Vulnerabilites related to cybozu - collaborex
Vulnerability from fkie_nvd
Published
2006-08-31 22:04
Modified
2024-11-21 00:16
Severity ?
Summary
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.
References
cve@mitre.orghttp://cybozu.co.jp/products/dl/notice_060825/Patch
cve@mitre.orghttp://jvn.jp/jp/JVN%2390420168/index.htmlPatch
cve@mitre.orghttp://secunia.com/advisories/21638Vendor Advisory
cve@mitre.orghttp://secunia.com/advisories/21656Patch, Vendor Advisory
cve@mitre.orghttp://securitytracker.com/id?1016759Patch
cve@mitre.orghttp://www.osvdb.org/28262
af854a3a-2127-422b-91ae-364da2661108http://cybozu.co.jp/products/dl/notice_060825/Patch
af854a3a-2127-422b-91ae-364da2661108http://jvn.jp/jp/JVN%2390420168/index.htmlPatch
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21638Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/21656Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1016759Patch
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/28262
Impacted products
Vendor Product Version
cybozu collaborex *
cybozu cybozu_ag 1.2\(1.4\)
cybozu cybozu_pocket 5.2\(0.7\)
cybozu garoon_1 1.5\(4.0\)
cybozu mailwise 3.0\(0.2\)


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cybozu:collaborex:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CED5BAA4-1DD1-4DC3-A777-1402E55ED4CB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:cybozu_ag:1.2\\(1.4\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "3AE1109F-8CB8-4844-AAEA-00C28DA8A495",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:cybozu_pocket:5.2\\(0.7\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "B1A8DF13-14FD-4BF2-BF6A-B931C319DA12",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon_1:1.5\\(4.0\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "CD557756-9B60-4983-AE38-74EF6C2B3C86",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:mailwise:3.0\\(0.2\\):*:*:*:*:*:*:*",
              "matchCriteriaId": "CAB86035-A71A-4198-BADF-CA6723F2209E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de atravesamiento de directorios en Cybozu Collaborex, AG anterior a 1.2(1.5), AG Pocket anterior a 5.2(0.8), Mailwise anterior a 3.0(0.3), y Garoon 1 anterior a 1.5(4.1) permite a usuarios remotos autenticados leer archivos de su elecci\u00f3n mediante vectores no especificados."
    }
  ],
  "id": "CVE-2006-4491",
  "lastModified": "2024-11-21T00:16:05.330",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "NONE",
          "baseScore": 4.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-08-31T22:04:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://cybozu.co.jp/products/dl/notice_060825/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://jvn.jp/jp/JVN%2390420168/index.html"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21638"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21656"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1016759"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/28262"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://cybozu.co.jp/products/dl/notice_060825/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://jvn.jp/jp/JVN%2390420168/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21638"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/21656"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://securitytracker.com/id?1016759"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/28262"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

Vulnerability from fkie_nvd
Published
2011-06-29 17:55
Modified
2024-11-21 01:26
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system."
References
vultures@jpcert.or.jphttp://cybozu.co.jp/products/dl/notice/detail/0019.htmlPatch, Vendor Advisory
vultures@jpcert.or.jphttp://jvn.jp/en/jp/JVN54074460/index.html
vultures@jpcert.or.jphttp://jvndb.jvn.jp/jvndb/JVNDB-2011-000046
vultures@jpcert.or.jphttp://secunia.com/advisories/45043Vendor Advisory
vultures@jpcert.or.jphttp://www.osvdb.org/73317
vultures@jpcert.or.jphttp://www.securityfocus.com/bid/48446
af854a3a-2127-422b-91ae-364da2661108http://cybozu.co.jp/products/dl/notice/detail/0019.htmlPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://jvn.jp/en/jp/JVN54074460/index.html
af854a3a-2127-422b-91ae-364da2661108http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/45043Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/73317
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/48446
Impacted products
Vendor Product Version
cybozu office 6
cybozu garoon 2.0.0
cybozu garoon 2.0.1
cybozu garoon 2.0.2
cybozu garoon 2.0.3
cybozu garoon 2.0.4
cybozu garoon 2.0.5
cybozu garoon 2.0.6
cybozu garoon 2.1.0
cybozu garoon 2.1.1
cybozu garoon 2.1.2
cybozu garoon 2.1.3
cybozu dezie *
cybozu dezie 1.0
cybozu dezie 2.0
cybozu dezie 3.0
cybozu dezie 4.0
cybozu dezie 5.0
cybozu dezie 5.1
cybozu mailwise *
cybozu mailwise 1.0
cybozu mailwise 2.0
cybozu mailwise 2.1
cybozu collaborex *
cybozu collaborex 1.0


