WaratekVRT Sign in
Reset
More filters (1)
Columns
ARMR rules: Process✕
Overview 225 matches · 222 protected · 45 exploited · 28 CISA KEV · 65 public PoC · 50 EPSS ≥ 0.5
225matches 222protected98.7% 45exploited20.0% 28CISA KEV12.4% 65public PoC28.9% 50EPSS ≥ 0.522.2%
Protected by Waratek 225 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 225 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 222 98.7% partly blocked 3 1.3% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 45 20.0% Working exploit published 7 3.1% Proof of concept only 34 15.1% Forecast only 4 1.8% No public exploit 135 60.0%
split by peak 38 / year
Protected by Waratek: 225 Critical: 225 partly blocked: 3blocked by ARMR today: 222 No public exploit: 135Forecast only: 4Proof of concept only: 34Working exploit published: 7Exploited: 45
20121 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 20131 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 20140 20152 Protected by Waratek2 Critical2 blocked by ARMR today2 Exploited1 Working exploit published1 20166 Protected by Waratek6 Critical6 blocked by ARMR today5 partly blocked1 Exploited3 No public exploit3 201715 Protected by Waratek15 Critical15 blocked by ARMR today15 Exploited3 No public exploit12 201819 Protected by Waratek19 Critical19 blocked by ARMR today18 partly blocked1 Exploited6 Proof of concept only3 No public exploit10 201916 Protected by Waratek16 Critical16 blocked by ARMR today16 Exploited4 Working exploit published2 Proof of concept only1 Forecast only1 No public exploit8 202027 Protected by Waratek27 Critical27 blocked by ARMR today27 Exploited12 Proof of concept only3 No public exploit12 202119 Protected by Waratek19 Critical19 blocked by ARMR today19 Exploited3 Working exploit published1 Proof of concept only4 No public exploit11 202224 Protected by Waratek24 Critical24 blocked by ARMR today24 Exploited2 Working exploit published1 Proof of concept only7 Forecast only2 No public exploit12 202322 Protected by Waratek22 Critical22 blocked by ARMR today22 Exploited1 Working exploit published1 Proof of concept only6 No public exploit14 202417 Protected by Waratek17 Critical17 blocked by ARMR today16 partly blocked1 Exploited2 Proof of concept only4 No public exploit11 202518 Protected by Waratek18 Critical18 blocked by ARMR today18 Exploited3 Proof of concept only3 Forecast only1 No public exploit11 202638 Protected by Waratek38 Critical38 blocked by ARMR today38 Exploited3 Working exploit published1 Proof of concept only3 No public exploit31
20122014201620182020202220242026
225 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2017-5641 Critical 2017-12-28 Protected by Waratek No public exploit Previous versions of Apache Flex BlazeDS (4.7.2 and earlier) did not restrict which types were allowed for AMF(X) object deserialization by default. During the deserialization process code is executed that for several known types has undesired side-effects. Other, unknown types may also exhibit such behaviors. One vector in the Java standard library exists that allows an attacker to trigger possibly further exploitable Java deserialization of untrusted data. Other known vectors in third party libraries can be used to trigger remote code execution.
CVE-2017-15708 Critical 2017-12-11 Protected by Waratek No public exploit In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by injecting specially crafted serialized objects. And the presence of Apache Commons Collections 3.2.1 (commons-collections-3.2.1.jar) or previous versions in Synapse distribution makes this exploitable. To mitigate the issue, we need to limit RMI access to trusted users only. Further upgrading to 3.0.1 version will eliminate the risk of having said Commons Collection version. In Synapse 3.0.1, Commons Collection has been updated to 3.2.2 version.
CVE-2017-8045 Critical 2017-11-27 Protected by Waratek No public exploit In Pivotal Spring AMQP versions prior to 1.7.4, 1.6.11, and 1.5.7, an org.springframework.amqp.core.Message may be unsafely deserialized when being converted into a string. A malicious payload could be crafted to exploit this and enable a remote code execution attack.
