CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 28/04/2017 |
| CVE-2016-7815 | MITTEL4.2 | Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network. | 28/04/2017 |
| CVE-2016-1187 | MITTEL6.8 | Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates. | 21/04/2017 |
| CVE-2016-1186 | MITTEL5.9 | Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates. | 21/04/2017 |
| CVE-2016-4841 | MITTEL4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers. | 21/04/2017 |
| CVE-2016-1194 | MITTEL6.5 | Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service. | 21/04/2017 |
| CVE-2016-4844 | MITTEL4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks. | 20/04/2017 |
| CVE-2016-4843 | MITTEL6.5 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information. | 20/04/2017 |
| CVE-2016-4842 | MITTEL4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read. | 20/04/2017 |
| CVE-2016-1220 | MITTEL4.3 | Cybozu Garoon before 4.2.2 does not properly restrict access. | 20/04/2017 |
| CVE-2016-1218 | HOCH8.8 | SQL injection vulnerability in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1217 | MITTEL6.1 | Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1216 | MITTEL6.1 | Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1215 | MITTEL6.1 | Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1214 | MITTEL6.1 | Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1213 | MITTEL6.1 | The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. | 20/04/2017 |
| CVE-2016-1219 | KRITISCH9.8 | Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use. | 20/04/2017 |