To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cybozu:office:6:*:*:*:*:*:*:*",
              "matchCriteriaId": "840B6B7E-3894-42FE-9703-9F58E3E1C343",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "1556F99E-1609-44FF-83F0-F43FBDE738A4",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "348C389E-ADFD-4D2C-AA54-220664EA2755",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "48F3F19B-25A7-4E9E-9961-1F7C8DBC0327",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "08AE0E10-87A4-4862-A873-A943F44A9862",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "C88D773E-B6DE-4FD2-A911-0D13C6CA902C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.0.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "C846A750-F26E-4F1F-85A3-F95BCC9F8A3E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.0.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "2E139B6A-2F36-4EB5-BA1F-84D67C89E935",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "6F585001-37C9-42F5-8B13-56827E6AC785",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "47FD3F43-9ECA-4815-8BDC-B9DAC07E9400",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F5F2D43-8B67-4D84-94AF-262F6D66F2B9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:garoon:2.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "277403E7-3CD9-458C-9669-FB983FF94568",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cybozu:dezie:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A008D879-B6CC-4B4E-AC09-2EE95C766C97",
              "versionEndIncluding": "6.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:dezie:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AF84B9B-33F4-4AC2-BD73-75F534C2C44F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:dezie:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "215F885A-9E88-4A1A-9DC2-D3F0C49D5EEE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:dezie:3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "485DBA87-EC8A-42B7-A733-75DCC80D582F",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:dezie:4.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8402C259-A94C-4565-8966-A7EBC6309D78",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:dezie:5.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8FB82E3-EA14-4A4A-949A-FCB0FDF53933",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:dezie:5.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E63153C-484C-408A-B147-BB25D93F3B19",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cybozu:mailwise:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2B063F64-8A73-4D16-B6CB-FC832CAA91F2",
              "versionEndIncluding": "3.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:mailwise:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "51929894-F74C-4F8D-A12F-73CBA4FED396",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:mailwise:2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "EE25F18D-2317-4646-A00A-D627E3BF3868",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:mailwise:2.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A28D9F5-6A27-42B5-8640-8560D68D930E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:cybozu:collaborex:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E1271BA9-9FD3-444C-B36F-68B4C0AA3189",
              "versionEndIncluding": "1.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:cybozu:collaborex:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A910D1FE-CBF2-4AF5-B322-A1B87E53D75F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to \"downloading graphic files from the mail system.\""
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en Cybozu Office v6, Cybozu Garoon v2.0.0 hasta v2.1.3, Cybozu Dezie antes de v6.1, Cybozu MailWise antes de v3.1, y Cybozu Collaborex antes de v1.5 permiten a atacantes remotos inyectar secuencias de comandos web o HTML a trav\u00e9s de vectores relacionados con \"la descarga de archivos gr\u00e1ficos desde el sistema de correo\"."
    }
  ],
  "id": "CVE-2011-1334",
  "lastModified": "2024-11-21T01:26:06.300",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 4.3,
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2011-06-29T17:55:02.877",
  "references": [
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://cybozu.co.jp/products/dl/notice/detail/0019.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://jvn.jp/en/jp/JVN54074460/index.html"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/45043"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://www.osvdb.org/73317"
    },
    {
      "source": "vultures@jpcert.or.jp",
      "url": "http://www.securityfocus.com/bid/48446"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://cybozu.co.jp/products/dl/notice/detail/0019.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvn.jp/en/jp/JVN54074460/index.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/45043"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/73317"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/48446"
    }
  ],
  "sourceIdentifier": "vultures@jpcert.or.jp",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-79"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

