Information Disclosure

Every one of the 305 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Apache Tapestry - Remote Code ExecutionCVE-2021-27850Apache Software Foundation · 94% likely

   CWE-200

2. Apache Kylin - Exposed Configuration FileCVE-2020-13937Apache · 78% likely

   CWE-922

3. Apache Solr - Host Environment Variables Leak via Metrics APICVE-2023-50290Apache Software Foundation · CVSS 6.5 · 68% likely

   CWE-200

4. Apache OFBiz < 18.12.11 - Server Side Request ForgeryCVE-2023-50968Apache Software Foundation · 63% likely

   CWE-200

5. Apache ShardingSphere ElasticJob-UI privilege escalationCVE-2022-22733Apache Software Foundation · 42% likely

   CWE-200

6. Apache OFBiz - XML External Entity InjectionCVE-2018-8033Apache Software Foundation · 26% likely

   CWE-200

7. Apache Spark UI - Cross-Site ScriptingCVE-2018-8024Apache Software Foundation · 5.3% likely

   CWE-200

8. Apache Tomcat 4.1.0 through 4.1.39, 5.5.0 through 5.5.27, and 6.0.0 through 6.0.18, when FORM authentication is used, allows remote attackers to enumerate valid usernames via requ…CVE-2009-0580Apache · 94% likely

   CWE-200

9. The users/get program in the User RPC API in Apache Rave 0.11 through 0.20 allows remote authenticated users to obtain sensitive information about all user accounts via the offset…CVE-2013-1814Apache · 74% likely

   CWE-200

10. When using a VirtualDirContext with Apache Tomcat 7.0.0 to 7.0.80 it was possible to bypass security constraints and/or view the source code of JSPs for resources served by the Vi…CVE-2017-12616Apache Software Foundation · 70% likely

    CWE-200

11. Apache Tomcat 6.0.0 through 6.0.14, 5.5.0 through 5.5.25, and 4.1.0 through 4.1.36 does not properly handle (1) double quote (") characters or (2) %5C (encoded backslash) sequence…CVE-2007-5333Apache · 63% likely

    CWE-200

12. In Apache httpd before 2.2.34 and 2.4.x before 2.4.27, the value placeholder in [Proxy-]Authorization headers of type 'Digest' was not initialized or reset before or between succe…CVE-2017-9788Apache Software Foundation · 57% likely

    CWE-200

13. Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that r…CVE-2010-1157Apache · 53% likely

    CWE-200

14. The Servlets Post component 2.3.6 in Apache Sling, as used in Adobe Experience Manager 5.6.1, 6.0.0, and 6.1.0, allows remote attackers to obtain sensitive information via unspeci…CVE-2016-0956Apache · 51% likely

    CWE-200

15. The PortletV3AnnotatedDemo Multipart Portlet war file code provided in Apache Pluto version 3.0.0 could allow a remote attacker to obtain sensitive information, caused by the fail…CVE-2018-1306Apache Software Foundation · 42% likely

    CWE-200

16. Apache HTTP Server, when running on Linux with a document root on a Windows share mounted using smbfs, allows remote attackers to obtain unprocessed content such as source files f…CVE-2007-6514Apache · 38% likely

    CWE-200

17. Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 treats single quotes ("'") as delimiters in cookies, which might cause sensitive…CVE-2007-3382Apache · 37% likely

    CWE-200

18. Apache Axis 1.0 allows remote attackers to obtain sensitive information by requesting a non-existent WSDL file, which reveals the installation path in the resulting exception mess…CVE-2007-2353Apache · 28% likely

    CWE-200

19. Apache Tomcat: Request header mix-up between HTTP/2 streamsCVE-2020-17527Apache Software Foundation · 25% likely

    CWE-200

20. Apache Tomcat information disclosureCVE-2021-24122Apache Software Foundation · 23% likely

    CWE-200

21. When using the OpenWire protocol in ActiveMQ versions 5.14.0 to 5.15.2 it was found that certain system details (such as the OS and kernel version) are exposed as plain text.CVE-2017-15709Apache Software Foundation · 23% likely

    CWE-200

22. An administrator with user search entitlements in Apache Syncope 1.2.x before 1.2.11, 2.0.x before 2.0.8, and unsupported releases 1.0.x and 1.1.x which may be also affected, can…CVE-2018-1322Apache Software Foundation · 20% likely

    CWE-200

23. The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests…CVE-2010-0434Apache · 18% likely

    CWE-200

24. Apache Tomcat h2c request mix-upCVE-2021-25122Apache Software Foundation · 18% likely

    CWE-200

25. Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the \" character sequence in a cookie value, which migh…CVE-2007-3385Apache · 17% likely

    CWE-200

26. A bug in the handling of the pipelined requests in Apache Tomcat 9.0.0.M1 to 9.0.0.M18, 8.5.0 to 8.5.12, 8.0.0.RC1 to 8.0.42, 7.0.0 to 7.0.76, and 6.0.0 to 6.0.52, when send file…CVE-2017-5647Apache Software Foundation · 17% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.