High
CVE-2007-0184
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 3,281
Reset filters
Medium
CVE-2006-7223
XWiki Remote Code Execution
Medium
CVE-2006-7195
Apache Tomcat XSS Vulnerability
Medium
CVE-2006-3935
Alkacon OpenCMS Improper Access Control via system/workplace/views/admin/admin-main.jsp
Medium
CVE-2006-0254
Apache Geronimo console 1.0 vulnerable to cross-site scripting
Medium
CVE-2005-4849
Apache Derby exposes user and password attributes
High
CVE-2005-4836
Apache Tomcat allows remote attackers to read JSP source files
Medium
CVE-2005-4703
Apache Tomcat Discloses MS-DOS Pathname
Medium
CVE-2005-3747
Mortbay Jetty Discloses JSP Source Code
High
CVE-2022-29265
Multiple components in Apache NiFi do not restrict XML External Entity references
Medium
CVE-2002-2008
Apache Tomcat Leaks Information via Error Message
Medium
CVE-2002-2009
Apache Tomcat Leaks Pathname Information via Error Message
Low
CVE-2002-2006
Apache Tomcat Default Installation Reveals Sensitive Information
Medium
CVE-2002-1567
Apache Tomcat XSS Vulnerability
Medium
CVE-2002-1533
Jetty Javascript Inclusion Vulnerability
High
CVE-2002-1394
Apache Tomcat Source Code Disclosure
Medium
CVE-2003-0045
Jakarta Tomcat Denial of Service vulnerability
Medium
CVE-2003-0042
Jakarta Tomcat Directory Listing vulnerability
High
CVE-2022-24897
Arbitrary filesystem write access from velocity.
Medium
CVE-2022-24898
Arbitrary file access through XML parsing in org.xwiki.commons:xwiki-commons-xml
Low
CVE-2020-10734
OIDC Logout redirect in keycloak
Medium
CVE-2022-24891
Cross-site Scripting in org.owasp.esapi:esapi
High
CVE-2022-23457
Path traversal in the OWASP Enterprise Security API
Critical
CVE-2022-1245
Keycloak vulnerable to privilege escalation on Token Exchange feature
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.