VRT Sign in

Medium CWE-77 CVEs

3 CVEs, 2 protected by Waratek

Look up CVE IDs Status Exploitation Severity

Reset

Overview 3 matches · 2 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5

3matches 2protected66.7% 0exploited0.0% 0CISA KEV0.0% 1public PoC33.3% 0EPSS ≥ 0.50.0%

Protected by Waratek 2 66.7% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 33.3%

Critical 0 0.0% High 0 0.0% Medium 3 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 2 66.7% partly blocked 0 0.0% not blocked 1 33.3% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 1 33.3% Proof of concept only 1 33.3% Forecast only 0 0.0% No public exploit 1 33.3%

split by StatusSeverityProtectionExploit maturity peak 1 / year

20111 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 20120 20130 20140 20150 20160 20170 20180 20190 20200 20210 20221 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 20230 20240 20251 No exploit published1 Medium1 not blocked1 Proof of concept only1

20112013201520172019202120232025

3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2025-56769	Medium	2025-09-25	No exploit published	Proof of concept only	An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.
CVE-2021-38542	Medium	2022-01-04	Protected by Waratek	No public exploit	Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. This can result in Man-in -the-middle command injection attacks, leading potentially to leakage of sensible information.
CVE-2011-1571	Medium	2011-05-07	Protected by Waratek	Working exploit published	Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2025-56769

Medium

2025-09-25

No exploit published

Proof of concept only

An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary method invocation and potentially remote code execution (RCE) via the QLExpressEngine class.

CVE-2021-38542

Medium

2022-01-04

Protected by Waratek

No public exploit

Apache James prior to release 3.6.1 is vulnerable to a buffering attack relying on the use of the STARTTLS command. This can result in Man-in -the-middle command injection attacks, leading potentially to leakage of sensible information.

CVE-2011-1571

Medium

2011-05-07

Protected by Waratek

Working exploit published

Unspecified vulnerability in the XSL Content portlet in Liferay Portal Community Edition (CE) 5.x and 6.x before 6.0.6 GA, when Apache Tomcat is used, allows remote attackers to execute arbitrary commands via unknown vectors.