WaratekVRT Sign in
Reset
More filters (1)
Columns
ARMR rules: Process✕
Overview 206 matches · 203 protected · 30 exploited · 22 CISA KEV · 37 public PoC · 33 EPSS ≥ 0.5
206matches 203protected98.5% 30exploited14.6% 22CISA KEV10.7% 37public PoC18.0% 33EPSS ≥ 0.516.0%
Protected by Waratek 206 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 0 0.0% High 206 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 203 98.5% partly blocked 3 1.5% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 30 14.6% Working exploit published 6 2.9% Proof of concept only 11 5.3% Forecast only 2 1.0% No public exploit 157 76.2%
split by peak 52 / year
Protected by Waratek: 206 High: 206 partly blocked: 3blocked by ARMR today: 203 No public exploit: 157Forecast only: 2Proof of concept only: 11Working exploit published: 6Exploited: 30
20091 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 20101 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 20110 20120 20133 Protected by Waratek3 High3 blocked by ARMR today3 Exploited2 No public exploit1 20144 Protected by Waratek4 High4 blocked by ARMR today4 Exploited1 Working exploit published1 No public exploit2 20152 Protected by Waratek2 High2 blocked by ARMR today2 No public exploit2 20166 Protected by Waratek6 High6 blocked by ARMR today6 Exploited1 Working exploit published2 No public exploit3 201710 Protected by Waratek10 High10 blocked by ARMR today8 partly blocked2 Exploited5 No public exploit5 201816 Protected by Waratek16 High16 blocked by ARMR today16 Exploited2 No public exploit14 20198 Protected by Waratek8 High8 blocked by ARMR today7 partly blocked1 Exploited3 Proof of concept only3 No public exploit2 202033 Protected by Waratek33 High33 blocked by ARMR today33 Exploited3 Working exploit published2 Proof of concept only1 No public exploit27 20219 Protected by Waratek9 High9 blocked by ARMR today9 Exploited2 No public exploit7 202220 Protected by Waratek20 High20 blocked by ARMR today20 Exploited2 Forecast only1 No public exploit17 202323 Protected by Waratek23 High23 blocked by ARMR today23 Exploited3 Working exploit published1 Proof of concept only3 Forecast only1 No public exploit15 202411 Protected by Waratek11 High11 blocked by ARMR today11 Exploited2 Proof of concept only1 No public exploit8 20257 Protected by Waratek7 High7 blocked by ARMR today7 No public exploit7 202652 Protected by Waratek52 High52 blocked by ARMR today52 Exploited3 Proof of concept only3 No public exploit46
201020122014201620182020202220242026
206 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2013-2185 High 2014-01-19 Protected by Waratek No public exploit The readObject method in the DiskFileItem class in Apache Tomcat and JBoss Web, as used in Red Hat JBoss Enterprise Application Platform 6.1.0 and Red Hat JBoss Portal 6.0.0, allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance, a similar issue to CVE-2013-2186. NOTE: this issue is reportedly disputed by the Apache Tomcat team, although Red Hat considers it a vulnerability. The dispute appears to regard whether it is the responsibility of applications to avoid providing untrusted data to be deserialized, or whether this class should inherently protect against this issue
CVE-2013-4271 High 2013-10-10 Protected by Waratek No public exploit The default configuration of the ObjectRepresentation class in Restlet before 2.1.4 deserializes objects from untrusted sources, which allows remote attackers to execute arbitrary Java code via a serialized object, a different vulnerability than CVE-2013-4221.
CVE-2013-2165 High 2013-07-23 Protected by Waratek Exploited ResourceBuilderImpl.java in the RichFaces 3.x through 5.x implementation in Red Hat JBoss Web Framework Kit before 2.3.0, Red Hat JBoss Web Platform through 5.2.0, Red Hat JBoss Enterprise Application Platform through 4.3.0 CP10 and 5.x through 5.2.0, Red Hat JBoss BRMS through 5.3.1, Red Hat JBoss SOA Platform through 4.3.0 CP05 and 5.x through 5.3.1, Red Hat JBoss Portal through 4.3 CP07 and 5.x through 5.2.2, and Red Hat JBoss Operations Network through 2.4.2 and 3.x through 3.1.2 does not restrict the classes for which deserialization methods can be called, which allows remote attackers to execute arbitrary code via crafted serialized data.
CVE-2013-1965 High 2013-07-10 Protected by Waratek Exploited Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect.
CVE-2010-1871 High 2010-08-05 Protected by Waratek Exploited JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL. NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.
CVE-2009-2723 High 2009-08-10 Protected by Waratek No public exploit Unspecified vulnerability in deserialization in the Provider class in Sun Java SE 5.0 before Update 20 has unknown impact and attack vectors, aka BugId 6444262.
‹ prev page 3 of 3 next ›