CVE-2008-5717

CVE-2008-5717 is a cross-site scripting vulnerability in Hitachi JP1/Integrated Management - Service Support for Windows. Affected components/version ranges include 08-10 to 08-10-05, 08-11 to 08-11-03, and 08-50 to 08-50-03. Root cause: improper handling of input in the web interface allows inje...

Microsoft GDI+ WMF Image File Buffer Overflow Vulnerability

Description Microsoft GDI+ is prone to a buffer-overflow vulnerability because the vector graphics linked library improperly allocates memory when parsing WMF image files. Successfully exploiting this issue would allow an attacker to corrupt memory and execute arbitrary code in the context of the...

Microsoft GDI+ GIF File Parsing Remote Code Execution Vulnerability

Description Microsoft GDI+ is prone to a remote code-execution vulnerability because the vector graphics link library improperly parses GIF image files. An attacker could exploit this issue to execute arbitrary code with the privileges of the currently logged-in user. Failed exploit attempts may...

Microsoft GDI+ BMP Integer Overflow Vulnerability

Description Microsoft GDI+ is prone to an integer-overflow vulnerability. An attacker can exploit this issue by enticing unsuspecting users to view a malicious BMP file. Successfully exploiting this issue allows remote attackers to corrupt memory and execute arbitrary code in the context of the...

JP1/NETM/DM Manager SQL Injection Vulnerability

Overview JP1/NETM/DM Manager for Windows is vulnerable to SQL injection where a relational database is used as the JP1/NETM/DM database. This could allow attackers to execute arbitrary SQL command and/or corrupt database when it receives a malformed request. Impact An attacker could execute...

JVN#52846259 JP1/Cm2/Network Node Manager vulnerable to cross-site scripting

Hitachi JP1/Cm2/Network Node Manager NNM is software that helps a network administrator manage network configurations, faults, and other elements. Hitachi NNM is vulnerable to cross-site scripting. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software...

CVE-2007-6145

Unspecified vulnerability in Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-01 allows remote attackers to bypass authentication and "view files" via unspecified vectors...

CVE-2007-6145

Unspecified vulnerability in Hitachi JP1/File Transmission Server/FTP 01-00 through 08-10-01 allows remote attackers to bypass authentication and "view files" via unspecified vectors...

CVE-2007-6146

Hitachi JP1/File Transmission Server/FTP (Windows) versions 01-00 through 08-10-02 may allow remote attackers to cause a denial of service (service stop) by supplying a crafted or certain file argument to an FTP command. The available sources describe the impact as a DoS but do not provide exploi...

CVE-2007-6145

Hitachi JP1/File Transmission Server/FTP (versions 01-00 to 08-10-01) contains an authentication bypass vulnerability that could allow remote attackers to view files in a directory. The issue is described across multiple sources (e.g., Hitachi JP1/FTP authentication bypass). The connected documen...

Code injection

Unspecified vulnerability in the Shared Trace Service in Hitachi JP1/Cm2/Network Node Manager NNM 07-10 through 07-10-05, and NNM Starter Edition Enterprise and 250 08-00 through 08-10, allows remote attackers to execute arbitrary code via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in Hitachi JP1/Cm2/Hierarchical Viewer HV 06-00 through 06-71-/B allows remote attackers to cause a denial of service application stop and web interface outage via certain "unexpected data."...

CVE-2007-4122

Unspecified vulnerability in Hitachi JP1/Cm2/Hierarchical Viewer HV 06-00 through 06-71-/B allows remote attackers to cause a denial of service application stop and web interface outage via certain "unexpected data."...

CVE-2007-4122

The CVE-2007-4122 entry concerns Hitachi JP1/Cm2/Hierarchical Viewer (HV) with affected versions 06-00 through 06-71-/B. The issue is described as an unspecified vulnerability that enables remote attackers to cause a denial of service (application stop and web interface outage) via certain “unexp...

CVE-2007-4122

Unspecified vulnerability in Hitachi JP1/Cm2/Hierarchical Viewer HV 06-00 through 06-71-/B allows remote attackers to cause a denial of service application stop and web interface outage via certain "unexpected data."...

Hitachi JP1/NETM/DM Manager产品未明SQL注入漏洞

Hitachi JP1/NETM/DM Manager对输入数据缺少充分过滤检查，可导致SQL注入攻击获得敏感信息。 发送记性请求给JP1/NETM/DM使用的相关数据库，可导致执行任意SQL命令和破坏数据库。 目前没有详细漏洞细节提供。 Hitachi NETM/DM 02-03-/F1 Hitachi NETM/DM 02-00 Hitachi JP1/NETM/DM Manager Embedded RDB Edition 07-53-09 Hitachi JP1/NETM/DM Manager Embedded RDB Edition 07-00 Hitachi...

CVE-2007-3793

SQL injection vulnerability in Job Management Partner 1/NETM/DM JP1/NETM/DM Manager on Windows before 20070413 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2007-3793

JP1/NETM/DM Manager for Windows is affected by a SQL injection vulnerability (CVE-2007-3793) described in the JVN entry: arbitrary SQL commands could be executed or the database could be corrupted when handling malformed requests. The vulnerability concerns the JP1/NETM/DM Manager’s interaction w...

CVE-2007-3623

Cross-site scripting XSS vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header...

Cross site scripting

Cross-site scripting XSS vulnerability in the Hitachi JP1/HiCommand Device Manager, Tiered Storage Manager, Replication Monitor, and GlobalLink Availability Manager before 20070528 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header...