| CVE-2017-2172 | TRUNG BÌNH6.1 | Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 07/07/2017 |
| CVE-2017-2146 | TRUNG BÌNH4.8 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.4 allows remote attackers to inject arbitrary web script or HTML via application menu. | 07/07/2017 |
| CVE-2017-2145 | TRUNG BÌNH5.4 | Session fixation vulnerability in Cybozu Garoon 4.0.0 to 4.2.4 allows remote attackers to perform arbitrary operations via unspecified vectors. | 07/07/2017 |
| CVE-2017-2144 | TRUNG BÌNH5.4 | Cybozu Garoon 3.0.0 to 4.2.4 may allow an attacker to lock another user's file through a specially crafted page. | 07/07/2017 |
| CVE-2016-7833 | CAO7.5 | Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors. | 09/06/2017 |
| CVE-2016-7832 | TRUNG BÌNH5.3 | Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors. | 09/06/2017 |
| CVE-2016-7816 | TRUNG BÌNH5.9 | The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. | 09/06/2017 |
| CVE-2016-7803 | CAO8.8 | SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" function. | 09/06/2017 |
| CVE-2016-7802 | TRUNG BÌNH6.5 | Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors. | 09/06/2017 |
| CVE-2016-7801 | TRUNG BÌNH4.3 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors. | 09/06/2017 |
| CVE-2016-4910 | TRUNG BÌNH4.3 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to delete other operational administrators' MultiReport filters via unspecified vectors. | 09/06/2017 |
| CVE-2016-4909 | TRUNG BÌNH4.3 | Cross-site request forgery (CSRF) vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to hijack the authentication of a logged in user to force a logout via unspecified vectors. | 09/06/2017 |
| CVE-2016-4908 | TRUNG BÌNH4.3 | Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to bypass access restriction to alter or delete another user's private RSS settings via unspecified vectors. | 09/06/2017 |
| CVE-2016-4907 | CAO8.8 | Cybozu Garoon 3.0.0 to 4.2.2 allow remote attackers to obtain CSRF tokens via unspecified vectors. | 09/06/2017 |
| CVE-2016-4906 | TRUNG BÌNH6.1 | Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to inject arbitrary web script or HTML via "Messages" function of Cybozu Garoon Keitai. | 09/06/2017 |
| CVE-2017-2116 | TRUNG BÌNH4.3 | Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to delete "customapp" templates via unspecified vectors. | 28/04/2017 |
| CVE-2017-2115 | TRUNG BÌNH4.3 | Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to bypass access restriction to obtain "customapp" information via unspecified vectors. | 28/04/2017 |
| CVE-2017-2114 | TRUNG BÌNH5.4 | Cross-site scripting vulnerability in Cybozu Office 10.0.0 to 10.5.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. | 28/04/2017 |
| CVE-2017-2109 | THẤP2.5 | Cybozu KUNAI for Android 3.0.4 to 3.0.5.1 allow remote attackers to obtain log information through a malicious Android application. | 28/04/2017 |
| CVE-2017-2095 | TRUNG BÌNH4.3 | Cybozu Garoon 3.0.0 to 4.2.3 allows remote authenticated attackers to bypass access restriction in the mail function leading to an alteration of the order of mail folders via unspecified vectors. | 28/04/2017 |