WaratekVRT Sign in
Reset
More filters (2)
Columns
EPSS ≥ 0.5✕CWE CWE-19✕
Overview 2 matches · 1 protected · 1 exploited · 0 CISA KEV · 1 public PoC
2matches 1protected50.0% 1exploited50.0% 0CISA KEV0.0% 1public PoC50.0%
Protected by Waratek 1 50.0% Rule in development 0 0.0% Mitigation candidate 1 50.0% No exploit published 0 0.0%
Critical 0 0.0% High 2 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 50.0% partly blocked 0 0.0% not blocked 1 50.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 50.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 1 50.0% No public exploit 0 0.0%
split by peak 1 / month
Mitigation candidate: 1Protected by Waratek: 1 High: 2 not blocked: 1blocked by ARMR today: 1 Forecast only: 1Exploited: 1
Apr 161 Protected by Waratek1 High1 blocked by ARMR today1 Forecast only1 May 160 Jun 160 Jul 160 Aug 160 Sep 160 Oct 160 Nov 160 Dec 160 Jan 170 Feb 170 Mar 170 Apr 170 May 171 Mitigation candidate1 High1 not blocked1 Exploited1
May 16Jul 16Sep 16Nov 16Jan 17Mar 17May 17
2 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2016-4977 High 2017-05-25 Mitigation candidate Exploited When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type.
CVE-2016-2510 High 2016-04-07 Protected by Waratek Forecast only BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.