WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Oracle product: Oracle Construction and Engineering / Core (Apache HTTP Server)✕
Overview 4 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 2 public PoC
4matches 0in Waratek scope0.0% 0protected0.0% 1exploited25.0% 0CISA KEV0.0% 2public PoC50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 4 100.0% Not applicable 0 0.0% Withdrawn CVE 0 0.0%
Critical 3 75.0% High 0 0.0% Medium 1 25.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 25.0% Working exploit published 1 25.0% Proof of concept only 0 0.0% Forecast only 2 50.0% No public exploit 0 0.0%
split by peak 1 / quarter
Outside Waratek scope: 4 Medium: 1Critical: 3 not blocked: 4 Forecast only: 2Working exploit published: 1Exploited: 1
Q2 201 Outside Waratek scope1 Medium1 not blocked1 Forecast only1 Q3 201 Outside Waratek scope1 Critical1 not blocked1 Exploited1 Q4 200 Q1 210 Q2 211 Outside Waratek scope1 Critical1 not blocked1 Forecast only1 Q3 210 Q4 211 Outside Waratek scope1 Critical1 not blocked1 Working exploit published1
Q2 20Q3 20Q4 20Q1 21Q2 21Q3 21Q4 21
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2021-44790 Critical 2021-12-20 Outside Waratek scope Working exploit published A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.
CVE-2021-26691 Critical 2021-06-10 Outside Waratek scope Forecast only In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflow
CVE-2020-11984 Critical 2020-08-07 Outside Waratek scope Exploited Apache HTTP server 2.4.32 to 2.4.44 mod_proxy_uwsgi info disclosure and possible RCE
CVE-2020-1934 Medium 2020-04-01 Outside Waratek scope Forecast only In Apache HTTP Server 2.4.0 to 2.4.41, mod_proxy_ftp may use uninitialized memory when proxying to a malicious FTP server.