a vulnerability in Workflow of Cybozu Garoon 4.0.0 to 5.5.0, which may allow a remote authenticated attacker to delete the route information Workflow without the appropriate privilege.
Problem types: description: Vulnerability where information is deleted unintentionally
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:21.000Z
CVE-2021-20774 
Cross-site scripting vulnerability in some functions of E-mail of Cybozu Garoon 4.0.0 to 5.5.0 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:23.000Z
CVE-2021-20775 
Improper input validation vulnerability in Bulletin of Cybozu Garoon 4.10.0 to 5.5.0 allows a remote authenticated attacker to obtain the data of Comment and Space without the viewing privilege.
Problem types: description: Improper Input Validation
Affected products: vendor: Cybozu, Inc.
product: Cybozu Garoon
Published: 2021-08-18T05:36:24.000Z
CVE-2021-20776 
Improper authentication vulnerability in SCT-40CM01SR and AT-40CM01SR allows an attacker to bypass access restriction and execute an arbitrary command via telnet.
Problem types: description: Improper Authentication
Affected products: vendor: A-Stage Inc.
product: SCT-40CM01SR and AT-40CM01SR
Published: 2021-07-07T07:05:28.000Z
CVE-2021-20777 
Improper authorization in handler for custom URL scheme vulnerability in GU App for Android versions from 4.8.0 to 5.0.2 allows a remote attacker to lead a user to access an arbitrary website via the vulnerable App.
Problem types: description: Improper Authorization in Handler for Custom URL Scheme
Affected products: vendor: G.U. CO., LTD.
product: GU App for Android
Published: 2021-07-07T07:05:29.000Z
CVE-2021-20778 
Improper access control vulnerability in EC-CUBE 4.0.6 (EC-CUBE 4 series) allows a remote attacker to bypass access restriction and obtain sensitive information via unspecified vectors.
Problem types: description: Improper Access Control
Affected products: vendor: EC-CUBE CO.,LTD.
product: EC-CUBE
Published: 2021-07-01T05:45:17.000Z
CVE-2021-20779 
Cross-site request forgery (CSRF) vulnerability in WordPress Email Template Designer - WP HTML Mail versions prior to 3.0.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: codemiq
product: WordPress Email Template Designer - WP HTML Mail
Published: 2021-07-07T07:05:31.000Z
CVE-2021-20780 
Cross-site request forgery (CSRF) vulnerability in WPCS - WordPress Currency Switcher 1.1.6 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: realmag777
product: WPCS - WordPress Currency Switcher
Published: 2021-07-07T07:05:33.000Z
CVE-2021-20781 
Cross-site request forgery (CSRF) vulnerability in WordPress Meta Data Filter & Taxonomies Filter versions prior to v.1.2.8 and versions prior to v.2.2.8 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: realmag777
product: WordPress Meta Data Filter & Taxonomies Filter
Published: 2021-07-14T01:20:26.000Z
CVE-2021-20782 
Cross-site request forgery (CSRF) vulnerability in Software License Manager versions prior to 4.4.6 allows remote attackers to hijack the authentication of administrators via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Tips and Tricks HQ
product: Software License Manager
Published: 2021-07-14T01:20:28.000Z
CVE-2021-20783 
Cross-site request forgery (CSRF) vulnerability in Optical BB unit E-WMTA2.3 allows a remote attacker to hijack the authentication of administrators via a specially crafted page.
Problem types: description: Cross-site request forgery
Affected products: vendor: SoftBank
product: Optical BB unit E-WMTA2.3
Published: 2021-07-28T00:45:24.000Z
CVE-2021-20784 
HTTP header injection vulnerability in Everything version 1.0, 1.1, and 1.2 except the Lite version may allow a remote attacker to inject an arbitrary script or alter the website that uses the product.
Problem types: cwe_id: CWE-644
description: Improper Neutralization of HTTP Headers for Scripting Syntax
Affected products: vendor: voidtools
product: Everything
vendor: voidtools
product: Everything
vendor: voidtools
product: Everything
Published: 2021-07-14T01:20:29.000Z
CVE-2021-20785 
Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to inject an arbitrary script by sending a specially crafted request to a specific URL.
