Open Source Vulnerabilities

org.apache.tomcat:tomcat

Apache Tomcat DoS via Malicious Get Request

org.apache.tomcat:tomcat

Apache Tomcat Leaks Information via Error Message

org.apache.tomcat:tomcat

Apache Tomcat Leaks Pathname Information via Error Message

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Default Installation Reveals Sensitive Information

org.apache.tomcat:tomcat

Apache Tomcat XSS Vulnerability

org.mortbay.jetty:jetty

Jetty Javascript Inclusion Vulnerability

org.apache.tomcat:tomcat

Apache Tomcat Source Code Disclosure

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Source Code Disclosure

org.apache.tomcat:tomcat

Apache Tomcat DoS Via Requests Including Null Characters

zope, zope

Zope Server vulnerable to DoS via header injection

zope

ZCatalog plug-in for Zope allows anonymous users to bypass access restrictions

org.apache.tomcat:tomcat

Apache Tomcat may be started without proper security settings

zope, zope

Zope does not properly verify the access for objects with proxy roles

org.apache.tomcat:tomcat

Apache Tomcat Reveals Path through Long URL

org.apache.tomcat:tomcat

Apache Tomcat allows webmasters to insert xss into error messages

org.apache.tomcat:tomcat-servlet-api

Apache Tomcat Allows Source Disclosure

org.apache.tomcat:tomcat

Apache Tomcat Directory Traversal

zope

Zope does not properly perform security registration for legacy names

zope

Zope allows attackers to modify raw image and file data

org.apache.tomcat:tomcat

Jakarta Apache Tomcat Reveals Physical Paths

zope

Zope does not properly restrict access to the getRoles method

zope

Zope DTML implementation Improper Authentication

Improper Restriction of XML External Entity References in Multiple Components

xmlpull

Uncaught exception in jaz.Zer.<clinit>

remdex/livehelperchat

An attacker can execute malicious javascript in Live Helper Chat

moodle/moodle, moodle/moodle, moodle/moodle

Improper Authentication in moodle

intelliants/subrion

Subrion CMS Cross-site Scripting (XSS) vulnerability in the `contact us` plugin

github.com/containers/podman/v3, github.com/containers/psgo

Podman publishes a malicious image to public registries

moodle/moodle, moodle/moodle, moodle/moodle

Missing authorization in Moodle

@yaireo/tagify

tagify can pass a malicious placeholder to initiate the cross-site scripting (XSS) payload

github.com/woodpecker-ci/woodpecker

Woodpecker allows cross-site scripting (XSS) via build logs

radare2

Heap-use-after-free in r_asm_free

libarchive

libarchive - security update

glewlwyd, glewlwyd

glewlwyd, glewlwyd, glewlwyd

Cross-site Scripting (XSS)

Improper handling of Length parameter in erudika/scoold