Most recent entries from all

cnvd-2019-23789

EUVD-2026-50633

fkie_cve-2019-5975

DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

GHSA-j283-rc5f-ccww

DOM-based cross-site scripting vulnerability in Cybozu Garoon 4.6.0 to 4.10.2 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.

gsd-2019-5975

jvndb-2019-000047

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. * DOM-based cross-site scripting in the application "Portal" (CWE-79) - CVE-2019-5975 * Denial-of-service (DoS) (CWE-20) - CVE-2019-5976 * Mail header injection in the application "E-mail" (CWE-74) - CVE-2019-5977 * Open redirect in the application "Scheduler" (CWE-601) - CVE-2019-5978 Masato Kinugawa reported CVE-2019-5975 vulnerability to Cybozu, Inc., and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN. Kanta Nishitani reported CVE-2019-5976 and CVE-2019-5978 vulnerabilities to Cybozu, Inc., and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN. Shuichi Uruma reported CVE-2019-5977 vulnerability to Cybozu, Inc., and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN.