Most recent entries from all

cnvd-2019-23788

EUVD-2026-50616

fkie_cve-2019-5977

Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.

GHSA-jg7h-288x-c59w

Mail header injection vulnerability in Cybozu Garoon 4.0.0 to 4.10.2 may allow a remote authenticated attackers to alter mail header via the application 'E-Mail'.

gsd-2019-5977

jvndb-2019-000047

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. * DOM-based cross-site scripting in the application "Portal" (CWE-79) - CVE-2019-5975 * Denial-of-service (DoS) (CWE-20) - CVE-2019-5976 * Mail header injection in the application "E-mail" (CWE-74) - CVE-2019-5977 * Open redirect in the application "Scheduler" (CWE-601) - CVE-2019-5978 Masato Kinugawa reported CVE-2019-5975 vulnerability to Cybozu, Inc., and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN. Kanta Nishitani reported CVE-2019-5976 and CVE-2019-5978 vulnerabilities to Cybozu, Inc., and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN. Shuichi Uruma reported CVE-2019-5977 vulnerability to Cybozu, Inc., and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN.