Open Source Vulnerabilities

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Path Traversal Vulnerability

org.apache.tomcat:tomcat-juli, org.apache.tomcat:tomcat-juli

JULI logging component in Apache Tomcat does not restrict certain permissions for web applications

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Exposure of Sensitive Information in Apache Tomcat

duplicity

FTP backend for Duplicity Discloses Passwords to Process Listing

org.apache.tomcat:tomcat

Apache Tomcat Example Application CSRF and XSS Vulnerabilities

opensymphony:xwork, opensymphony:xwork

OpenSymphony XWork vulnerable to improper input validation

joomla/application

Joomla! vulnerable to CRLF injection

ezyang/htmlpurifier

HTML Purifier Cross-site Scripting vulnerability

org.apache.tomcat:tomcat

Apache Tomcat's CookieExample Vulnerable to XSS

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Mishandles Character Sequence in Cookies

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat treats single quotes as delimiters in cookies

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat SendMailServlet XSS

moin

MoinMoin Improper ACL handling for calendars and includes

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat vulnerable to Cross-site Scripting

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat XSS Vulnerabilities in Examples Web Application

org.apache.axis:axis

Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor

opera

Security update for opera

trac

Trac Cross-site Scripting (XSS) vulnerability

trac

Trac missing Content-Disposition HTTP header

org.apache.tomcat:jsp-api, org.apache.tomcat:jsp-api, org.apache.tomcat:jsp-api, org.apache.tomcat:jsp-api, org.apache.tomcat:jsp-api, org.apache.tomcat:servlet-api, org.apache.tomcat:servlet-api, org.apache.tomcat:servlet-api, org.apache.tomcat:servlet-api, org.apache.tomcat:servlet-api

Apache Tomcat Vulnerable to Cross-Site Scripting

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat XSS In Accept-Language Headers

moin

MoinMoin Insertion of Sensitive Information into Log File

moin

MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters

moin

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

DotNetNuke.Core

DotNetNuke Vulnerable to XSS in Pass-Through Values

rubygems-update

RubyGems file overwrite vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Directory Traversal

django

Django Arbitrary Code Execution

django

Django Improper Access Control

org.directwebremoting:dwr

Incorrect Authorization in Getahead Direct Web Remoting

org.directwebremoting:dwr

Direct Web Remoting vulnerable to Denial of Service

angular.js, angular.js

libgoogle-gson-java, libgoogle-gson-java, libgoogle-gson-java

node-sqlite3, node-sqlite3, node-sqlite3

angular.js, angular.js, angular.js

libgoogle-gson-java, libgoogle-gson-java, libgoogle-gson-java, libgoogle-gson-java

node-sqlite3, node-sqlite3, node-sqlite3, node-sqlite3

Cross-site Scripting (XSS)

Prototype Pollution

Deserialization of Untrusted Data

Arbitrary File Write via Archive Extraction (Zip Slip)

Prototype Pollution

Denial of Service (DoS)