Most recent entries from all

cnvd-2018-15282

EUVD-2026-60829

fkie_cve-2018-0558

Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.

GHSA-r8m9-42x5-r6fp

Reflected cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML in 'System settings' via unspecified vectors.

gsd-2018-0558

jvndb-2018-000054

Cybozu Mailwise contains multiple cross-site scripting vulnerabilities below. * Stored cross-site scripting vulnerability in "E-mail Details Screen" (CWE-79) - CVE-2018-0557 * Reflected cross-site scripting vulnerability in "System settings" (CWE-79) - CVE-2018-0558 * Reflected cross-site scripting vulnerability in "Address" (CWE-79) - CVE-2018-0559 Masato Kinugawa reported this vulnerability to Cybozu, Inc., and Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under the Information Security Early Warning Partnership.