CVE-2017-12634 Critical 2017-11-15 Protected by Waratek No public exploit The camel-castor component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
CVE-2017-12633 Critical 2017-11-15 Protected by Waratek No public exploit The camel-hessian component in Apache Camel 2.x before 2.19.4 and 2.20.x before 2.20.1 is vulnerable to Java object de-serialisation vulnerability. De-serializing untrusted data can lead to security flaws.
CVE-2016-5003 Critical 2017-10-27 Protected by Waratek No public exploit The Apache XML-RPC (aka ws-xmlrpc) library 3.1.3, as used in Apache Archiva, allows remote attackers to execute arbitrary code via a crafted serialized Java object in an <ex:serializable> element.
CVE-2017-5636 Critical 2017-10-19 Protected by Waratek No public exploit In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node.
CVE-2016-8736 Critical 2017-10-12 Protected by Waratek No public exploit Apache OpenMeetings before 3.1.2 is vulnerable to Remote Code Execution via RMI deserialization attack.
CVE-2017-12611 Critical 2017-09-20 Protected by Waratek Exploited In Apache Struts 2.0.0 through 2.3.33 and 2.5 through 2.5.10.1, using an unintentional expression in a Freemarker tag instead of string literals can lead to a RCE attack.
CVE-2017-9791 Critical 2017-07-10 Protected by Waratek Exploited The Struts 1 plugin in Apache Struts 2.1.x and 2.3.x might allow remote code execution via a malicious field value passed in a raw message to the ActionMessage.
CVE-2016-4000 Critical 2017-07-06 Protected by Waratek No public exploit Jython before 2.7.1rc1 allows attackers to execute arbitrary code via a crafted serialized PyFunction object.
CVE-2017-7504 Critical 2017-05-19 Protected by Waratek Exploited HTTPServerILServlet.java in JMS over HTTP Invocation Layer of the JbossMQ implementation, which is enabled by default in Red Hat Jboss Application Server <= Jboss 4.X does not restrict the classes for which it performs deserialization, which allows remote attackers to execute arbitrary code via crafted serialized data.
CVE-2016-2173 Critical 2017-04-21 Protected by Waratek No public exploit org.springframework.core.serializer.DefaultDeserializer in Spring AMQP before 1.5.5 allows remote attackers to execute arbitrary code.
CVE-2016-6809 Critical 2017-04-06 Protected by Waratek No public exploit Apache Tika before 1.14 allows Java code execution for serialized objects embedded in MATLAB files. The issue exists because Tika invokes JMatIO to do native deserialization.
CVE-2017-5929 Critical 2017-03-13 Protected by Waratek No public exploit QOS.ch Logback before 1.2.0 has a serialization vulnerability affecting the SocketServer and ServerSocketReceiver components.
CVE-2016-5019 Critical 2016-10-03 Protected by Waratek No public exploit CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state string.
CVE-2016-3737 Critical 2016-08-02 Protected by Waratek No public exploit The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.
CVE-2016-4437 Critical 2016-06-07 Protected by Waratek Exploited Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.
CVE-2016-3088 Critical 2016-06-01 Protected by Waratek Exploited The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
CVE-2016-3427 Critical 2016-04-21 Protected by Waratek Exploited Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVE-2016-0788 Critical 2016-04-07 Protected by Waratek No public exploit The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.
CVE-2015-8103 Critical 2015-11-25 Protected by Waratek Working exploit published The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the "Groovy variant in 'ysoserial'".
CVE-2015-1427 Critical 2015-02-17 Protected by Waratek Exploited The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
CVE-2013-2251 Critical 2013-07-20 Protected by Waratek Exploited Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
CVE-2012-0391 Critical 2012-01-08 Protected by Waratek Exploited The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL expressions during certain exception handling for mismatched data types of properties, which allows remote attackers to execute arbitrary Java code via a crafted parameter.
‹ prev page 3 of 3 next ›