Browse CVEs

HIGH 10.0 CVE-2000-1053EPSS 11% Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it via a cross-site scripting (CSS) attack and directl… Jrun Patch available Fix from $1,9502000-12-11 MEDIUM 5.0 CVE-2000-1049 Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a URL that contains a long string of "." characters. Jrun Patch available Fix from $1,6002000-12-11 MEDIUM 5.0 CVE-2000-1050EPSS 8% Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF directory via a URL request that contains an extra "/" in… Jrun Patch available Fix from $1,6002000-12-11 MEDIUM 5.0 CVE-2000-1051 Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet. Jrun Patch available Fix from $1,6002000-12-11 MEDIUM 5.0 CVE-2000-1052 Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by directly calling the SSIFilter servlet. Jrun Mitigation only Fix from $1,6002000-12-11 MEDIUM 6.4 CVE-2000-0539 Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e.g. listing HttpSession ID's via the SessionServlet s… Jrun Patch available Fix from $1,6002000-06-22 MEDIUM 5.0 CVE-2000-0540 JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via viewsource.jsp) or obtain configuration information. Jrun Patch available Fix from $1,6002000-06-22 MEDIUM 5.0 CVE-1999-1526 Auto-update feature of Macromedia Shockwave 7 transmits a user's password and hard disk information back to Macromedia. Shockwave Flash Plugin Mitigation only Fix from $1,6001999-03-11 MEDIUM 5.1 CVE-1999-1525 Macromedia Shockwave before 6.0 allows a malicious webmaster to read a user's mail box and possibly access internal web servers via the GetNextText c… Shockwave Flash Plugin after 6.0 Fix from $1,6001997-03-14