Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 71,632
Apache Tomcat Leaks Information via Error Message
Apache Tomcat Leaks Pathname Information via Error Message
Apache Tomcat Default Installation Reveals Sensitive Information
Apache Tomcat XSS Vulnerability
Jetty Javascript Inclusion Vulnerability
Apache Tomcat Source Code Disclosure
Apache Tomcat Source Code Disclosure
Apache Tomcat DoS Via Requests Including Null Characters
Apache Tomcat may be started without proper security settings
Apache Tomcat Reveals Path through Long URL
Apache Tomcat allows webmasters to insert xss into error messages
Apache Tomcat Allows Source Disclosure
Apache Tomcat Directory Traversal
Jakarta Apache Tomcat Reveals Physical Paths
An attacker can execute malicious javascript in Live Helper Chat
Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin
Improper Authentication in moodle
Missing authorization in Moodle
tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload
Object state limitation has no effect
Object state limitation has no effect
Access control issue in ezsystems/ezpublish-kernel
Subscribe To Comments Reloaded <= 211130 - Cross-Site Request Forgery
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.