WaratekVRT Sign in
Reset
More filters (2)
Columns
EPSS ≥ 0.5✕Vendor sun✕
Overview 6 matches · 2 protected · 2 exploited · 0 CISA KEV · 5 public PoC
6matches 2protected33.3% 2exploited33.3% 0CISA KEV0.0% 5public PoC83.3%
Protected by Waratek 2 33.3% Rule in development 0 0.0% Mitigation candidate 3 50.0% No exploit published 1 16.7%
Critical 0 0.0% High 5 83.3% Medium 1 16.7% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 33.3% partly blocked 0 0.0% not blocked 4 66.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 33.3% Working exploit published 3 50.0% Proof of concept only 0 0.0% Forecast only 1 16.7% No public exploit 0 0.0%
split by peak 2 / quarter
No exploit published: 1Mitigation candidate: 3Protected by Waratek: 2 Medium: 1High: 5 not blocked: 4blocked by ARMR today: 2 Forecast only: 1Working exploit published: 3Exploited: 2
Q4 081 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 Q1 090 Q2 090 Q3 090 Q4 092 Mitigation candidate2 High2 not blocked2 Exploited1 Working exploit published1 Q1 100 Q2 100 Q3 100 Q4 100 Q1 110 Q2 111 Mitigation candidate1 High1 not blocked1 Working exploit published1 Q3 110 Q4 111 Protected by Waratek1 High1 blocked by ARMR today1 Working exploit published1 Q1 120 Q2 120 Q3 120 Q4 120 Q1 130 Q2 131 No exploit published1 Medium1 not blocked1 Forecast only1
Q4 08Q2 09Q4 09Q2 10Q4 10Q2 11Q4 11Q2 12Q4 12Q2 13
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2013-1571 Medium 2013-06-18 No exploit published Forecast only Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to frame injection in HTML that is generated by Javadoc.
CVE-2011-3556 High 2011-10-19 Protected by Waratek Working exploit published Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3557.
CVE-2011-0807 High 2011-04-20 Mitigation candidate Working exploit published Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.
CVE-2009-3869 High 2009-11-05 Mitigation candidate Working exploit published Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
CVE-2009-3867 High 2009-11-05 Mitigation candidate Exploited Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.
CVE-2008-5353 High 2008-12-05 Protected by Waratek Exploited The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".