Total
3 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2006-2758 | 1 Jetty | 1 Jetty | 2024-02-28 | 5.0 MEDIUM | N/A |
Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747. | |||||
CVE-2006-2759 | 1 Jetty | 1 Jetty | 2024-02-28 | 5.0 MEDIUM | N/A |
jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary script source code via a capital P in the .jsp extension, and probably other mixed case manipulations. | |||||
CVE-2002-1533 | 1 Jetty | 1 Jetty | 2024-02-28 | 5.8 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in Jetty JSP servlet engine allows remote attackers to insert arbitrary HTML or script via an HTTP request to a .jsp file whose name contains the malicious script and some encoded linefeed characters (%0a). |