https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 20:59:39 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-50571 EUVD-2026-50571 https://cve.radiocsirt.org/vuln/euvd-2026-50571 https://cve.radiocsirt.org/vuln/fkie_cve-2019-5934 <p>SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application &#39;logging&#39;.</p> <p>SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application &#39;logging&#39;.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-5934 https://cve.radiocsirt.org/vuln/ghsa-2c63-vgrp-m7w4 <p>SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application &#39;logging&#39;.</p> <p>SQL injection vulnerability in the Cybozu Garoon 4.0.0 to 4.10.0 allows attacker with administrator rights to execute arbitrary SQL commands via the Log Search function of application &#39;logging&#39;.</p> https://cve.radiocsirt.org/vuln/ghsa-2c63-vgrp-m7w4 https://cve.radiocsirt.org/vuln/gsd-2019-5934 gsd-2019-5934 https://cve.radiocsirt.org/vuln/gsd-2019-5934 https://cve.radiocsirt.org/vuln/jvndb-2019-000023 <p>Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. * Cross-site scripting in the additional processing of Customize Item function (CWE-79) - CVE-2019-5928 * Cross-site scripting in the application &#34;Memo&#34; (CWE-79) - CVE-2019-5929 * Browse restriction bypass in the application &#34;Management of Basic System&#34; (CWE-264) - CVE-2019-5930 * Improper verification of file path in installer (CWE-20) - CVE-2019-5931 * Stored cross-site scripting in the application &#34;Portal&#34; (CWE-79) - CVE-2019-5932 * Browse restriction bypass in the application &#34;Bulletin&#34; (CWE-284) - CVE-2019-5933 * SQL injection in the Log Search function of application &#34;logging&#34; (CWE-89) - CVE-2019-5934 * Operation restriction bypass in the Item function of User Information (CWE-264) - CVE-2019-5935 * Directory traversal in the application &#34;Work Flow&#34; (CWE-22) - CVE-2019-5936 * Cross-site scripting in the user information (CWE-79) - CVE-2019-5937 * Stored cross-site scripting in the application &#34;Mail&#34; (CWE-79) - CVE-2019-5938 * Cross-site scripting in the application &#34;Portal&#34; (CWE-79) - CVE-2019-5939 * Cross-site scripting in the application &#34;Scheduler&#34; (CWE-79) - CVE-2019-5940 * Operation restriction bypass in the application &#34;Multi Report&#34; (CWE-264) - CVE-2019-5941 * Browse restriction bypass in the Multiple Files Download function of application &#34;Cabinet&#34; (CWE-284) - CVE-2019-5942 * Browse restriction bypass in the application &#34;Bulletin&#34; and the application &#34;Cabin…</p> <p>Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. * Cross-site scripting in the additional processing of Customize Item function (CWE-79) - CVE-2019-5928 * Cross-site scripting in the application &#34;Memo&#34; (CWE-79) - CVE-2019-5929 * Browse restriction bypass in the application &#34;Management of Basic System&#34; (CWE-264) - CVE-2019-5930 * Improper verification of file path in installer (CWE-20) - CVE-2019-5931 * Stored cross-site scripting in the application &#34;Portal&#34; (CWE-79) - CVE-2019-5932 * Browse restriction bypass in the application &#34;Bulletin&#34; (CWE-284) - CVE-2019-5933 * SQL injection in the Log Search function of application &#34;logging&#34; (CWE-89) - CVE-2019-5934 * Operation restriction bypass in the Item function of User Information (CWE-264) - CVE-2019-5935 * Directory traversal in the application &#34;Work Flow&#34; (CWE-22) - CVE-2019-5936 * Cross-site scripting in the user information (CWE-79) - CVE-2019-5937 * Stored cross-site scripting in the application &#34;Mail&#34; (CWE-79) - CVE-2019-5938 * Cross-site scripting in the application &#34;Portal&#34; (CWE-79) - CVE-2019-5939 * Cross-site scripting in the application &#34;Scheduler&#34; (CWE-79) - CVE-2019-5940 * Operation restriction bypass in the application &#34;Multi Report&#34; (CWE-264) - CVE-2019-5941 * Browse restriction bypass in the Multiple Files Download function of application &#34;Cabinet&#34; (CWE-284) - CVE-2019-5942 * Browse restriction bypass in the application &#34;Bulletin&#34; and the application &#34;Cabin…</p> https://cve.radiocsirt.org/vuln/jvndb-2019-000023