Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Cybozu, Inc. Component: Kunai Clear all filters
TI-2024-15408 CVE-2024-23304 · GHSA-7vw2-84h4-6844

Untrusted search path in Cybozu, Inc. Cybozu KUNAI for Android

Priority MEDIUM 40

Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performing certain operations.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00754 Published 2024-02-06 No fix listed CWE-426
TI-2017-01472 CVE-2017-2172 · GHSA-cv2w-2m5w-q9f7

Cross-site scripting in Cybozu, Inc. Cybozu KUNAI for Android

Priority LOW 29

Cross-site scripting vulnerability in Cybozu KUNAI for Android 3.0.0 to 3.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00762 Published 2017-07-07 No fix listed CWE-79
TI-2012-03432 CVE-2012-4012 · GHSA-vr4m-fc3p-vvvm

The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote…

Priority LOW 22

The WebView class in the Cybozu KUNAI application before 2.0.6 for Android allows remote attackers to execute arbitrary JavaScript code, and obtain sensitive information, via a crafted application that places this code i…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01191 Published 2012-09-08 No fix listed CWE-200