Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,647
Apache Tomcat may be started without proper security settings
Apache Tomcat Reveals Path through Long URL
Apache Tomcat allows webmasters to insert xss into error messages
Apache Tomcat Allows Source Disclosure
Apache Tomcat Directory Traversal
Jakarta Apache Tomcat Reveals Physical Paths
An attacker can execute malicious javascript in Live Helper Chat
Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin
Improper Authentication in moodle
Missing authorization in Moodle
tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload
Object state limitation has no effect
Object state limitation has no effect
Access control issue in ezsystems/ezpublish-kernel
Subscribe To Comments Reloaded <= 211130 - Cross-Site Request Forgery
Apache James Denial of Service
Jetty HTTP Server Denial of Service vulnerability
Apache Tomcat Denial of Service vulnerability in the Catalina package
Tomcat uses trusted privileges when processing web.xml file
Jakarta Tomcat cross-site scripting (XSS) vulnerability
Jakarta Tomcat Denial of Service vulnerability
Jakarta Tomcat Directory Listing vulnerability
Improper Access Control in snipe/snipe-it
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.