İçeriğe atla
Noroxi

cybozu kayıtları

cybozu üreticisine ait 330 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
10
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

330 kayıt
  • CVE-2014-1987
    41Planlayın

    The CGI component in Cybozu Garoon 3.1.0 through 3.7 SP3 allows remote attackers to execute arbitrary commands via unspecified vectors.

    KritikCVSS 10,0İstismar yokEPSS %3

    cybozu · garoon20 Tem 2014

  • CVE-2016-1219
    40Planlayın

    Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use.

    KritikCVSS 9,8İstismar yokEPSS %3

    cybozu · garoon20 Nis 2017

  • CVE-2020-5537
    40Planlayın

    Cybozu Desktop for Windows 2.0.23 to 2.2.40 allows remote code execution via unspecified vectors.

    KritikCVSS 9,8İstismar yokEPSS %2

    cybozu · desktop25 May 2020

  • CVE-2019-5945
    40Planlayın

    Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon.

    KritikCVSS 9,8İstismar yokEPSS %2

    cybozu · garoon17 May 2019

  • CVE-2012-4011
    38İzleyin

    The Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive inform

    KritikCVSS 9,3İstismar yokEPSS %3

    cybozu · kunai8 Eyl 2012

  • CVE-2014-5314
    37İzleyin

    Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated

    KritikCVSS 9,0İstismar yokEPSS %3

    cybozu · office23 Kas 2014

  • CVE-2018-0705
    37İzleyin

    Directory traversal vulnerability in Cybozu Dezie 8.0.2 to 8.1.2 allows remote attackers to read arbitrary files via HTTP requests.

    KritikCVSS 9,1İstismar yokEPSS %2

    cybozu · dezie9 Oca 2019

  • CVE-2018-16171
    36İzleyin

    Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server vi

    YüksekCVSS 8,8İstismar yokEPSS %1

    cybozu · remote service manager9 Oca 2019

  • CVE-2024-31401
    36İzleyin

    Cross-site scripting vulnerability in Cybozu Garoon 5.0.0 to 5.15.2 allows a remote authenticated attacker with an administrative privilege

    KritikCVSS 9,0İstismar yokEPSS %0

    cybozu · garoon11 Haz 2024

  • CVE-2015-5647
    35İzleyin

    The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP

    YüksekCVSS 8,5İstismar yokEPSS %1

    cybozu · garoon12 Eki 2015

  • CVE-2015-5646
    35İzleyin

    Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vector

    YüksekCVSS 8,5İstismar yokEPSS %1

    cybozu · garoon12 Eki 2015

  • CVE-2016-7803
    35İzleyin

    SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via

    YüksekCVSS 8,8İstismar yokEPSS %1

    cybozu · garoon9 Haz 2017

  • CVE-2016-1218
    35İzleyin

    SQL injection vulnerability in Cybozu Garoon before 4.2.2.

    YüksekCVSS 8,8İstismar yokEPSS %1

    cybozu · garoon20 Nis 2017

  • CVE-2018-0530
    35İzleyin

    SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via

    YüksekCVSS 8,8İstismar yokEPSS %1

    cybozu · garoon16 Nis 2018

  • CVE-2018-16169
    35İzleyin

    Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecifie

    YüksekCVSS 8,8İstismar yokEPSS %1

    cybozu · remote service manager9 Oca 2019

  • CVE-2018-0607
    35İzleyin

    SQL injection vulnerability in the Notifications application in the Cybozu Garoon 3.5.0 to 4.6.2 allows remote authenticated attackers to ex

    YüksekCVSS 8,8İstismar yokEPSS %1

    cybozu · garoon26 Tem 2018

  • CVE-2016-4907
    35İzleyin

    Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors.

    YüksekCVSS 8,8İstismar yokEPSS %0

    cybozu · garoon9 Haz 2017

  • CVE-2016-1151
    35İzleyin

    Multiple cross-site request forgery (CSRF) vulnerabilities in Cybozu Office 9.9.0 through 10.3.0 allow remote attackers to hijack the authen

    YüksekCVSS 8,8İstismar yokEPSS %0

    cybozu · office16 Şub 2016

  • CVE-2021-20795
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to

    YüksekCVSS 8,8İstismar yokEPSS %0

    cybozu · remote service manager13 Eki 2021

  • CVE-2019-5931
    34İzleyin

    Cybozu Garoon 4.0.0 to 4.6.3 allows authenticated attackers to alter the information with privileges invoking the installer via unspecified

    YüksekCVSS 8,7İstismar yokEPSS %1

    cybozu · garoon17 May 2019

  • CVE-2018-16170
    33İzleyin

    Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrar

    YüksekCVSS 8,1İstismar yokEPSS %1

    cybozu · remote service manager9 Oca 2019

  • CVE-2014-1983
    32İzleyin

    Unspecified vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x before 3.1.1 allows remote attackers to cause a denial of s

    YüksekCVSS 7,8İstismar yokEPSS %2

    cybozu · remote service manager19 Nis 2014

  • CVE-2014-7266
    32İzleyin

    Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a

    YüksekCVSS 7,8İstismar yokEPSS %1

    cybozu · remote service manager1 Şub 2015

  • CVE-2018-0673
    32İzleyin

    Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files via unspecified vec

    YüksekCVSS 8,1İstismar yokEPSS %1

    cybozu · garoon15 Kas 2018

  • CVE-2016-1189
    32İzleyin

    Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended restrictions on reading, creating, or modifying

    YüksekCVSS 8,1İstismar yokEPSS %1

    cybozu · garoon25 Haz 2016