CVE-2007-4760

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors...

CVE-2007-4758

Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

CVE-2007-4759

Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors...

CVE-2007-4758

Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

CVE-2007-4759

Technical details about CVE-2007-4759 are not publicly available in the provided connected documents; the materials reiterate a general DoS via image-processing APIs in Cosminexus 4–7. Monitor for updates.

CVE-2007-4760

CVE-2007-4760 relates to the Javadoc tool in Cosminexus Developer's Kit for Java (Cosminexus 7/7.5), which can produce HTML with cross-site scripting (XSS). Connected documents reference the broader XSS issue in Javadoc (CVE-2007-3503) and related Java vulnerabilities; exploitation details are no...

CVE-2007-4760

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

CVE-2007-4758

The CVE-2007-4758 entry affects the Cosminexus Developer’s Kit for Java (Cosminexus 4–7). The vulnerability is a buffer overflow in the image-processing APIs, with the root cause described as multiple buffer overflows. Consequences stated include denial of service or execution of arbitrary code v...

Code injection

Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service connection prevention by sending "data unexpectedly through a port."...

CVE-2007-4563

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges...

Code injection

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges...

CVE-2007-4564

Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges...

Code injection

Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges...

CVE-2007-4562

Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service connection prevention by sending "data unexpectedly through a port."...

CVE-2007-4563

Cosminexus Manager in Cosminexus Application Server 06-50 and later is affected by CVE-2007-4563, where backend processes for logical J2EE servers may receive incorrect group permissions. This could allow local users to gain privileges. The vulnerability is described as a local privilege escalati...

CVE-2007-4563

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges...

CVE-2007-4562

Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service connection prevention by sending "data unexpectedly through a port."...

CVE-2007-4562

CVE-2007-4562 affects Hitachi DABroker (before 03-02-/D) and Cosminexus DABroker (before 02-04-/C and 03-05-/E). The impact is a remote denial of service (connection prevention) caused by sending data unexpectedly through a port. The connected documents do not provide detailed root cause, affecte...

CVE-2007-4564

Cosminexus Manager in Cosminexus Application Server 07-00 and later may assign the wrong user’s group permissions to activated logical server processes, enabling local privilege escalation. Root cause: mis-assignment of group permissions to server processes started by Cosminexus Manager. Impact: ...