Show filters
15 Total Results
Displaying 11-15 of 15
Sort by:
Attacker Value
Unknown
CVE-2006-2758
Disclosure Date: June 02, 2006 (last updated October 04, 2023)
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.
0
Attacker Value
Unknown
CVE-2004-2381
Disclosure Date: December 31, 2004 (last updated February 22, 2025)
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
0
Attacker Value
Unknown
CVE-2004-2478
Disclosure Date: December 31, 2004 (last updated October 04, 2023)
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
0
Attacker Value
Unknown
CVE-2002-1533
Disclosure Date: March 31, 2003 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
0
Attacker Value
Unknown
CVE-2002-1178
Disclosure Date: October 11, 2002 (last updated February 22, 2025)
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.
0
