Macromedia Jrun vulnerabilities

• macromedia jrun Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view... CVE-2005-4473 5.0 MediumDecember 22, 2005
• macromedia jrun Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to... CVE-2005-4472 7.5 HighDecember 22, 2005
• macromedia coldfusion, jrun +1 more Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes... CVE-2005-2306 3.7 LowJuly 19, 2005
• macromedia jrun Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user... CVE-2004-2182 7.5 HighDecember 31, 2004
• macromedia jrun, hitachi cosminexus enterprise, cosminexus server +1 more +3 more JRun 4.0 does not properly generate and handle the JSESSIONID, which allows remote attackers to... CVE-2004-1478 7.5 HighDecember 31, 2004
• macromedia jrun Cross-site scripting (XSS) vulnerability in the Management Console in JRun 4.0 allows remote... CVE-2004-1477 4.3 MediumDecember 31, 2004
• macromedia jrun, coldfusion +1 more Buffer overflow in the WriteToLog function for JRun 3.0 through 4.0 web server connectors, such... CVE-2004-0646 10.0 HighNovember 19, 2004
• macromedia coldfusion, jrun, hitachi cosminexus enterprise +1 more +3 more The Microsoft IIS Connector in JRun 4.0 and Macromedia ColdFusion MX 6.0, 6.1, and 6.1 J2EE... CVE-2004-0928 5.0 MediumOctober 5, 2004
• macromedia coldfusion, jrun, sun one application server +2 more Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects... CVE-2004-1815 5.0 MediumMarch 15, 2004
• macromedia jrun Unknown "file disclosure" vulnerability in Macromedia JRun 3.0, 3.1, and 4.0, related to a log... CVE-2002-2187 5.0 MediumDecember 31, 2002
• macromedia jrun Macromedia JRun 3.0, 3.1, and 4.0 allow remote attackers to view the source code of .JSP files... CVE-2002-2186 5.0 MediumDecember 31, 2002
• macromedia jrun Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve... CVE-2002-1855 5.0 MediumDecember 31, 2002
• macromedia jrun Heap-based buffer overflow in the error-handling mechanism for the IIS ISAPI handler in... CVE-2002-1310 7.5 HighNovember 21, 2002
• macromedia jrun JRun 3.0 through 4.0 allows remote attackers to read JSP source code via an encoded null byte in... CVE-2002-1025 5.0 MediumOctober 4, 2002
• macromedia jrun The Java Server Pages (JSP) engine in JRun allows web page owners to cause a denial of service ... CVE-2002-0937 Public exploit 5.0 MediumAugust 31, 2002
• macromedia jrun Buffer overflow in the ISAPI DLL filter for Macromedia JRun 3.1 allows remote attackers to... CVE-2002-0801 10.0 HighAugust 12, 2002
• macromedia jrun Macromedia JRun Administration Server allows remote attackers to bypass authentication on the... CVE-2002-0665 Public exploit EPSS 10.7% 10.0 HighJuly 11, 2002
• macromedia jrun Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client... CVE-2001-1545 5.0 MediumDecember 31, 2001
• macromedia jrun Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows... CVE-2001-1544 5.0 MediumDecember 31, 2001
• macromedia jrun Macromedia JRun 3.0 and 3.1 allows remote attackers to obtain duplicate active user session IDs... CVE-2001-1513 7.5 HighDecember 31, 2001
• macromedia jrun Unknown vulnerability in Allaire JRun 3.1 allows remote attackers to directly access the WEB-INF... CVE-2001-1512 6.4 MediumDecember 31, 2001
• macromedia jrun JRun 3.0 and 3.1 running on JRun Web Server (JWS) and IIS allows remote attackers to read... CVE-2001-1511 5.0 MediumDecember 31, 2001
• macromedia jrun Allaire JRun 2.3.3, 3.0 and 3.1 running on IIS 4.0 and 5.0, iPlanet, Apache, JRun web server (JWS... CVE-2001-1510 5.0 MediumDecember 31, 2001
• macromedia jrun SSIFilter in Allaire JRun 3.1, 3.0 and 2.3.3 allows remote attackers to obtain source code for... CVE-2001-0926 5.0 MediumNovember 28, 2001
• macromedia jrun Cross-site scripting vulnerability in Allaire JRun 3.0 and 2.3.3 allows a malicious webmaster to... CVE-2001-1084 7.5 HighJuly 2, 2001
• macromedia jrun Allaire JRun 3.0 allows remote attackers to list contents of the WEB-INF directory, and the web... CVE-2001-0179 5.0 MediumMay 3, 2001
• macromedia jrun Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read... CVE-2000-1051 5.0 MediumDecember 11, 2000
• macromedia jrun Allaire JRun 3.0 http servlet server allows remote attackers to directly access the WEB-INF... CVE-2000-1050 Public exploit 5.0 MediumDecember 11, 2000
• macromedia jrun Allaire JRun 3.0 http servlet server allows remote attackers to cause a denial of service via a... CVE-2000-1049 5.0 MediumDecember 11, 2000
• macromedia jrun Allaire JRun 2.3.3 server allows remote attackers to compile and execute JSP code by inserting it... CVE-2000-1053 Public exploit EPSS 10.6% 10.0 HighNovember 29, 2000
• macromedia jrun Allaire JRun 2.3 server allows remote attackers to obtain source code for executable content by... CVE-2000-1052 5.0 MediumNovember 29, 2000
• macromedia jrun JSP sample files in Allaire JRun 2.3.x allow remote attackers to access arbitrary files (e.g. via... CVE-2000-0540 5.0 MediumJune 22, 2000
• macromedia jrun Servlet examples in Allaire JRun 2.3.x allow remote attackers to obtain sensitive information, e... CVE-2000-0539 6.4 MediumJune 22, 2000