Vulnerabilities > SUN > Java System Application Server > 7.1

DATE CVE VULNERABILITY TITLE RISK
2006-07-28 CVE-2006-3921 Information Disclosure vulnerability in SUN products
Sun Java System Application Server (SJSAS) 7 through 8.1 and Web Server (SJSWS) 6.0 and 6.1 allows remote authenticated users to read files outside of the "document root directory" via a direct request using a UTF-8 encoded URI.
network
low complexity
sun
4.0
2004-12-31 CVE-2004-0826 Remote Heap Overflow vulnerability in Mozilla Network Security Services Library
Heap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote attackers to execute arbitrary code via a modified record length field in an SSLv2 client hello message.
network
low complexity
mozilla netscape sun hp
7.5