https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T20:26:31.541564+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-03717 cnvd-2016-03717 2026-10-18T20:26:31.545294+00:00 cnvd-2016-03717 https://cve.radiocsirt.org/vuln/euvd-2026-81936 EUVD-2026-81936 2026-10-18T20:26:31.545329+00:00 EUVD-2026-81936 https://cve.radiocsirt.org/vuln/fkie_cve-2016-1196 fkie_cve-2016-1196 2026-10-18T20:26:31.545343+00:00

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776.

 https://cve.radiocsirt.org/vuln/ghsa-wh32-x668-vjvc GHSA-wh32-x668-vjvc 2026-10-18T20:26:31.545371+00:00

Cybozu Garoon 3.x and 4.x before 4.2.1 allows remote authenticated users to bypass intended access restrictions and obtain sensitive Address Book information via an API call, a different vulnerability than CVE-2015-7776.

 https://cve.radiocsirt.org/vuln/gsd-2016-1196 gsd-2016-1196 2026-10-18T20:26:31.545387+00:00 gsd-2016-1196 https://cve.radiocsirt.org/vuln/jvndb-2016-000082 jvndb-2016-000082 2026-10-18T20:26:31.545398+00:00

Cybozu Garoon is a groupware. Cybozu Garoon fails to restrict access permissions in the API to retrieve the Address Book information. Note that this vulnerability is different from JVN#53542912. Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under the Information Security Early Warning Partnership.