WaratekVRT Sign in

CWE-74 CVEs

117 CVEs, 10 exploited, 23 protected by Waratek

Reset
More filters (1)
Columns
CWE CWE-74✕
Overview 117 matches · 22 protected · 10 exploited · 5 CISA KEV · 15 public PoC · 15 EPSS ≥ 0.5
117matches 22protected18.8% 10exploited8.5% 5CISA KEV4.3% 15public PoC12.8% 15EPSS ≥ 0.512.8%
Protected by Waratek 23 19.7% Rule in development 0 0.0% Mitigation candidate 7 6.0% No exploit published 87 74.4%
Critical 50 42.7% High 36 30.8% Medium 29 24.8% Low 2 1.7% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 22 18.8% partly blocked 1 0.9% not blocked 94 80.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 10 8.5% Working exploit published 3 2.6% Proof of concept only 28 23.9% Forecast only 0 0.0% No public exploit 76 65.0%
split by peak 31 / year
No exploit published: 87Mitigation candidate: 7Protected by Waratek: 23 Low: 2Medium: 29High: 36Critical: 50 not blocked: 94partly blocked: 1blocked by ARMR today: 22 No public exploit: 76Proof of concept only: 28Working exploit published: 3Exploited: 10
20131 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 20140 20150 20160 20176 Protected by Waratek2 No exploit published4 Critical2 High3 Medium1 blocked by ARMR today2 not blocked4 No public exploit6 20183 Protected by Waratek1 No exploit published2 Critical1 High1 Medium1 blocked by ARMR today1 not blocked2 Exploited1 No public exploit2 20194 Protected by Waratek2 No exploit published2 Critical1 High2 Medium1 blocked by ARMR today1 partly blocked1 not blocked2 Exploited2 No public exploit2 202017 Mitigation candidate3 No exploit published14 Critical3 High8 Medium6 not blocked17 Exploited1 Proof of concept only3 No public exploit13 202110 Protected by Waratek3 Mitigation candidate1 No exploit published6 Critical4 High5 Medium1 blocked by ARMR today3 not blocked7 Exploited2 Working exploit published2 No public exploit6 202216 Protected by Waratek3 Mitigation candidate1 No exploit published12 Critical9 High4 Medium3 blocked by ARMR today3 not blocked13 Exploited1 Proof of concept only2 No public exploit13 202331 Protected by Waratek3 Mitigation candidate2 No exploit published26 Critical23 High7 Medium1 blocked by ARMR today3 not blocked28 Exploited2 Working exploit published1 Proof of concept only18 No public exploit10 20245 Protected by Waratek2 No exploit published3 Critical4 Medium1 blocked by ARMR today2 not blocked3 Proof of concept only1 No public exploit4 20254 No exploit published4 High1 Medium2 Low1 not blocked4 No public exploit4 202620 Protected by Waratek6 No exploit published14 Critical2 High5 Medium12 Low1 blocked by ARMR today6 not blocked14 Proof of concept only4 No public exploit16
2014201620182020202220242026
117 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2020-6858 Medium 2020-03-12 No exploit published No public exploit Hotels Styx through 1.0.0.beta8 allows HTTP response splitting due to CRLF Injection. This is exploitable if untrusted user input can appear in a response header.
CVE-2020-5245 High 2020-02-24 No exploit published Proof of concept only Dropwizard-Validation before 1.3.19, and 2.0.2 may allow arbitrary code execution on the host system, with the privileges of the Dropwizard service account, by injecting arbitrary Java Expression Language expressions when using the self-validating feature. The issue has been fixed in dropwizard-validation 1.3.19 and 2.0.2.
CVE-2020-5230 High 2020-01-30 No exploit published No public exploit Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security since such identifiers are sometimes used for file system operations which may lead to an attacker being able to escape working directories and write files to other locations. In addition, Opencast's Id.toString(…) vs Id.compact(…) behavior, the latter trying to mitigate some of the file system problems, can cause errors due to identifier mismatch since an identifier may unintentionally change. This issue is fixed in Opencast 7.6 and 8.1.
CVE-2019-17558 High 2019-12-30 Protected by Waratek Exploited Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting `params.resource.loader.enabled` by defining a response writer with that setting set to `true`. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is `trusted` (has been uploaded by an authenticated user).
