CVSS: 9.3EPSS: 1%CPEs: 295EXPL: 0CVE-2009-4776
https://notcve.org/view.php?id=CVE-2009-4776
Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application, and a different issue from CVE-2007-3794. Desbordamiento de búfer en Hitachi Cosminexus V4 a la V8, Processing Kit para XML, y Developer's Kit para Java, usado en productos como uCosminexus, Electronic Form Workflow, Groupmax, e IBM XL C/C++ Enterprise Edition 7 y 8, permite a atacantes remotos tener un impacto desconocido a través de vectores relacionados con el uso del procesamiento de imágenes GIF mediante APIs para aplicaciones Java. Cuestión distinta del CVE-2007-3794. • http://osvdb.org/57834 http://secunia.com/advisories/36622 http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html http://www.securityfocus.com/bid/36309 http://www.vupen.com/english/advisories/2009/2574 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 125EXPL: 0CVE-2007-3794
https://notcve.org/view.php?id=CVE-2007-3794
Buffer overflow in Hitachi Cosminexus V4 through V7, Processing Kit for XML before 20070511, Developer's Kit for Java before 20070312, and third-party products that use this software, allows attackers to have an unknown impact via certain GIF images, related to use of GIF image processing APIs by a Java application. Desbordamiento de búfer en Hitachi Cosminexus V4 hasta V7, Processing Kit para XML versiones anteriores a 20070511, Developer's Kit para Java versiones anteriores a 20070312, y productos de terceras partes que utilizan este software, permite a atacantes remotos tener un impacto desconocido mediante imágenes GIF determinadas, relativas al uso de de APIs de procesamiento de imágenes GIF por una aplicación JAVA. • http://osvdb.org/37851 http://secunia.com/advisories/26025 http://www.hitachi-support.com/security_e/vuls_e/HS07-018_e/index-e.html http://www.securityfocus.com/bid/24905 http://www.vupen.com/english/advisories/2007/2534 •
CVSS: 6.8EPSS: 1%CPEs: 5EXPL: 0CVE-2007-1786
https://notcve.org/view.php?id=CVE-2007-1786
SQL injection vulnerability in Hitachi Collaboration - Online Community Management 01-00 through 01-30, as used in Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, and uCosminexus Content Manager, allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en Hitachi Collaboration - Online Community Management 01-00 hasta la 01-30, utilizado en Groupmax Collaboration Portal, Groupmax Collaboration Web Client, uCosminexus Collaboration Portal, Cosminexus Collaboration Portal, y uCosminexus Content Manager, permite a atacantes remotos ejecutar comandos SQL de su elección a través vectores no especificados. • http://osvdb.org/34544 http://secunia.com/advisories/24693 http://www.hitachi-support.com/security_e/vuls_e/HS07-008_e/index-e.html http://www.securityfocus.com/bid/23208 http://www.vupen.com/english/advisories/2007/1168 https://exchange.xforce.ibmcloud.com/vulnerabilities/33348 •
CVSS: 6.8EPSS: 2%CPEs: 9EXPL: 0CVE-2006-3574
https://notcve.org/view.php?id=CVE-2006-3574
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Groupmax Collaboration Portal and Web Client before 07-20-/D, and uCosminexus Collaboration Portal and Forum/File Sharing before 06-20-/C, allow remote attackers to "execute malicious scripts" via unknown vectors (aka HS06-014-01). Múltiples vulnerabilidades de secuencia de comandos en sitios cruzados (XSS) en Hitachi Groupmax Collaboration Portal y Web Client anterior 07-20-/D, y uCosminexus Collaboration Portal y Forum/File Sharing anterior a 06-20-/C, permite a atacantes remotos "ejecutar secuencias de comandos maliciosas" a través de vectores desconocidos (también conocido como HS06-014-01). • http://secunia.com/advisories/20926 http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/01-e.html http://www.hitachi-support.com/security_e/vuls_e/HS06-014_e/index-e.html http://www.securityfocus.com/bid/18830 http://www.vupen.com/english/advisories/2006/2665 https://exchange.xforce.ibmcloud.com/vulnerabilities/27605 •
CVSS: 4.3EPSS: 0%CPEs: 6EXPL: 0CVE-2005-4322
https://notcve.org/view.php?id=CVE-2005-4322
Multiple cross-site scripting (XSS) vulnerabilities in Hitachi Cosminexus Collaboration Portal 06-00 through 06-10-/B, Groupmax Collaboration Portal 07-00 through 07-10-/B, and Groupmax Collaboration Web Client 07-00 through 07-10-/A allow remote attackers to inject arbitrary web script or HTML via the (1) Schedule and (2) Calendar components. • http://secunia.com/advisories/17634 http://securitytracker.com/alerts/2005/Nov/1015241.html http://securitytracker.com/alerts/2005/Nov/1015242.html http://www.hitachi-support.com/security_e/vuls_e/HS05-023_e/01-e.html http://www.osvdb.org/20969 http://www.osvdb.org/22126 http://www.securityfocus.com/bid/15498 https://exchange.xforce.ibmcloud.com/vulnerabilities/23197 •