Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 35
Reset filtersApache Tomcat: CLIENT_CERT authentication does not fail as expected
Apache Tomcat has an HTTP Request/Response Smuggling vulnerability
Apache Tomcat has an Improper Input Validation vulnerability
Apache Tomcat: CLIENT_CERT authentication does not fail as expected
Apache Tomcat: Configured cipher preference order not preserved
Apache Tomcat - Security constraint bypass with HTTP/0.9
Apache Tomcat - Client certificate verification bypass
Apache Tomcat has an Improper Input Validation vulnerability
Apache Tomcat Improper Resource Shutdown or Release vulnerability
Apache Tomcat Coyote vulnerable to Denial of Service via excessive HTTP/2 streams
Apache Tomcat is vulnerable to resource exhaustion when using the APR/Native connector
Apache Tomcat Denial of Service via invalid HTTP priority header
Apache Tomcat Request and/or response mix-up
Apache Tomcat Allocation of Resources Without Limits or Throttling vulnerability
Apache Tomcat - Denial of Service
Apache Tomcat Denial of Service due to improper input validation vulnerability for HTTP/2 requests
Apache Tomcat vulnerable to Generation of Error Message Containing Sensitive Information
Apache Tomcat Improper Input Validation vulnerability
Apache Tomcat Improper Input Validation vulnerability
HTTP/2 Stream Cancellation Attack
Apache Tomcat Incomplete Cleanup vulnerability
Apache Tomcat - Fix for CVE-2023-24998 was incomplete
Apache Tomcat vulnerable to information leak
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.