CVE-2007-5282

Cosminexus components Hitachi Cosminexus Agent 03-00..03-05 and Cosminexus Library Standard/Web Edition 04-00/04-01 are affected. A specially crafted data payload from processes other than Cosminexus Manager can cause the Cosminexus Agent process to crash, per JVNDB details. The vulnerability is ...

CVE-2007-4760

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

CVE-2007-4759

Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors...

Buffer overflow

Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

Cross site scripting

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

CVE-2007-4758

Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors...

CVE-2007-4758

Multiple buffer overflows in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service or execute arbitrary code via unspecified vectors...

CVE-2007-4760

CVE-2007-4760 relates to the Javadoc tool in Cosminexus Developer's Kit for Java (Cosminexus 7/7.5), which can produce HTML with cross-site scripting (XSS). Connected documents reference the broader XSS issue in Javadoc (CVE-2007-3503) and related Java vulnerabilities; exploitation details are no...

CVE-2007-4759

Multiple unspecified vulnerabilities in the image-processing APIs in Cosminexus Developer's Kit for Java in Cosminexus 4 through 7 allow remote attackers to cause a denial of service via unspecified vectors...

CVE-2007-4758

The CVE-2007-4758 entry affects the Cosminexus Developer’s Kit for Java (Cosminexus 4–7). The vulnerability is a buffer overflow in the image-processing APIs, with the root cause described as multiple buffer overflows. Consequences stated include denial of service or execution of arbitrary code v...

CVE-2007-4759

Technical details about CVE-2007-4759 are not publicly available in the provided connected documents; the materials reiterate a general DoS via image-processing APIs in Cosminexus 4–7. Monitor for updates.

CVE-2007-4760

The javadoc tool in Cosminexus Developer's Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting XSS vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as...

Code injection

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges...

Code injection

Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service connection prevention by sending "data unexpectedly through a port."...

Code injection

Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges...

CVE-2007-4564

Cosminexus Manager in Cosminexus Application Server 07-00 and later might assign the wrong user's group permissions to logical user server processes, which allows local users to gain privileges...

CVE-2007-4562

Unspecified vulnerability in Hitachi DABroker before 03-02-/D and Cosminexus DABroker before 02-04-/C and 03-05-/E allows remote attackers to cause a denial of service connection prevention by sending "data unexpectedly through a port."...

CVE-2007-4563

Cosminexus Manager in Cosminexus Application Server 06-50 and later might assign the wrong user's group permissions to logical J2EE server processes, which allows local users to gain privileges...

CVE-2007-4563

Cosminexus Manager in Cosminexus Application Server 06-50 and later is affected by CVE-2007-4563, where backend processes for logical J2EE servers may receive incorrect group permissions. This could allow local users to gain privileges. The vulnerability is described as a local privilege escalati...