Medium
CVE-2004-2650
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 7,073
Reset filters
Medium
CVE-2004-2381
Jetty HTTP Server Denial of Service vulnerability
Medium
CVE-2003-0866
Apache Tomcat Denial of Service vulnerability in the Catalina package
Medium
CVE-2003-0043
Tomcat uses trusted privileges when processing web.xml file
Medium
CVE-2003-0044
Jakarta Tomcat cross-site scripting (XSS) vulnerability
Medium
CVE-2003-0045
Jakarta Tomcat Denial of Service vulnerability
Medium
CVE-2003-0042
Jakarta Tomcat Directory Listing vulnerability
High
CVE-2022-24897
Arbitrary filesystem write access from velocity.
Medium
ghsa-m98g-63qj-fp8j
Reflected XSS on clients-registrations endpoint
Low
ghsa-mwm4-5qwr-g9pf
Keycloak is vulnerable to IDN homograph attack
Medium
CVE-2021-3424
Keycloak is vulnerable to IDN homograph attack
Medium
CVE-2022-24898
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
Low
CVE-2020-10734
OIDC Logout redirect in keycloak
High
CVE-2021-3827
ECP SAML binding bypasses authentication flows
Medium
CVE-2022-24891
Cross-site Scripting in org.owasp.esapi:esapi
High
CVE-2022-23457
Path traversal in the OWASP Enterprise Security API
High
CVE-2022-24881
ballcat-codegen template engine remote code execution injection
Medium
CVE-2022-1466
Improper authorization in Keycloak
Critical
CVE-2022-1245
Keycloak vulnerable to privilege escalation on Token Exchange feature
High
CVE-2022-29546
OutOfMemory Exception by specifically crafted processing instruction in NekoHtml Parser
Medium
CVE-2022-28820
Page Compare Reflected Cross-site Scripting (XSS) vulnerability
Medium
CVE-2022-26596
Liferay Portal and Liferay DXP allows arbitrary injection via web content template names
Medium
CVE-2022-26597
Liferay Portal and Liferay DXP allows arbitrary injection via the site name
High
CVE-2012-0785
Hash collision attack vulnerability in Jenkins
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.