WaratekVRT Sign in
Reset
More filters (3)
Columns
ARMR rules: Process✕Published from 2016-01-01✕Published to 2016-12-31✕
Overview 12 matches · 11 protected · 4 exploited · 4 CISA KEV · 5 public PoC · 5 EPSS ≥ 0.5
12matches 11protected91.7% 4exploited33.3% 4CISA KEV33.3% 5public PoC41.7% 5EPSS ≥ 0.541.7%
Protected by Waratek 12 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 6 50.0% High 6 50.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 11 91.7% partly blocked 1 8.3% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 33.3% Working exploit published 2 16.7% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 6 50.0%
split by peak 4 / month
Protected by Waratek: 12 High: 6Critical: 6 partly blocked: 1blocked by ARMR today: 11 No public exploit: 6Working exploit published: 2Exploited: 4
Apr 164 Protected by Waratek4 Critical2 High2 blocked by ARMR today4 Exploited2 No public exploit2 May 160 Jun 164 Protected by Waratek4 Critical2 High2 blocked by ARMR today3 partly blocked1 Exploited2 Working exploit published1 No public exploit1 Jul 161 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 Aug 161 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Sep 160 Oct 162 Protected by Waratek2 Critical1 High1 blocked by ARMR today2 Working exploit published1 No public exploit1
Apr 16May 16Jun 16Jul 16Aug 16Sep 16Oct 16
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2016-7065 High 2016-10-13 Protected by Waratek Working exploit published The JMX servlet in Red Hat JBoss Enterprise Application Platform (EAP) 4 and 5 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a crafted serialized Java object.
CVE-2016-5019 Critical 2016-10-03 Protected by Waratek No public exploit CoreResponseStateManager in Apache MyFaces Trinidad 1.0.0 through 1.0.13, 1.2.x before 1.2.15, 2.0.x before 2.0.2, and 2.1.x before 2.1.2 might allow attackers to conduct deserialization attacks via a crafted serialized view state string.
CVE-2016-3737 Critical 2016-08-02 Protected by Waratek No public exploit The server in Red Hat JBoss Operations Network (JON) before 3.3.6 allows remote attackers to execute arbitrary code via a crafted HTTP request, related to message deserialization.
CVE-2016-4974 High 2016-07-13 Protected by Waratek No public exploit Apache Qpid AMQP 0-x JMS client before 6.0.4 and JMS (AMQP 1.0) before 0.10.0 does not restrict the use of classes available on the classpath, which might allow remote authenticated users with permission to send messages to deserialize arbitrary objects and execute arbitrary code by leveraging a crafted serialized object in a JMS ObjectMessage that is handled by the getObject function.
CVE-2016-4437 Critical 2016-06-07 Protected by Waratek Exploited Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.
CVE-2015-7611 High 2016-06-07 Protected by Waratek Working exploit published Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary system commands via unspecified vectors.
CVE-2016-0376 High 2016-06-03 Protected by Waratek No public exploit The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456.
CVE-2016-3088 Critical 2016-06-01 Protected by Waratek Exploited The Fileserver web application in Apache ActiveMQ 5.x before 5.14.0 allows remote attackers to upload and execute arbitrary files via an HTTP PUT followed by an HTTP MOVE request.
CVE-2016-3081 High 2016-04-26 Protected by Waratek Exploited Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled, allow remote attackers to execute arbitrary code via method: prefix, related to chained expressions.
CVE-2016-3427 Critical 2016-04-21 Protected by Waratek Exploited Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.
CVE-2015-5349 High 2016-04-11 Protected by Waratek No public exploit The CSV export in Apache LDAP Studio and Apache Directory Studio before 2.0.0-M10 does not properly escape field values, which might allow attackers to execute arbitrary commands by leveraging a crafted LDAP entry that is interpreted as a formula when imported into a spreadsheet.
CVE-2016-0788 Critical 2016-04-07 Protected by Waratek No public exploit The remoting module in Jenkins before 1.650 and LTS before 1.642.2 allows remote attackers to execute arbitrary code by opening a JRMP listener.