Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filtersApache Tomcat Discloses MS-DOS Pathname
Alkacon OpenCms XSS via username during login
Mortbay Jetty Discloses JSP Source Code
Apache Struts Cross-site scripting Vulnerability
Apache Tomcat Vulnerable to Denial of Service (DoS) via Simultaneous Requests
Apache Tomcat AJP Connector Information Leak
Tomcat Vulnerable to Web Cache Poisoning
Multiple components in Apache NiFi do not restrict XML External Entity references
Apache Tomcat DoS via Malicious Get Request
Apache Tomcat Leaks Information via Error Message
Apache Tomcat Leaks Pathname Information via Error Message
Apache Tomcat Default Installation Reveals Sensitive Information
Apache Tomcat XSS Vulnerability
Jetty Javascript Inclusion Vulnerability
Apache Tomcat Source Code Disclosure
Apache Tomcat Source Code Disclosure
Apache Tomcat DoS Via Requests Including Null Characters
Apache Tomcat may be started without proper security settings
Apache Tomcat Reveals Path through Long URL
Apache Tomcat allows webmasters to insert xss into error messages
Apache Tomcat Allows Source Disclosure
Apache Tomcat Directory Traversal
Jakarta Apache Tomcat Reveals Physical Paths
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.