CVE-2014-7266

Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service CPU consumption via vectors that trigger colliding hash-table keys. NOTE: this vulnerability exists because of an incomplete fix for...

CVE-2014-7266

CVE-2014-7266 affects Cybozu Remote Service Manager (versions 2.3.0 and 3.x up to 3.1.2). It is an algorithmic complexity DoS vulnerability caused by an incomplete fix for CVE-2014-1983, allowing remote attackers to trigger colliding hash-table keys and cause CPU exhaustion. The DoS impact is a d...

CVE-2014-7266: Undefined Security Weakness

Algorithmic complexity vulnerability in Cybozu Remote Service Manager through 2.3.0 and 3.x through 3.1.2 allows remote attackers to cause a denial of service CPU consumption via vectors that trigger colliding hash-table keys. NOTE: this vulnerability exists because of an incomplete fix for...

PT-2015-3919

Name of the Vulnerable Software and Affected Versions Cybozu Remote Service Manager versions 2.3.0 and earlier Cybozu Remote Service Manager versions 3.x through 3.1.2 Description The issue allows remote attackers to cause a denial of service, specifically CPU consumption, by triggering colliding...

Cybozu Remote Service Manager vulnerable to denial-of-service (DoS)

Overview Remote Service Manager contains a denial-of-service DoS vulnerability. Remote Service Manager provided by Cybozu, Inc. is a software to access internal systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager contains a denial-of-service DoS vulnerability. Note...

JVN#13566542: Cybozu Remote Service Manager vulnerable to denial-of-service (DoS)

Remote Service Manager provided by Cybozu, Inc. is a software to access internal systems such as Cybozu products via "Cybozu Remote Service". Remote Service Manager contains a denial-of-service DoS vulnerability. Note that this vulnerability was caused due to an incomplete fix of JVN10319260...

[security bulletin] HPSBMU03079 rev.1 - HP Service Manager, Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04388127 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04388127 Version: 1 HPSBMU03079 rev....

HP Service Manager multiple security vulnerabilities

Crossite scripting, unauthorized access, privilege escalation...

CVE-2014-2632

Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2014-2633

Cross-site request forgery CSRF vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

CVE-2014-2634

Unspecified vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors...

CVE-2013-6222

Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to bypass intended access restrictions, and modify data or cause a denial of service, via unknown vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the server in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...

CVE-2013-6222

Cross-site scripting XSS vulnerability in the Mobility Web Client and Service Request Catalog SRC components in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2634

HP Service Manager (SM) exposed vulnerability CVE-2014-2634 affecting SM versions 7.21 and 9.x prior to 9.34. The server component could be accessed in a way that bypasses intended access controls, allowing remote attackers to modify data or cause a denial of service via unspecified vectors. The ...

CVE-2014-2632

HP Service Manager CVE-2014-2632 affects the WebTier component across SM 7.21 and SM 9.x up to 9.33, allowing remote code execution via unknown vectors. The HP security bulletin HPSBMU03079 rev.1 documents an increase of privilege and other vulnerabilities impacting WebTier, with CVSSv2 base scor...

CVE-2014-2632

Unspecified vulnerability in the WebTier component in HP Service Manager SM 7.21 and 9.x before 9.34 allows remote attackers to execute arbitrary code via unknown vectors...