VRT 391,192 CVEs tracked · 15,442 in RASP scope · data as of 19 hours ago
Reset
More filters (2)
Columns
Has a public PoC✕Advisory: Oracle Critical Patch Update April 2011✕
Overview 5 matches, all public PoC · 4 in RASP scope · 1 protected · 0 KEV · 1 CISA SSVC · 3 EPSS ≥ 0.5 · 0 disputed
5matches, all public PoC 4in RASP scope80.0% 1protected20.0% 0KEV0.0% 1CISA SSVC20.0% 3EPSS ≥ 0.560.0% 0disputed0.0%
Critical 1 20.0% High 2 40.0% Medium 1 20.0% Low 1 20.0% None 0 0.0% Unknown 0 0.0%
Protected by RASP 0 0.0% Rule in development 0 0.0% Mitigation candidate 3 60.0% No exploit published 0 0.0% No fix identified 0 0.0% Mitigated by environment configuration 1 20.0% Queued for review 0 0.0% Not applicable 1 20.0% Out of RASP scope 0 0.0% Rejected 0 0.0%
blocked by ARMR today 1 20.0% not blocked 4 80.0% not established 0 0.0% unrecorded 0 0.0%
Exploited in the wild 0 0.0% Working exploit published 5 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / month
Unknown: 0None: 0Low: 1Medium: 1High: 2Critical: 1 Rejected: 0Out of RASP scope: 0Not applicable: 1Queued for review: 0Mitigated by environment configuration: 1No fix identified: 0No exploit published: 0Mitigation candidate: 3Rule in development: 0Protected by RASP: 0 unrecorded: 0not established: 0not blocked: 4blocked by ARMR today: 1 No public exploit: 0Forecast only: 0Proof of concept only: 0Working exploit published: 5Exploited in the wild: 0 November 2009: 1 CVE December 2009: 0 CVEs January 2010: 0 CVEs February 2010: 0 CVEs March 2010: 0 CVEs April 2010: 0 CVEs May 2010: 0 CVEs June 2010: 0 CVEs July 2010: 0 CVEs August 2010: 0 CVEs September 2010: 0 CVEs October 2010: 0 CVEs November 2010: 0 CVEs December 2010: 0 CVEs January 2011: 0 CVEs February 2011: 2 CVEs March 2011: 0 CVEs April 2011: 2 CVEs
Dec 09Feb 10Apr 10Jun 10Aug 10Oct 10Dec 10Feb 11Apr 11
5 matches CSV JSON
CVE Severity Published▾ Status Exploitation Description
CVE-2011-0836 Low 2011-04-20 Mitigation candidate Working exploit published Unspecified vulnerability in Oracle JD Edwards EnterpriseOne Tools 8.9 GA through 8.98.4.1 and OneWorld Tools through 24.1.3 allows remote authenticated users to affect integrity, related to Web Runtime SEC.
CVE-2011-0807 High 2011-04-20 Mitigation candidate Working exploit published Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.
CVE-2010-4476 Medium 2011-02-17 Mitigation candidate Working exploit published The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.
CVE-2010-4452 High 2011-02-17 Mitigated by environment configuration Working exploit published Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2009-3555 Critical 2009-11-09 Not applicable Working exploit published The TLS protocol, and the SSL protocol 3.0 and possibly earlier, as used in Microsoft Internet Information Services (IIS) 7.0, mod_ssl in the Apache HTTP Server 2.2.14 and earlier, OpenSSL before 0.9.8l, GnuTLS 2.8.5 and earlier, Mozilla Network Security Services (NSS) 3.12.4 and earlier, multiple Cisco products, and other products, does not properly associate renegotiation handshakes with an existing connection, which allows man-in-the-middle attackers to insert data into HTTPS sessions, and possibly other types of sessions protected by TLS or SSL, by sending an unauthenticated request that is processed retroactively by a server in a post-renegotiation context, related to a "plaintext injection" attack, aka the "Project Mogul" issue.