PT-2015-6027

Name of the Vulnerable Software and Affected Versions Yodobashi application versions 1.2.1.0 and earlier Description The issue allows remote attackers to execute arbitrary Java methods via a crafted HTML document, potentially obtaining sensitive information or executing OS commands. Recommendatio...

CVE-2015-0297

Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the 1 ServerInvokerServlet or 2 SchedulerService or 3 cause a denial of service disk consumption via the ContentManager...

Design/Logic Flaw

Red Hat JBoss Operations Network 3.3.1 does not properly restrict access to certain APIs, which allows remote attackers to execute arbitrary Java methods via the 1 ServerInvokerServlet or 2 SchedulerService or 3 cause a denial of service disk consumption via the ContentManager...

PT-2014-7850

Name of the Vulnerable Software and Affected Versions TSUTAYA application versions 5.3 and earlier Description The issue allows remote attackers to execute arbitrary Java methods via a crafted HTML document. Recommendations For versions 5.3 and earlier, at the moment, there is no information abou...

CVE-2014-7241: Improper Input Validation

The TSUTAYA application 5.3 and earlier for Android allows remote attackers to execute arbitrary Java methods via a crafted HTML document...

CVE-2014-0003

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message...

Design/Logic Flaw

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message...

CVE-2014-0003

CVE-2014-0003 affects the Apache Camel XSLT component. It allows a remote attacker to execute arbitrary Java methods by sending a crafted message due to the XSLT component’s ability to call external Java methods. Affected are Camel 2.11.x prior to 2.11.4 and 2.12.x prior to 2.12.3 (and possibly e...

CVE-2014-0003: Undefined Security Weakness

The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message...

CVE-2014-1979

The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows remote attackers to execute arbitrary Java methods via Deco-mail emoticon POP data in an e-mail message...

CVE-2014-1979: Improper Control of Generation of Code

The NTT DOCOMO sp mode mail application 5900 through 6300 for Android 4.0.x and 6000 through 6620 for Android 4.1 through 4.4 allows remote attackers to execute arbitrary Java methods via Deco-mail emoticon POP data in an e-mail message...

PT-2014-4401

Name of the Vulnerable Software and Affected Versions NTT DOCOMO sp mode mail application versions 5900 through 6300 for Android 4.0.x NTT DOCOMO sp mode mail application versions 6000 through 6620 for Android 4.1 through 4.4 Description The issue allows remote attackers to execute arbitrary Java...

Design/Logic Flaw

The Cybozu Live application before 2.0.1 for Android allows remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site. NOTE: this vulnerability exists because of a CVE-2012-4008 regression...

PT-2013-4539

Name of the Vulnerable Software and Affected Versions Cybozu Live versions prior to 2.0.1 Description The issue allows remote attackers to execute arbitrary Java methods and obtain sensitive information or execute arbitrary commands via a crafted web site. This is due to a regression of a...

PT-2012-5138

Name of the Vulnerable Software and Affected Versions Cybozu KUNAI version prior to 2.0.6 Description The issue allows remote attackers to execute arbitrary Java methods and obtain sensitive information or execute arbitrary commands via a crafted web site. Recommendations For versions prior to...

PT-2012-5135

Name of the Vulnerable Software and Affected Versions Cybozu Live application versions 1.0.4 and earlier Description The issue allows remote attackers to execute arbitrary Java methods via a crafted web site, potentially obtaining sensitive information or executing arbitrary commands...

PT-2012-4161

Name of the Vulnerable Software and Affected Versions Sleipnir Mobile application versions 2.2.0 and earlier Sleipnir Mobile Black Edition application versions 2.2.0 and earlier Description The issue allows remote attackers to execute arbitrary Java methods and obtain sensitive information or...

Google Search Appliance proxystylesheet XSLT Java Code Execution

Exploit for hardware platform in category remote exploits ================================================================ Google Search Appliance proxystylesheet XSLT Java Code Execution ================================================================ This file is part of the Metasploit Framewor...