Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2004-2381

Disclosure Date: December 31, 2004 (last updated February 22, 2025)
HttpRequest.java in Jetty HTTP Server before 4.2.19 allows remote attackers to cause denial of service (memory usage and application crash) via HTTP requests with a large Content-Length.
0
0
Attacker Value
Unknown

CVE-2004-2478

Disclosure Date: December 31, 2004 (last updated October 04, 2023)
Unspecified vulnerability in Jetty HTTP Server, as used in (1) IBM Trading Partner Interchange before 4.2.4, (2) CA Unicenter Web Services Distributed Management (WSDM) before 3.11, and possibly other products, allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
0
0
Attacker Value
Unknown

CVE-2002-1533

Disclosure Date: March 31, 2003 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a).
0
0