Problem types: description: Cross-site scripting
Affected products: vendor: Japan Total System Co.,Ltd.
product: GroupSession
Published: 2021-07-28T00:45:26.000Z
CVE-2021-20786 
Cross-site request forgery (CSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to hijack the authentication of administrators via a specially crafted URL.
Problem types: description: Cross-site request forgery
Affected products: vendor: Japan Total System Co.,Ltd.
product: GroupSession
Published: 2021-07-28T00:45:27.000Z
CVE-2021-20787 
Cross-site scripting vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to inject an arbitrary script by sending a specially crafted request to a specific URL.
Problem types: description: Cross-site scripting
Affected products: vendor: Japan Total System Co.,Ltd.
product: GroupSession
Published: 2021-07-28T00:45:29.000Z
CVE-2021-20788 
Server-side request forgery (SSRF) vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote authenticated attacker to conduct a port scan from the product and/or obtain information from the internal Web server.
Problem types: description: Server-Side Request Forgery (SSRF)
Affected products: vendor: Japan Total System Co.,Ltd.
product: GroupSession
Published: 2021-07-28T00:45:31.000Z
CVE-2021-20789 
Open redirect vulnerability in GroupSession (GroupSession Free edition from ver2.2.0 to the version prior to ver5.1.0, GroupSession byCloud from ver3.0.3 to the version prior to ver5.1.0, and GroupSession ZION from ver3.0.3 to the version prior to ver5.1.0) allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack via a specially crafted URL.
Problem types: description: Open Redirect
Affected products: vendor: Japan Total System Co.,Ltd.
product: GroupSession
Published: 2021-07-28T00:45:32.000Z
CVE-2021-20790 
Improper control of program execution vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to execute an arbitrary command or code via unspecified vectors.
Problem types: description: Process Control
Affected products: vendor: J’s Communication Co., Ltd.
product: RevoWorks Browser
Published: 2021-09-17T01:40:23.000Z
CVE-2021-20791 
Improper access control vulnerability in RevoWorks Browser 2.1.230 and earlier allows an attacker to bypass access restriction and to exchange unauthorized files between the local environment and the isolated environment or settings of the web browser via unspecified vectors.
Problem types: description: Improper Access Control
Affected products: vendor: J’s Communication Co., Ltd.
product: RevoWorks Browser
Published: 2021-09-17T01:40:25.000Z
CVE-2021-20792 
Cross-site scripting vulnerability in Quiz And Survey Master versions prior to 7.1.14 allows a remote attacker to inject arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: ExpressTech
product: Quiz And Survey Master
Published: 2021-08-18T05:36:26.000Z
CVE-2021-20793 
Untrusted search path vulnerability in the installer of Sony Audio USB Driver V1.10 and prior and the installer of HAP Music Transfer Ver.1.3.0 and prior allows an attacker to gain privileges and execute arbitrary code via a Trojan horse DLL in an unspecified directory.
Problem types: description: Untrusted search path vulnerability
Affected products: vendor: Sony Corporation
product: The installers of multiple Sony products
Published: 2021-08-26T01:20:31.000Z
CVE-2021-20795 
Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be performed via unspecified vectors.
Problem types: description: Cross-site request forgery
Affected products: vendor: Cybozu, Inc.
product: Cybozu Remote Service
Published: 2021-10-13T08:30:47.000Z
CVE-2021-20796 
Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors.
Problem types: description: Directory traversal
Affected products: vendor: Cybozu, Inc.
product: Cybozu Remote Service
Published: 2021-10-13T08:30:49.000Z
CVE-2021-20797 
Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using Mozilla Firefox.
Problem types: description: Cross-site script inclusion vulnerability
Affected products: vendor: Cybozu, Inc.
product: Cybozu Remote Service
Published: 2021-10-13T08:30:50.000Z
CVE-2021-20798 
Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
Problem types: description: Cross-site scripting
Affected products: vendor: Cybozu, Inc.
product: Cybozu Remote Service
Published: 2021-10-13T08:30:52.000Z