WaratekVRT Sign in

High CWE-119 CVEs

13 CVEs, 1 exploited

Reset
More filters (1)
Columns
CWE CWE-119✕
Overview 13 matches · 0 protected · 1 exploited · 0 CISA KEV · 3 public PoC · 3 EPSS ≥ 0.5
13matches 0protected0.0% 1exploited7.7% 0CISA KEV0.0% 3public PoC23.1% 3EPSS ≥ 0.523.1%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 3 23.1% No exploit published 10 76.9%
Critical 0 0.0% High 13 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 13 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 7.7% Working exploit published 2 15.4% Proof of concept only 0 0.0% Forecast only 1 7.7% No public exploit 9 69.2%
split by peak 6 / year
No exploit published: 10Mitigation candidate: 3 High: 13 not blocked: 13 No public exploit: 9Forecast only: 1Working exploit published: 2Exploited: 1
20021 Mitigation candidate1 High1 not blocked1 Working exploit published1 20030 20040 20051 No exploit published1 High1 not blocked1 No public exploit1 20060 20070 20080 20096 Mitigation candidate2 No exploit published4 High6 not blocked6 Exploited1 Working exploit published1 No public exploit4 20100 20110 20120 20130 20140 20150 20160 20172 No exploit published2 High2 not blocked2 No public exploit2 20180 20192 No exploit published2 High2 not blocked2 No public exploit2 20201 No exploit published1 High1 not blocked1 Forecast only1
2002200420062008201020122014201620182020
13 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2020-13934 High 2020-07-14 No exploit published Forecast only An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial of service.
CVE-2018-11768 High 2019-10-04 No exploit published No public exploit In Apache Hadoop 3.1.0 to 3.1.1, 3.0.0-alpha1 to 3.0.3, 2.9.0 to 2.9.1, and 2.0.0-alpha to 2.8.4, the user/group information can be corrupted across storing in fsimage and reading back from fsimage.
CVE-2019-10245 High 2019-04-19 No exploit published No public exploit In Eclipse OpenJ9 prior to the 0.14.0 release, the Java bytecode verifier incorrectly allows a method to execute past the end of bytecode array causing crashes. Eclipse OpenJ9 v0.14.0 correctly detects this case and rejects the attempted class load.
CVE-2017-1000118 High 2017-10-05 No exploit published No public exploit Akka HTTP versions <= 10.0.5 Illegal Media Range in Accept Header Causes StackOverflowError Leading to Denial of Service
CVE-2016-6817 High 2017-08-10 No exploit published No public exploit The HTTP/2 header parser in Apache Tomcat 9.0.0.M1 to 9.0.0.M11 and 8.5.0 to 8.5.6 entered an infinite loop if a header was received that was larger than the available buffer. This made a denial of service attack possible.
CVE-2009-3873 High 2009-11-05 No exploit published No public exploit The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968.
CVE-2009-3871 High 2009-11-05 No exploit published No public exploit Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via crafted arguments, aka Bug Id 6872358.
CVE-2009-3869 High 2009-11-05 Mitigation candidate Working exploit published Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
CVE-2009-3868 High 2009-11-05 No exploit published No public exploit Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse color profiles, which allows remote attackers to gain privileges via a crafted image file, aka Bug Id 6862970.
CVE-2009-3867 High 2009-11-05 Mitigation candidate Exploited Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.
CVE-2009-1098 High 2009-03-25 No exploit published No public exploit Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka CR 6804998.
CVE-2005-3760 High 2005-11-22 No exploit published No public exploit Double free vulnerability in the BBOORB module in IBM WebSphere Application Server for z/OS 5.0 allows attackers to cause a denial of service (ABEND).
CVE-2002-2272 High 2002-12-31 Mitigation candidate Working exploit published Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.