|
219161
|
9.8 |
CRITICAL
Network
|
cybozu
|
garoon
|
Cybozu Garoon 4.2.4 to 4.10.1 allow remote attackers to obtain the users' credential information via the authentication of Cybozu Garoon.
|
NVD-CWE-noinfo
|
CVE-2019-5945
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219162
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the contents of application 'Address' without modify privileges via the application 'Address'.
|
NVD-CWE-noinfo
|
CVE-2019-5944
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219163
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to view the information without view privileges via the application 'Bulletin' and the application 'Ca…
|
NVD-CWE-noinfo
|
CVE-2019-5943
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219164
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction to obtain files without access privileges via the Multiple Files Download function of application 'Cab…
|
NVD-CWE-noinfo
|
CVE-2019-5942
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219165
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to bypass access restriction alter the Report without access privileges via the application 'Multi Report'.
|
NVD-CWE-noinfo
|
CVE-2019-5941
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219166
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Scheduler'.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5940
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219167
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Portal'.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5939
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219168
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote attackers to inject arbitrary web script or HTML via the application 'Mail'.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5938
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219169
|
5.4 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to inject arbitrary web script or HTML via the user information.
|
CWE-79
Cross-site Scripting
|
CVE-2019-5937
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
219170
|
5.4 |
MEDIUM
Network
|
cybozu
|
garoon
|
Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access privileges via the application 'Work Flow'.
|
CWE-22
Path Traversal
|
CVE-2019-5936
|
2024-11-21 13:45 |
2019-05-18 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|