WaratekVRT Sign in
Reset
More filters (3)
Columns
ARMR rules: Deserialization✕Published from 2016-01-01✕Published to 2016-12-31✕
Overview 12 matches · 11 protected · 3 exploited · 2 CISA KEV · 5 public PoC · 4 EPSS ≥ 0.5
12matches 11protected91.7% 3exploited25.0% 2CISA KEV16.7% 5public PoC41.7% 4EPSS ≥ 0.533.3%
Protected by Waratek 12 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 9 75.0% High 3 25.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 11 91.7% partly blocked 1 8.3% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 25.0% Working exploit published 2 16.7% Proof of concept only 1 8.3% Forecast only 0 0.0% No public exploit 6 50.0%
split by peak 3 / month
Protected by Waratek: 12 High: 3Critical: 9 partly blocked: 1blocked by ARMR today: 11 No public exploit: 6Proof of concept only: 1Working exploit published: 2Exploited: 3
Jan 161 Protected by Waratek1 Critical1 blocked by ARMR today1 Proof of concept only1 Feb 160 Mar 160 Apr 163 Protected by Waratek3 Critical3 blocked by ARMR today3 Exploited2 No public exploit1 May 160 Jun 162 Protected by Waratek2 Critical1 High1 blocked by ARMR today1 partly blocked1 Exploited1 No public exploit1 Jul 162 Protected by Waratek2 Critical1 High1 blocked by ARMR today2 Working exploit published1 No public exploit1 Aug 161 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Sep 160 Oct 163 Protected by Waratek3 Critical2 High1 blocked by ARMR today3 Working exploit published1 No public exploit2
Jan 16Feb 16Mar 16Apr 16May 16Jun 16Jul 16Aug 16Sep 16Oct 16
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2016-1000031 Critical 2016-10-25 Protected by Waratek No public exploit Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
CVE-2016-7065 High 2016-10-13 Protected by Waratek Working exploit published The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.
CVE-2016-5019 Critical 2016-10-03 Protected by Waratek No public exploit CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state string.
CVE-2016-3737 Critical 2016-08-02 Protected by Waratek No public exploit The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.
CVE-2016-3510 Critical 2016-07-21 Protected by Waratek Working exploit published Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to WLS Core Components, a different vulnerability than CVE-2016-3586.
CVE-2016-4974 High 2016-07-13 Protected by Waratek No public exploit Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a crafted serialized object in a JMS ObjectMessage that is handled by the getObject function.
CVE-2016-4437 Critical 2016-06-07 Protected by Waratek Exploited Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.
CVE-2016-0376 High 2016-06-03 Protected by Waratek No public exploit The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456.
CVE-2016-3427 Critical 2016-04-21 Protected by Waratek Exploited Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVE-2016-0638 Critical 2016-04-21 Protected by Waratek Exploited Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6, 12.1.2, 12.1.3, and 12.2.1 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Messaging Service.
CVE-2016-0788 Critical 2016-04-07 Protected by Waratek No public exploit The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.
CVE-2015-5254 Critical 2016-01-08 Protected by Waratek Proof of concept only Apache ActiveMQ 5.x before 5.13.0 does not restrict the classes that can be serialized in the broker, which allows remote attackers to execute arbitrary code via a crafted serialized Java Message Service (JMS) ObjectMessage object.