CVSS: 4.0EPSS: 0%CPEs: 2EXPL: 0CVE-2006-5654
https://notcve.org/view.php?id=CVE-2006-5654
Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is enabled, allows remote authenticated users to cause a denial of service (application crash) via unspecified vectors. NOTE: due to lack of details from the vendor, it is unclear whether this is related to vector 1 in CVE-2006-5201 or CVE-2006-3127. Vulnerabilidad no especificada en Network Security Services (NSS) de Sun Java System Web Server 6.0 versiones anteriores a SP 10 y ONE Application Server 7 anteriores a Update 3, cuando SSLv2 está habilitado, permite a usuarios remotos autenticados provocar una denegación de servicio (fallo de aplicación) mediante vectores no especificados. NOTA: debido a la falta de detalles por parte del fabricanet, no está claro si esto está relacionado con el vector 1 en CVE-2006-5201. • http://secunia.com/advisories/22646 http://securitytracker.com/id?1017143 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102670-1 http://www.securityfocus.com/bid/20846 http://www.vupen.com/english/advisories/2006/4299 https://exchange.xforce.ibmcloud.com/vulnerabilities/29946 •
CVSS: 2.6EPSS: 0%CPEs: 3EXPL: 0CVE-2006-3225
https://notcve.org/view.php?id=CVE-2006-3225
Cross-site scripting (XSS) vulnerability in Sun ONE Application Server 7 before Update 9, Java System Application Server 7 2004Q2 before Update 5, and Java System Application Server Enterprise Edition 8.1 2005 Q1 allows remote attackers to inject arbitrary HTML or web script via unknown vectors. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sun ONE Application Server v7 anterior a actualización v9, Java System Application Server v7 2004Q2 anterior a actualización v5, y Java System Application Server Enterprise Edition v8.1 2005 Q1 permite a atacantes remotos inyecatr código HTML o web a través de vectores desconocidos. • http://secunia.com/advisories/20835 http://securitytracker.com/id?1016378 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102479-1 http://www.securityfocus.com/bid/18635 http://www.vupen.com/english/advisories/2006/2508 https://exchange.xforce.ibmcloud.com/vulnerabilities/27392 •
CVSS: 6.8EPSS: 1%CPEs: 20EXPL: 0CVE-2006-2501
https://notcve.org/view.php?id=CVE-2006-2501
Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages. • http://jvn.jp/jp/JVN%2303D5EAA8/index.html http://secunia.com/advisories/20147 http://securitytracker.com/id?1016125 http://securitytracker.com/id?1016126 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102164-1 http://www.kb.cert.org/vuls/id/114956 http://www.securityfocus.com/bid/18035 http://www.vupen.com/english/advisories/2006/1866 https://exchange.xforce.ibmcloud.com/vulnerabilities/26550 •
CVSS: 7.5EPSS: 3%CPEs: 2EXPL: 0CVE-2002-0387
https://notcve.org/view.php?id=CVE-2002-0387
Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL. Desbordamiento de búfer en el conector gxnsapi6.dll del Módulo Conector de Sun ONE Application Server anterior a 6.5 permite a atacantes remotos ejecutar código arbitrario mediante una URL larga en una petición HTTP. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/52022 http://www.atstake.com/research/advisories/2003/a031303-1.txt http://www.ciac.org/ciac/bulletins/n-064.shtml http://www.securityfocus.com/bid/7082 https://exchange.xforce.ibmcloud.com/vulnerabilities/11529 •