|
266351
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting (XSS) vulnerability in the "New appointment" function in Cybozu Garoon before 4.2.2.
|
CWE-79
Cross-site Scripting
|
CVE-2016-1216
|
2024-11-21 11:45 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266352
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting (XSS) vulnerability in the "User details" function in Cybozu Garoon before 4.2.2.
|
CWE-79
Cross-site Scripting
|
CVE-2016-1215
|
2024-11-21 11:45 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266353
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting (XSS) vulnerability in the "Response request" function in Cybozu Garoon before 4.2.2.
|
CWE-79
Cross-site Scripting
|
CVE-2016-1214
|
2024-11-21 11:45 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266354
|
6.1 |
MEDIUM
Network
|
cybozu
|
garoon
|
The "Scheduler" function in Cybozu Garoon before 4.2.2 allows remote attackers to redirect users to arbitrary websites.
|
CWE-601
Open Redirect
|
CVE-2016-1213
|
2024-11-21 11:45 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266355
|
9.8 |
CRITICAL
Network
|
cybozu
|
garoon
|
Cybozu Garoon before 4.2.2 allows remote attackers to bypass login authentication via vectors related to API use.
|
CWE-287
Improper Authentication
|
CVE-2016-1219
|
2024-11-21 11:45 |
2017-04-21 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266356
|
9.8 |
CRITICAL
Network
|
google
|
android
|
HTTP header injection vulnerability in the URLConnection class in Android OS 2.2 through 6.0 allows remote attackers to execute arbitrary scripts or set arbitrary values in cookies.
|
CWE-74
Injection
|
CVE-2016-1155
|
2024-11-21 11:45 |
2017-04-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266357
|
7.5 |
HIGH
Network
|
docomo
|
shoplat
|
Shoplat App for iOS 1.10.00 through 1.18.00 does not properly verify SSL certificates.
|
CWE-295
Improper Certificate Validation
|
CVE-2016-1132
|
2024-11-21 11:45 |
2017-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266358
|
6.1 |
MEDIUM
Network
|
appleple
|
a-blog_cms
|
Cross-site scripting (XSS) vulnerability in the standard template of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to inject arbitrary web script or HTM…
|
CWE-79
Cross-site Scripting
|
CVE-2016-1179
|
2024-11-21 11:45 |
2017-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266359
|
6.5 |
MEDIUM
Network
|
appleple
|
a-blog_cms
|
The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors.
|
CWE-284
Improper Access Control
|
CVE-2016-1178
|
2024-11-21 11:45 |
2017-04-13 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
266360
|
9.8 |
CRITICAL
Network
|
adobe
|
acrobat acrobat_dc acrobat_reader_dc reader
|
Use-after-free vulnerability in Adobe Reader and Acrobat before 11.0.18, Acrobat and Acrobat Reader DC Classic before 15.006.30243, and Acrobat and Acrobat Reader DC Continuous before 15.020.20039 on…
|
CWE-416
Use After Free
|
CVE-2016-1091
|
2024-11-21 11:45 |
2016-10-14 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|