Most recent entries from all

EUVD-2026-267032

fkie_cve-2026-22881

Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.

GHSA-5pq5-2786-pgrm

Cross-site scripting vulnerability exists in Message function of Cybozu Garoon 5.15.0 to 6.0.3, which may allow an attacker to reset arbitrary users’ passwords.

jvndb-2026-000012

Cybozu Garoon provided by Cybozu, Inc. contains multiple vulnerabilities listed below. <ul><li>[CyVDB-3687]Cross-site scripting vulnerability in E-mail (CWE-79) - CVE-2026-20711</li><li>[CyVDB-3689]Cross-site scripting vulnerability in Message (CWE-79) - CVE-2026-22881</li><li>[CyVDB-3995]Improper input verification in Portal setting (CWE-231) - CVE-2026-22888</li></ul>CVE-2026-20711 Masato Kinugawa reported this vulnerability to Cybozu, Inc. and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN. CVE-2026-22881, CVE-2026-22888 Cybozu, Inc. reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN.