CVSS: 6.5EPSS: 0%CPEs: 25EXPL: 0CVE-2006-3921
https://notcve.org/view.php?id=CVE-2006-3921
28 Jul 2006 — Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI. Sun Java System Application Server (SJSAS) 7 hasta la 8.1 y Web Server (SJSWS) 6.0 y 6.1 permite a usuarios remotos validados leer archivos fuera del "directorio de documentos del root" a través de respuesta directas utilizando una codificación URI UTF-8. • http://secunia.com/advisories/21251 •
CVSS: 6.8EPSS: 6%CPEs: 20EXPL: 0CVE-2006-2501
https://notcve.org/view.php?id=CVE-2006-2501
20 May 2006 — Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages. • http://jvn.jp/jp/JVN%2303D5EAA8/index.html •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2005-4806
https://notcve.org/view.php?id=CVE-2005-4806
31 Dec 2005 — Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service (unresponsive service) via unknown vectors. • http://secunia.com/advisories/16757 •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2005-1889
https://notcve.org/view.php?id=CVE-2005-1889
07 Jun 2005 — Unknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier allows attackers to read files. • http://sunsolve.sun.com/search/document.do?assetkey=1-26-101690-1 •
CVSS: 9.8EPSS: 2%CPEs: 1EXPL: 0CVE-2005-1232
https://notcve.org/view.php?id=CVE-2005-1232
24 Apr 2005 — Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via unknown vectors. • http://sunsolve.sun.com/search/document.do?assetkey=1-26-57763-1 •
CVSS: 7.5EPSS: 0%CPEs: 8EXPL: 0CVE-2005-1150
https://notcve.org/view.php?id=CVE-2005-1150
16 Apr 2005 — Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows systems, allows attackers to cause a denial of service (hang). • http://secunia.com/advisories/14961 •
CVSS: 7.5EPSS: 0%CPEs: 13EXPL: 0CVE-2004-2216
https://notcve.org/view.php?id=CVE-2004-2216
31 Dec 2004 — Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service (crash) via a malformed client certificate. • http://secunia.com/advisories/13072 •
CVSS: 9.8EPSS: 25%CPEs: 5EXPL: 0CVE-2004-1350
https://notcve.org/view.php?id=CVE-2004-1350
30 Oct 2004 — Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests. • http://secunia.com/advisories/13036 •
CVSS: 9.8EPSS: 3%CPEs: 93EXPL: 0CVE-2004-0826
https://notcve.org/view.php?id=CVE-2004-0826
02 Sep 2004 — Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message. • http://marc.info/?l=bugtraq&m=109351293827731&w=2 •
CVSS: 10.0EPSS: 2%CPEs: 4EXPL: 1CVE-2000-0812
https://notcve.org/view.php?id=CVE-2000-0812
18 Oct 2000 — The administration module in Sun Java web server allows remote attackers to execute arbitrary commands by uploading Java code to the module and invoke the com.sun.server.http.pagecompile.jsp92.JspServlet by requesting a URL that begins with a /servlet/ tag. • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/197&type=0&nav=sec.sba •