Approved changes feed: RSS · Atom

cpe:2.3:a:macromedia:jrun:4.0:*:*:*:*:*:*:*

part: a version: 4.0 update: *

VendorMacromedia (f00ebe2b-9d72-52ca-9cf0-be998a2cdfa0)
ProductJrun (c88cb03c-3324-5ec7-8f39-0771607213fb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4473 vulnerable 2026-06-08 04:48:43.970511 Details available
Unspecified vulnerability in Macromedia JRun 4 web server (JWS) allows remote attackers to view web application source code via "a malformed URL."
Published: 2005-12-22T00:00:00.000Z
Updated: 2024-08-07T23:46:05.186Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4472 vulnerable 2026-06-08 04:48:43.968584 Details available
Stack-based buffer overflow in the Macromedia JRun 4 web server (JWS) allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long request that is not properly handled during conversion to wide characters.
Published: 2005-12-22T00:00:00.000Z
Updated: 2024-08-07T23:46:05.114Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2306 vulnerable 2026-06-08 04:48:28.858941 Details available
Race condition in Macromedia JRun 4.0, ColdFusion MX 6.1 and 7.0, when under heavy load, causes JRun to assign a duplicate authentication token to multiple sessions, which could allow authenticated users to gain privileges as other users.
Published: 2005-07-19T04:00:00.000Z
Updated: 2024-08-07T22:22:48.421Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2182 vulnerable 2026-06-08 04:48:08.799181 Details available
Session fixation vulnerability in Macromedia JRun 4.0 allows remote attackers to hijack user sessions by pre-setting the user session ID information used by the session server.
Published: 2005-07-10T04:00:00.000Z
Updated: 2024-09-16T17:44:15.732Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1816 not_vulnerable 2026-06-08 04:48:07.728640 Details available
Unknown vulnerability in Sun Java System Application Server 7.0 Update 2 and earlier, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:48.289Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1815 vulnerable 2026-06-08 04:48:07.720514 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1478 vulnerable 2026-06-08 04:47:54.308679 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1477 vulnerable 2026-06-08 04:47:54.305962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0928 vulnerable 2026-06-08 04:47:51.970418 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0646 vulnerable 2026-06-08 04:47:50.653782 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2187 vulnerable 2026-06-08 04:47:19.326330 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2186 vulnerable 2026-06-08 04:47:19.325998 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1855 vulnerable 2026-06-08 04:47:18.330350 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1025 vulnerable 2026-06-08 04:46:22.738623 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0937 vulnerable 2026-06-08 04:46:22.533567 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0665 vulnerable 2026-06-08 04:46:21.954629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.