Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
java system web server vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv2
CVE-2010-0272
Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote malicious users to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no act...
Sun Java System Web Server 7.0
7.5
CVSSv2
CVE-2010-0273
Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote malicious users to execute arbitrary code by sending a process memory address and crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, th...
Sun Java System Web Server 7.0
10
CVSSv2
CVE-2010-0360
Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote malicious users to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overf...
Sun Java System Web Server 7.0
7.5
CVSSv2
CVE-2010-0387
Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote malicious users to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long string in an "Authorization...
Sun Java System Web Server 7.0
1 EDB exploit
7.5
CVSSv2
CVE-2010-0388
Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote malicious users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in the encoding attrib...
Sun Java System Web Server 7.0
1 EDB exploit
5
CVSSv2
CVE-2010-0389
The admin server in Sun Java System Web Server 7.0 Update 6 allows remote malicious users to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request that lacks a method token.
Sun Java System Web Server 7.0
10
CVSSv2
CVE-2007-2881
Multiple stack-based buffer overflows in the SOCKS proxy support (sockd) in Sun Java Web Proxy Server prior to 4.0.5 allow remote malicious users to execute arbitrary code via crafted packets during protocol negotiation.
Sun Java System Web Proxy Server
10
CVSSv2
CVE-2010-0361
Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote malicious users to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS reques...
Sun Java System Web Server 7.0
3 EDB exploits
6
CVSSv2
CVE-2007-1526
Sun Java System Web Server 6.1 prior to 20070314 allows remote authenticated users with revoked client certificates to bypass the Certificate Revocation List (CRL) authorization control and access secure web server instances running under an account different from that used for t...
Sun Java System Web Server 6.1
5
CVSSv2
CVE-2005-1150
Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and previous versions, when running on Windows systems, allows malicious users to cause a denial of service (hang).
Sun Java System Web Server 6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322
administrator privileges
CVE-2024-1579
hardcoded
CVE-2023-20198
CVE-2024-33587
CVE-2024-33449
CVE-2024-4308
HTML injection
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
NEXT »