Hyper NIKKI System cross-site request forgery vulnerability

Overview Hyper NIKKI System hns, a weblog system from the Hyper NIKKI System Project, contains a cross-site request forgery CSRF vulnerability. Impact If a weblog administrator accesses a malicious web page, an attacker could add, alter, or delete the weblog text. If the weblog text is successful...

Hyper Estraier directory traversal/denial of service vulnerability

Overview Hyper Estraier, a full text search system, contains a vulnerability in the process of creating index files. Impact If a remote attacker sends a specially crafted file and a user saves it in a search target directory, the attacker could register a file not to be searched in an index when...

Hyper NIKKI System allows unauthorized email submission

Overview Hyper NIKKI System hns is web log software from the Hyper NIKKI System Project. hns allows unauthorized email submission as it does not validate inputs properly. Impact An attacker could use the server to send unauthorized emails. In addition, when the server provides email service, the...

Hyper NIKKI System cross-site scripting vulnerability

Overview Hyper NIKKI System hns, web log software from the Hyper NIKKI System Project, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session...

DEBIAN-CVE-2007-4575

HSQLDB before 1.8.0.9, as used in OpenOffice.org OOo 2 before 2.3.1, allows user-assisted remote attackers to execute arbitrary Java code via crafted database documents, related to "exposing static java methods."...

CVE-2006-5774

Cross-site scripting XSS vulnerability in Hyper NIKKI System before 2.19.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

CVE-2006-5774

Hyper NIKKI System (HNS) is affected by a cross-site scripting (XSS) vulnerability in versions before 2.19.9. The issue allows remote attackers to inject arbitrary web script or HTML via unknown vectors. The JVN entry describes an impact where an arbitrary script may be executed in the user’s bro...

CVE-2006-5774

Cross-site scripting XSS vulnerability in Hyper NIKKI System before 2.19.9 allows remote attackers to inject arbitrary web script or HTML via unknown vectors...

JVN#88325166 Hyper NIKKI System cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected hns-2.190.8 hns-lite-2.190.8 and earlier...

CVE-2006-3671

Cross-site request forgery CSRF vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-3671

Cross-site request forgery CSRF vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-3671

Hyper Estraier contains a CSRF vulnerability in the communicate function of estmaster.c, affecting versions before 1.3.3. This could allow remote attackers to perform unauthorized actions as other users via unknown vectors. The issue is documented across multiple advisories, with the stated remed...

CVE-2006-3671

Cross-site request forgery CSRF vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors...

CVE-2006-3671

Removed by vendor...

JVN#65542239 Hyper NIKKI System allows unauthorized email submission

Impact An attacker could use the server to send unauthorized emails. In addition, when the server provides email service, the attacker could possibly conduct a DoS attack by generating many bounced emails. Solution Products Affected hns-2.19.6 hns-lite-2.19.6 and earlier On March 8 2006, the vend...

security flaw

Hyper-Threading technology, as used in FreeBSD and other operating systems that are run on Intel Pentium and other processors, allows local users to use a malicious thread to create covert channels, monitor the execution of other threads, and obtain sensitive information such as cryptographic key...

[SA17962] CA CleverPath Portal Login Page Cross-Site Scripting Vulnerability

TITLE: CA CleverPath Portal Login Page Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA17962 VERIFY ADVISORY: http://secunia.com/advisories/17962/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CA CleverPath Portal 4.x http://secunia.com/product/6404/...

CVE-2005-3421

estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters...

CVE-2005-3421

estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters...

CVE-2005-3421

Hyper Estraier 1.0.1 (estcmd) on Windows is affected. A remote attacker can read unauthorized files by sending a crafted search request where the filename contains Unicode characters. Affected component appears to be estcmd within Hyper Estraier; the vulnerability arises during a search/indexing ...