cnvd-2018-15525

EUVD-2026-60799

fkie_cve-2018-0527

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

GHSA-mp67-6hjg-v4hx

Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

jvndb-2018-000053

Cybozu Office provided by Cybozu, Inc. contains multiple vulnerabilities listed below. *Information disclosure in the application "Message" when viewing an external image (CWE-200) - CVE-2018-0526 *Stored cross-site scripting in "E-mail Details Screen" of the application "E-mail" (CWE-79) - CVE-2018-0527 *Browse restriction bypass in the application "Scheduler" (CWE-264) - CVE-2018-0528 *Denial-of-service (DoS) in the application "Message" due to a flaw in processing of an attached file (CWE-20) - CVE-2018-0529 *Reflected cross-site scripting in the application "MultiReport" (CWE-79) - CVE-2018-0565 *Browse restriction bypass in the application "Scheduler" (CWE-264) - CVE-2018-0566 *Operation restriction bypass in the application "Bulletin" (CWE-264) - CVE-2018-0567 Jun Kokatsu reported CVE-2018-0526 vulnerability to Cybozu, Inc., and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN. Masato Kinugawa reported CVE-2018-0527 and CVE-2018-0565 vulnerabilities to Cybozu, Inc., and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN. Cybozu, Inc. reported CVE-2018-0528, CVE-2018-0529 and CVE-2018-0566 vulnerabilities to JPCERT/CC to notify users of respective solutions through JVN. Yuji Tounai reported CVE-2018-0567 vulnerability to Cybozu, Inc., and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN.

Most recent entries from all

cnvd-2018-15525

EUVD-2026-60799

fkie_cve-2018-0527

GHSA-mp67-6hjg-v4hx

gsd-2018-0527

jvndb-2018-000053