CVSS: 6.1EPSS: 0%CPEs: 37EXPL: 0CVE-2007-6570
https://notcve.org/view.php?id=CVE-2007-6570
28 Dec 2007 — Cross-site scripting (XSS) vulnerability in the View URL Database functionality in Sun Java System Web Proxy Server 4.x before 4.0.6 and 3.x before 3.6 SP11 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566309. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en la funcionalidad View URL Database (Ver Base de Datos de URLs) en Sun Java System Web Proxy Server 4.x anterior a 4.0.6 y 3.x anterio a 3.6 SP11 permite a atacantes remotos inyect... • http://docs.sun.com/app/docs/doc/820-2499/aeaaa?a=view • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 37EXPL: 0CVE-2007-6571
https://notcve.org/view.php?id=CVE-2007-6571
28 Dec 2007 — Cross-site scripting (XSS) vulnerability in Sun Java System Web Proxy Server 3.6 before SP11 on Windows allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6611356. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Web Proxy Server 3.6 anterior a SP11 sobre Windows permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados, también conocido como BugID 6611356. • http://secunia.com/advisories/28216 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 37EXPL: 0CVE-2007-6572
https://notcve.org/view.php?id=CVE-2007-6572
28 Dec 2007 — Cross-site scripting (XSS) vulnerability in Sun Java System Web Server 6.1 before SP8 and 7.0 before Update 1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka BugID 6566204. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Sun Java System Web Server 6.1 anterior al SP8 y 7.0 anterior al Update 1 permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elección a través de vectores no especificados, también conocido como BugID... • http://secunia.com/advisories/28216 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 7.5EPSS: 1%CPEs: 9EXPL: 0CVE-2007-4164
https://notcve.org/view.php?id=CVE-2007-4164
07 Aug 2007 — CRLF injection vulnerability in the redirect feature in Sun Java System Web Server 6.1 and 7.0 before 20070802, when the redirect Server Application Function (SAF) uses the url-prefix parameter and escape is disabled, or an Error directive uses the url-prefix parameter in obj.conf, allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks. Vulnerabilidad de inyección CRLF (retorno de carro y nueva línea) en la funcionalidad de redirección de Sun Java System Web SEr... • http://secunia.com/advisories/26326 •
CVSS: 9.8EPSS: 1%CPEs: 21EXPL: 0CVE-2007-3715
https://notcve.org/view.php?id=CVE-2007-3715
11 Jul 2007 — Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute an arbitrary Java method via a crafted stylesheet, a related issue to CVE-2007-3716. Sun Java System Application Server y Web Server versiones 7.0 hasta 9.0 anterior al 20070710, no procesan apropiadamente las hojas de estilo XSLT en las transformaciones de XSLT en firmas XML, lo que permite a atac... • http://osvdb.org/37248 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 68%CPEs: 1EXPL: 0CVE-2007-2881
https://notcve.org/view.php?id=CVE-2007-2881
29 May 2007 — Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server before 4.0.5 allow remote attackers to execute arbitrary code via crafted packets during protocol negotiation. Múltiples desbordamientos de búfer basado en pila en el soporte de proxy SOCKS (sockd) en Sun Java Web Proxy Server anterior a 4.0.5 permite a atacantes remotos ejecutar código de su elección mediante paquetes manipulados durante la negociación del protocolo. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=536 •
CVSS: 8.1EPSS: 0%CPEs: 1EXPL: 0CVE-2007-1526
https://notcve.org/view.php?id=CVE-2007-1526
20 Mar 2007 — Sun Java System Web Server 6.1 before 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization control and access secure web server instances running under an account different from that used for the admin server via unspecified vectors. El Servidor Web Sun Java System 6.1 anterior al 20070314 permite a usuarios remotos autenticados con certificados de cliente revocados, evitar el control CRL (Lista de Certificados Revocados) y... • http://osvdb.org/34074 •
CVSS: 9.8EPSS: 1%CPEs: 18EXPL: 0CVE-2007-1488
https://notcve.org/view.php?id=CVE-2007-1488
16 Mar 2007 — Unspecified vulnerability in Sun Java System Web Server 6.0 and 6.1 before 20070315 allows remote attackers to "gain unauthorized access to data", possibly involving a sample application. Una vulnerabilidad no especificada en Sun Java System Web Server versiones 6.0 y 6.1 anterior a 20070315, permite a atacantes remotos "gain unauthorized access to data", lo que posiblemente involucre una aplicación de muestra. • http://osvdb.org/34080 •
CVSS: 6.8EPSS: 1%CPEs: 8EXPL: 0CVE-2006-6276
https://notcve.org/view.php?id=CVE-2006-6276
04 Dec 2006 — HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java System Web Server, allows remote attackers to bypass HTTP request filtering, hijack web sessions, perform cross-site scripting (XSS), and poison web caches via unspecified attack vectors. Vulnerabilidad de contrabando de petición HTTP en Sun Java System Proxy Server anterior al 30/11/2006, cuando se usa con Sun Java System Application Server o Sun Java System We... • http://secunia.com/advisories/23186 • CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') •
CVSS: 6.5EPSS: 1%CPEs: 2EXPL: 0CVE-2006-5654
https://notcve.org/view.php?id=CVE-2006-5654
03 Nov 2006 — Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is enabled, allows remote authenticated users to cause a denial of service (application crash) via unspecified vectors. NOTE: due to lack of details from the vendor, it is unclear whether this is related to vector 1 in CVE-2006-5201 or CVE-2006-3127. Vulnerabilidad no especificada en Network Security Services (NSS) de Sun Java System Web Ser... • http://secunia.com/advisories/22646 •