CVE-2019-16771 Medium 2019-12-06 No exploit published No public exploit Versions of Armeria 0.85.0 through and including 0.96.0 are vulnerable to HTTP response splitting, which allows remote attackers to inject arbitrary HTTP headers via CRLF sequences when unsanitized data is used to populate the headers of an HTTP response. This vulnerability has been patched in 0.97.0. Potential impacts of this vulnerability include cross-user defacement, cache poisoning, Cross-site scripting (XSS), and page hijacking.
CVE-2019-17513 High 2019-10-18 No exploit published No public exploit An issue was discovered in Ratpack before 1.7.5. Due to a misuse of the Netty library class DefaultHttpHeaders, there is no validation that headers lack HTTP control characters. Thus, if untrusted data is used to construct HTTP headers with Ratpack, HTTP Response Splitting can occur.
CVE-2019-2725 Critical 2019-04-26 Protected by Waratek Exploited Vulnerability in the Oracle WebLogic Server component of Oracle Fusion Middleware (subcomponent: Web Services). Supported versions that are affected are 10.3.6.0.0 and 12.1.3.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful attacks of this vulnerability can result in takeover of Oracle WebLogic Server. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
CVE-2018-1000854 Critical 2018-12-20 No exploit published No public exploit esigate.org esigate version 5.2 and earlier contains a CWE-74: Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in ESI directive with user specified XSLT that can result in Remote Code Execution. This attack appear to be exploitable via Use of another weakness in backend application to reflect ESI directives. This vulnerability appears to have been fixed in 5.3.
CVE-2018-1000193 Medium 2018-06-05 No exploit published No public exploit A improper neutralization of control sequences vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in HudsonPrivateSecurityRealm.java that allows users to sign up using user names containing control characters that can then appear to have the same name as other users, and cannot be deleted via the UI.
CVE-2018-1000130 High 2018-03-14 Protected by Waratek Exploited A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.
CVE-2013-4578 Medium 2017-12-29 No exploit published No public exploit jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.
CVE-2017-15708 Critical 2017-12-11 Protected by Waratek No public exploit In Apache Synapse, by default no authentication is required for Java Remote Method Invocation (RMI). So Apache Synapse 3.0.1 or all previous releases (3.0.0, 2.1.0, 2.0.0, 1.2, 1.1.2, 1.1.1) allows remote code execution attacks that can be performed by injecting specially crafted serialized objects. And the presence of Apache Commons Collections 3.2.1 (commons-collections-3.2.1.jar) or previous versions in Synapse distribution makes this exploitable. To mitigate the issue, we need to limit RMI access to trusted users only. Further upgrading to 3.0.1 version will eliminate the risk of having said Commons Collection version. In Synapse 3.0.1, Commons Collection has been updated to 3.2.2 version.
CVE-2017-1000217 High 2017-11-17 No exploit published No public exploit Opencast 2.3.2 and older versions are vulnerable to script injections through media and metadata in the player and media module resulting in arbitrary code execution, fixed in 2.3.3 and 3.0.
CVE-2017-5636 Critical 2017-10-19 Protected by Waratek No public exploit In Apache NiFi before 0.7.2 and 1.x before 1.1.2 in a cluster environment, the proxy chain serialization/deserialization is vulnerable to an injection attack where a carefully crafted username could impersonate another user and gain their permissions on a replicated request to another node.
CVE-2016-4461 High 2017-10-16 No exploit published No public exploit Apache Struts 2.x before 2.3.29 allows remote attackers to execute arbitrary code via a "%{}" sequence in a tag attribute, aka forced double OGNL evaluation. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-0785.
CVE-2017-3547 High 2017-04-24 No exploit published No public exploit Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products (subcomponent: MultiChannel Framework). Supported versions that are affected are 8.54 and 8.55. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft Enterprise PeopleTools. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in PeopleSoft Enterprise PeopleTools, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all PeopleSoft Enterprise PeopleTools accessible data. CVSS 3.0 Base Score 7.4 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N).
CVE-2013-2251 Critical 2013-07-20 Protected by Waratek Exploited Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.
‹ prev page 2 of 2 next ›