CWE-95 – Improper Neutralization of Directives in Dynamically Evaluated Code (‘Eval Injection’)

Apache Tomcat is an open-source web server and servlet container that is widely used in enterprise environments to run Java...

Zero-day vulnerabilities are a serious threat to cybersecurity, as they can be exploited by malicious actors to gain unauthorized access...

Description The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere,...

Description The software constructs pathnames from user input, but it does not handle or incorrectly handles a pathname containing a...

Description The code contains a control flow path that does not reflect the algorithm that the path is intended to...

Description The product uses security features in a way that prevents the product's administrator from tailoring security settings to reflect...