CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 28/04/2017 |
| CVE-2016-7815 | 中危4.2 | Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network. | 28/04/2017 |
| CVE-2016-1187 | 中危6.8 | Cybozu KUNAI for iPhone 2.0.3 through 3.1.5 and for Android 2.1.2 through 3.0.4 does not verify SSL certificates. | 21/04/2017 |
| CVE-2016-1186 | 中危5.9 | Kintone mobile for Android 1.0.0 through 1.0.5 does not verify SSL server certificates. | 21/04/2017 |
| CVE-2016-4841 | 中危4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers. | 21/04/2017 |
| CVE-2016-1194 | 中危6.5 | Cybozu Garoon before 4.2.1 allows remote attackers to cause a denial of service. | 21/04/2017 |
| CVE-2016-4844 | 中危4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks. | 20/04/2017 |
| CVE-2016-4843 | 中危6.5 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information. | 20/04/2017 |
| CVE-2016-4842 | 中危4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read. | 20/04/2017 |
| CVE-2016-1220 | 中危4.3 | Cybozu Garoon before 4.2.2 does not properly restrict access. | 20/04/2017 |
| CVE-2016-1218 | 高危8.8 | SQL injection vulnerability in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1217 | 中危6.1 | Cross-site scripting (XSS) vulnerability in the "Check available times" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1216 | 中危6.1 | Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1215 | 中危6.1 | Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1214 | 中危6.1 | Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2. | 20/04/2017 |
| CVE-2016-1213 | 中危6.1 | The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites. | 20/04/2017 |
| CVE-2016-1219 | 严重9.8 | Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use. | 20/04/2017 |