cve-2006-4491
Vulnerability from cvelistv5
Published
2006-08-31 22:00
Modified
2024-08-07 19:14
Severity ?
Summary
Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors.
References
http://jvn.jp/jp/JVN%2390420168/index.htmlthird-party-advisory, x_refsource_JVN
http://cybozu.co.jp/products/dl/notice_060825/x_refsource_CONFIRM
http://www.osvdb.org/28262vdb-entry, x_refsource_OSVDB
http://securitytracker.com/id?1016759vdb-entry, x_refsource_SECTRACK
http://secunia.com/advisories/21638third-party-advisory, x_refsource_SECUNIA
http://secunia.com/advisories/21656third-party-advisory, x_refsource_SECUNIA
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T19:14:47.473Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "JVN#90420168",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/jp/JVN%2390420168/index.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cybozu.co.jp/products/dl/notice_060825/"
          },
          {
            "name": "28262",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/28262"
          },
          {
            "name": "1016759",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1016759"
          },
          {
            "name": "21638",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21638"
          },
          {
            "name": "21656",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/21656"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-08-25T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2006-12-11T10:00:00",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "JVN#90420168",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/jp/JVN%2390420168/index.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cybozu.co.jp/products/dl/notice_060825/"
        },
        {
          "name": "28262",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/28262"
        },
        {
          "name": "1016759",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1016759"
        },
        {
          "name": "21638",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21638"
        },
        {
          "name": "21656",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/21656"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-4491",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Directory traversal vulnerability in Cybozu Collaborex, AG before 1.2(1.5), AG Pocket before 5.2(0.8), Mailwise before 3.0(0.3), and Garoon 1 before 1.5(4.1) allows remote authenticated users to read arbitrary files via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "JVN#90420168",
              "refsource": "JVN",
              "url": "http://jvn.jp/jp/JVN%2390420168/index.html"
            },
            {
              "name": "http://cybozu.co.jp/products/dl/notice_060825/",
              "refsource": "CONFIRM",
              "url": "http://cybozu.co.jp/products/dl/notice_060825/"
            },
            {
              "name": "28262",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/28262"
            },
            {
              "name": "1016759",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1016759"
            },
            {
              "name": "21638",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21638"
            },
            {
              "name": "21656",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/21656"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-4491",
    "datePublished": "2006-08-31T22:00:00",
    "dateReserved": "2006-08-31T00:00:00",
    "dateUpdated": "2024-08-07T19:14:47.473Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2011-1334
Vulnerability from cvelistv5
Published
2011-06-29 17:00
Modified
2024-09-17 01:16
Severity ?
Summary
Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to "downloading graphic files from the mail system."
References
http://cybozu.co.jp/products/dl/notice/detail/0019.htmlx_refsource_CONFIRM
http://www.osvdb.org/73317vdb-entry, x_refsource_OSVDB
http://www.securityfocus.com/bid/48446vdb-entry, x_refsource_BID
http://jvn.jp/en/jp/JVN54074460/index.htmlthird-party-advisory, x_refsource_JVN
http://secunia.com/advisories/45043third-party-advisory, x_refsource_SECUNIA
http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046third-party-advisory, x_refsource_JVNDB
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website

To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:21:34.065Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://cybozu.co.jp/products/dl/notice/detail/0019.html"
          },
          {
            "name": "73317",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/73317"
          },
          {
            "name": "48446",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/48446"
          },
          {
            "name": "JVN#54074460",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVN",
              "x_transferred"
            ],
            "url": "http://jvn.jp/en/jp/JVN54074460/index.html"
          },
          {
            "name": "45043",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/45043"
          },
          {
            "name": "JVNDB-2011-000046",
            "tags": [
              "third-party-advisory",
              "x_refsource_JVNDB",
              "x_transferred"
            ],
            "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to \"downloading graphic files from the mail system.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2011-06-29T17:00:00Z",
        "orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
        "shortName": "jpcert"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://cybozu.co.jp/products/dl/notice/detail/0019.html"
        },
        {
          "name": "73317",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/73317"
        },
        {
          "name": "48446",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/48446"
        },
        {
          "name": "JVN#54074460",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVN"
          ],
          "url": "http://jvn.jp/en/jp/JVN54074460/index.html"
        },
        {
          "name": "45043",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/45043"
        },
        {
          "name": "JVNDB-2011-000046",
          "tags": [
            "third-party-advisory",
            "x_refsource_JVNDB"
          ],
          "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "vultures@jpcert.or.jp",
          "ID": "CVE-2011-1334",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Cross-site scripting (XSS) vulnerability in Cybozu Office 6, Cybozu Garoon 2.0.0 through 2.1.3, Cybozu Dezie before 6.1, Cybozu MailWise before 3.1, and Cybozu Collaborex before 1.5 allows remote attackers to inject arbitrary web script or HTML via vectors related to \"downloading graphic files from the mail system.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://cybozu.co.jp/products/dl/notice/detail/0019.html",
              "refsource": "CONFIRM",
              "url": "http://cybozu.co.jp/products/dl/notice/detail/0019.html"
            },
            {
              "name": "73317",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/73317"
            },
            {
              "name": "48446",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/48446"
            },
            {
              "name": "JVN#54074460",
              "refsource": "JVN",
              "url": "http://jvn.jp/en/jp/JVN54074460/index.html"
            },
            {
              "name": "45043",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/45043"
            },
            {
              "name": "JVNDB-2011-000046",
              "refsource": "JVNDB",
              "url": "http://jvndb.jvn.jp/jvndb/JVNDB-2011-000046"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
    "assignerShortName": "jpcert",
    "cveId": "CVE-2011-1334",
    "datePublished": "2011-06-29T17:00:00Z",
    "dateReserved": "2011-03-09T00:00:00Z",
    "dateUpdated": "2024-09-17T01:16:50.241Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}