WaratekVRT Sign in

CWE-19 CVEs

5 CVEs, 1 exploited, 2 protected by Waratek

Reset
More filters (1)
Columns
CWE CWE-19✕
Overview 5 matches · 2 protected · 1 exploited · 0 CISA KEV · 1 public PoC · 2 EPSS ≥ 0.5
5matches 2protected40.0% 1exploited20.0% 0CISA KEV0.0% 1public PoC20.0% 2EPSS ≥ 0.540.0%
Protected by Waratek 2 40.0% Rule in development 0 0.0% Mitigation candidate 1 20.0% No exploit published 2 40.0%
Critical 1 20.0% High 4 80.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 40.0% partly blocked 0 0.0% not blocked 3 60.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 20.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 1 20.0% No public exploit 3 60.0%
split by peak 2 / quarter
No exploit published: 2Mitigation candidate: 1Protected by Waratek: 2 High: 4Critical: 1 not blocked: 3blocked by ARMR today: 2 No public exploit: 3Forecast only: 1Exploited: 1
Q1 161 No exploit published1 Critical1 not blocked1 No public exploit1 Q2 162 Protected by Waratek1 No exploit published1 High2 blocked by ARMR today1 not blocked1 Forecast only1 No public exploit1 Q3 160 Q4 160 Q1 170 Q2 171 Mitigation candidate1 High1 not blocked1 Exploited1 Q3 170 Q4 170 Q1 180 Q2 181 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1
Q1 16Q2 16Q3 16Q4 16Q1 17Q2 17Q3 17Q4 17Q1 18Q2 18
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2016-1000340 High 2018-06-04 Protected by Waratek No public exploit In the Bouncy Castle JCE Provider versions 1.51 to 1.55, a carry propagation bug was introduced in the implementation of squaring for several raw math classes have been fixed (org.bouncycastle.math.raw.Nat???). These classes are used by our custom elliptic curve implementations (org.bouncycastle.math.ec.custom.**), so there was the possibility of rare (in general usage) spurious calculations for elliptic curve scalar multiplications. Such errors would have been detected with high probability by the output validation for our scalar multipliers.
CVE-2016-4977 High 2017-05-25 Mitigation candidate Exploited When processing authorization requests using the whitelabel views in Spring Security OAuth 2.0.0 to 2.0.9 and 1.0.0 to 1.0.5, the response_type parameter value was executed as Spring SpEL which enabled a malicious user to trigger remote code execution via the crafting of the value for response_type.
CVE-2015-5348 High 2016-04-15 No exploit published No public exploit Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) camel-servlet as a consumer in Camel routes, allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.
CVE-2016-2510 High 2016-04-07 Protected by Waratek Forecast only BeanShell (bsh) before 2.0b6, when included on the classpath by an application that uses Java serialization or XStream, allows remote attackers to execute arbitrary code via crafted serialized data, related to XThis.Handler.
CVE-2015-5344 Critical 2016-02-03 No exploit published No public exploit The camel-xstream component in Apache Camel before 2.15.5 and 2.16.x before 2.16.1 allow remote attackers to execute arbitrary commands via a crafted serialized Java object in an HTTP request.