|
248761
|
5.4 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cross-site scripting vulnerability in Cybozu Garoon 3.0.0 to 4.6.0 allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2018-0549
|
2024-11-21 12:38 |
2018-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248762
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 4.0.0 to 4.6.0 allows remote authenticated attackers to bypass access restriction to view the closed title of "Space" via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2018-0548
|
2024-11-21 12:38 |
2018-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248763
|
4.9 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of session authentication via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2018-0533
|
2024-11-21 12:38 |
2018-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248764
|
2.7 |
LOW
Network
|
cybozu
|
garoon
|
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to alter setting data of the Standard database via unspecified vectors.
|
CWE-79
Cross-site Scripting
|
CVE-2018-0532
|
2024-11-21 12:38 |
2018-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248765
|
4.3 |
MEDIUM
Network
|
cybozu
|
garoon
|
Cybozu Garoon 3.0.0 to 4.2.6 allows remote authenticated attackers to bypass access restriction to view or alter an access privilege of a folder and/or notification settings via unspecified vectors.
|
NVD-CWE-noinfo
|
CVE-2018-0531
|
2024-11-21 12:38 |
2018-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248766
|
8.8 |
HIGH
Network
|
cybozu
|
garoon
|
SQL injection vulnerability in the Cybozu Garoon 3.5.0 to 4.2.6 allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
|
CWE-89
SQL Injection
|
CVE-2018-0530
|
2024-11-21 12:38 |
2018-04-16 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248767
|
8.8 |
HIGH
Adjacent
|
buffalo
|
wzr-1750dhp2_firmware
|
Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary OS commands via unspecified vectors.
|
CWE-78
OS Command
|
CVE-2018-0556
|
2024-11-21 12:38 |
2018-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248768
|
7.8 |
HIGH
Local
|
buffalo
|
wzr-1750dhp2_firmware
|
Buffer overflow in Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to execute arbitrary code via a specially crafted file.
|
CWE-119
Incorrect Access of Indexable Resource ('Range Error')
|
CVE-2018-0555
|
2024-11-21 12:38 |
2018-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248769
|
8.8 |
HIGH
Adjacent
|
buffalo
|
wzr-1750dhp2_firmware
|
Buffalo WZR-1750DHP2 Ver.2.30 and earlier allows an attacker to bypass authentication and execute arbitrary commands on the device via unspecified vectors.
|
CWE-306
Missing Authentication for Critical Function
|
CVE-2018-0554
|
2024-11-21 12:38 |
2018-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
248770
|
7.4 |
HIGH
Network
|
glamo
|
iremocon_wifi
|
The iRemoconWiFi App for Android version 4.1.7 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informat…
|
CWE-295
Improper Certificate Validation
|
CVE-2018-0553
|
2024-11-21 12:38 |
2018-04-9 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|