Open Source Vulnerabilities

org.apache.tomcat:tomcat

Apache Tomcat's CookieExample Vulnerable to XSS

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Mishandles Character Sequence in Cookies

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat treats single quotes as delimiters in cookies

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat SendMailServlet XSS

moin

MoinMoin Improper ACL handling for calendars and includes

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat vulnerable to Cross-site Scripting

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat XSS Vulnerabilities in Examples Web Application

org.apache.axis:axis

Apache Axis allows Exposure of Sensitive Information to an Unauthorized Actor

opera

Security update for opera

trac

Trac Cross-site Scripting (XSS) vulnerability

trac

Trac missing Content-Disposition HTTP header

org.apache.tomcat:jsp-api, org.apache.tomcat:jsp-api, org.apache.tomcat:jsp-api, org.apache.tomcat:jsp-api, org.apache.tomcat:jsp-api, org.apache.tomcat:servlet-api, org.apache.tomcat:servlet-api, org.apache.tomcat:servlet-api, org.apache.tomcat:servlet-api, org.apache.tomcat:servlet-api

Apache Tomcat Vulnerable to Cross-Site Scripting

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat XSS In Accept-Language Headers

moin

MoinMoin Insertion of Sensitive Information into Log File

moin

MoinMoin Cross-Site Scripting (XSS) vulnerability via hitcounts and general parameters

moin

MoinMoin Multiple cross-site scripting (XSS) vulnerabilities

DotNetNuke.Core

DotNetNuke Vulnerable to XSS in Pass-Through Values

rubygems-update

RubyGems file overwrite vulnerability

org.apache.tomcat:tomcat, org.apache.tomcat:tomcat

Apache Tomcat Directory Traversal

django

Django Arbitrary Code Execution

django

Django Improper Access Control

org.directwebremoting:dwr

Incorrect Authorization in Getahead Direct Web Remoting

org.directwebremoting:dwr

Direct Web Remoting vulnerable to Denial of Service

angular.js, angular.js

libgoogle-gson-java, libgoogle-gson-java, libgoogle-gson-java

node-sqlite3, node-sqlite3, node-sqlite3

angular.js, angular.js, angular.js

libgoogle-gson-java, libgoogle-gson-java, libgoogle-gson-java, libgoogle-gson-java

node-sqlite3, node-sqlite3, node-sqlite3, node-sqlite3

Cross-site Scripting (XSS)

Prototype Pollution

Deserialization of Untrusted Data

Arbitrary File Write via Archive Extraction (Zip Slip)

Prototype Pollution

Denial of Service (DoS)

Denial of Service (DoS)

Information Exposure

Command Injection

Server-side Request Forgery (SSRF)

Shopizer - IDOR delete superadmin

Shopizer - Stored XSS in Manage Files

Formula Injection/CSV Injection due to Improper Neutralization of Formula Elements in CSV File in luyadev/yii-helpers