CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 26/06/2018 |
| CVE-2018-0557 | 中危6.1 | Stored cross-site scripting vulnerability in Cybozu Mailwise 5.0.0 to 5.4.1 allows remote attackers to inject arbitrary web script or HTML 'E-mail Details Screen' via unspecified vectors. | 26/06/2018 |
| CVE-2016-4841 | 中危4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to inject arbitrary email headers. | 21/04/2017 |
| CVE-2016-4844 | 中危4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to conduct clickjacking attacks. | 20/04/2017 |
| CVE-2016-4843 | 中危6.5 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain sensitive cookie information. | 20/04/2017 |
| CVE-2016-4842 | 中危4.3 | Cybozu Mailwise before 5.4.0 allows remote attackers to obtain information on when an email is read. | 20/04/2017 |
| CVE-2014-5314 | 严重9.0 | Buffer overflow in Cybozu Office 9 and 10 before 10.1.0, Mailwise 4 and 5 before 5.1.4, and Dezie 8 before 8.1.1 allows remote authenticated users to execute arbitrary code via e-mail messages. | 24/11/2014 |
| CVE-2013-4698 | 低危3.5 | Cybozu Mailwise 5.0.4 and 5.0.5 allows remote authenticated users to obtain sensitive e-mail content intended for different persons in opportunistic circumstances by reading Subject header lines within the user's own mailbox. | 16/08/2013 |
| CVE-2013-2305 | 中危6.8 | Cross-site request forgery (CSRF) vulnerability in Cybozu Office before 8.1.6 and 9.x before 9.3.0, Cybozu Dezie before 8.0.7, and Cybozu Mailwise before 5.0.4 allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords. | 25/04/2013 |
| CVE-2011-1334 | 中危4.3 | Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system." | 29/06/2011 |
| CVE-2006-4491 | 中危4.0 | Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors. | 31/08/2006 |