Export limit exceeded: 425892 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2007-5613

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

CVSS 2.0 · 4.3 Medium EPSS 2.9% KEV · Not listed
Vendors
Mortbay Jetty
Products
Jetty
CVE-2007-5614

Mortbay Jetty before 6.1.6rc1 does not properly handle "certain quote sequences" in HTML cookie parameters, which allows remote attackers to hijack browser sessions via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 4.0% KEV · Not listed
Vendors
Mortbay Jetty
Products
Jetty
CVE-2007-5615

CRLF injection vulnerability in Mortbay Jetty before 6.1.6rc0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors.

CVSS 2.0 · 5.0 Medium EPSS 3.6% KEV · Not listed
Vendors
Mortbay Jetty
Products
Jetty
CVE-2007-6672

Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.

CVSS 2.0 · 5.0 Medium EPSS 4.0% KEV · Not listed
Vendors
Mortbay Jetty
Products
Jetty