WaratekVRT Sign in

Medium CWE-264 CVEs

105 CVEs, 6 protected by Waratek

Reset
More filters (1)
Columns
CWE CWE-264✕
Overview 105 matches · 6 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 0 EPSS ≥ 0.5
105matches 6protected5.7% 0exploited0.0% 0CISA KEV0.0% 3public PoC2.9% 0EPSS ≥ 0.50.0%
Protected by Waratek 6 5.7% Rule in development 0 0.0% Mitigation candidate 3 2.9% No exploit published 96 91.4%
Critical 0 0.0% High 0 0.0% Medium 105 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 6 5.7% partly blocked 0 0.0% not blocked 99 94.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 2.9% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 102 97.1%
split by peak 18 / year
No exploit published: 96Mitigation candidate: 3Protected by Waratek: 6 Medium: 105 not blocked: 99blocked by ARMR today: 6 No public exploit: 102Working exploit published: 3
20072 No exploit published2 Medium2 not blocked2 No public exploit2 200810 No exploit published10 Medium10 not blocked10 No public exploit10 200912 No exploit published12 Medium12 not blocked12 No public exploit12 20103 No exploit published3 Medium3 not blocked3 No public exploit3 201112 No exploit published12 Medium12 not blocked12 No public exploit12 201215 Mitigation candidate3 No exploit published12 Medium15 not blocked15 Working exploit published3 No public exploit12 201311 No exploit published11 Medium11 not blocked11 No public exploit11 201418 Protected by Waratek5 No exploit published13 Medium18 blocked by ARMR today5 not blocked13 No public exploit18 201514 Protected by Waratek1 No exploit published13 Medium14 blocked by ARMR today1 not blocked13 No public exploit14 20164 No exploit published4 Medium4 not blocked4 No public exploit4 20171 No exploit published1 Medium1 not blocked1 No public exploit1 20181 No exploit published1 Medium1 not blocked1 No public exploit1 20190 20200 20211 No exploit published1 Medium1 not blocked1 No public exploit1 20221 No exploit published1 Medium1 not blocked1 No public exploit1
20082010201220142016201820202022
105 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2008-0896 Medium 2008-02-22 No exploit published No public exploit BEA WebLogic Portal 10.0 and 9.2 through MP1, when an administrator deletes a single instance of a content portlet, removes entitlement policies for other content portlets, which allows attackers to bypass intended access restrictions.
CVE-2008-0865 Medium 2008-02-21 No exploit published No public exploit Unspecified vulnerability in BEA WebLogic Portal 8.1 through SP6 allows remote attackers to bypass entitlements for instances of a floatable WLP portlet via unknown vectors.
CVE-2008-0864 Medium 2008-02-21 No exploit published No public exploit Admin Tools in BEA WebLogic Portal 8.1 SP3 through SP6 can inadvertently remove entitlements for pages when an administrator edits the page definition label, which might allow remote attackers to bypass intended access restrictions.
CVE-2007-5342 Medium 2007-12-27 No exploit published No public exploit The default catalina.policy in the JULI logging component in Apache Tomcat 5.5.9 through 5.5.25 and 6.0.0 through 6.0.15 does not restrict certain permissions for web applications, which allows attackers to modify logging configuration options and overwrite arbitrary files, as demonstrated by changing the (1) level, (2) directory, and (3) prefix attributes in the org.apache.juli.FileHandler handler.
CVE-2006-7223 Medium 2007-09-14 No exploit published No public exploit PreviewAction in XWiki 0.9.543 through 0.9.1252 does not set the Author field to the identity of the user who last modified a document, which allows remote authenticated users without programming rights to execute arbitrary code by selecting a document whose author has programming rights, modifying this document to contain a script, and previewing without saving the document.
‹ prev page 2 of 2 next ›