CVEs (22)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Path traversal vulnerability in Importing Mobile Device Data of Cybozu Remote Service 3.1.2 allows a remote authenticated attacker to cause a denial-of-service (DoS) condition. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 6.1 MEDIUM· v3 4.3 MEDIUM· v2 Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.0.0 to 3.1.9 allows a remote attacker to inject an arbitrary script via unspecified vectors. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 6.1 MEDIUM· v3 5.8 MEDIUM· v2 Open redirect vulnerability in Cybozu Remote Service 3.0.0 to 3.1.9 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.7 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to cause a denial of service (DoS) condition via unspecified vectors. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 5.4 MEDIUM· v3 4.0 MEDIUM· v2 Operation restriction bypass in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to alter the data of the management screen. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 HTTP header injection vulnerability in Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to alter the information stored in the product. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to conduct XML External Entity (XXE) attacks and obtain the information stored in the product via unspecified vectors. This issue occurs only wh...Show more |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site scripting vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Cross-site script inclusion vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to obtain the information stored in the product. This issue occurs only when using...Show more |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Directory traversal vulnerability in the management screen of Cybozu Remote Service 3.1.8 allows a remote authenticated attacker to upload an arbitrary file via unspecified vectors. |
1Cybozu 1Remote Service Manager Jun 17, 2026 Oct 13, 2021 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Cross-site request forgery (CSRF) vulnerability in the management screen of Cybozu Remote Service 3.1.8 to 3.1.9 allows a remote attacker to hijack the authentication of administrators and unintended operations may be pe...Show more |
1Cybozu 1Remote Service Manager Nov 21, 2024 Jan 9, 2019 N/A· v4 6.5 MEDIUM· v3 5.8 MEDIUM· v2 Improper countermeasure against clickjacking attack in client certificates management screen was discovered in Cybozu Remote Service 3.0.0 to 3.1.8, that allows remote attackers to trick a user to delete the registered c...Show more |
1Cybozu 1Remote Service Manager Nov 21, 2024 Jan 9, 2019 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to execute Java code file on the server via unspecified vectors. |
1Cybozu 1Remote Service Manager Nov 21, 2024 Jan 9, 2019 N/A· v4 8.1 HIGH· v3 6.5 MEDIUM· v2 Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 for Windows allows remote authenticated attackers to read arbitrary files via unspecified vectors. |
1Cybozu 1Remote Service Manager Nov 21, 2024 Jan 9, 2019 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Java code file on the server via unspecified vectors. |
1Cybozu 1Remote Service Manager May 13, 2026 Apr 28, 2017 N/A· v4 4.2 MEDIUM· v3 4.9 MEDIUM· v2 Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network. |
Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service (CPU consumption) via vectors that trigger colliding hash-tab...Show more |