WaratekVRT Sign in
Reset
More filters (1)
Columns
Published to 2010-01-31✕
Overview 4 matches · 3 protected · 1 CISA KEV · 2 public PoC · 3 EPSS ≥ 0.5
4matches 3protected75.0% 1CISA KEV25.0% 2public PoC50.0% 3EPSS ≥ 0.575.0%
Protected by Waratek 3 75.0% Rule in development 0 0.0% Mitigation candidate 1 25.0% No exploit published 0 0.0%
Critical 0 0.0% High 3 75.0% Medium 1 25.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 3 75.0% partly blocked 0 0.0% not blocked 1 25.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / quarter
Mitigation candidate: 1Protected by Waratek: 3 Medium: 1High: 3 not blocked: 1blocked by ARMR today: 3 Exploited: 4
Q1 061 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 Q2 060 Q3 060 Q4 060 Q1 070 Q2 070 Q3 070 Q4 070 Q1 081 Protected by Waratek1 Medium1 blocked by ARMR today1 Exploited1 Q2 080 Q3 080 Q4 081 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 Q1 090 Q2 090 Q3 090 Q4 091 Mitigation candidate1 High1 not blocked1 Exploited1
Q2 06Q4 06Q2 07Q4 07Q2 08Q4 08Q2 09Q4 09
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2009-3867 High 2009-11-05 Mitigation candidate Exploited Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.
CVE-2008-5353 High 2008-12-05 Protected by Waratek Exploited The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run untrusted applets and applications in a privileged context, as demonstrated by "deserializing Calendar objects".
CVE-2007-6672 Medium 2008-01-08 Protected by Waratek Exploited Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' (slash) characters in the URI.
CVE-2006-1547 High 2006-03-30 Protected by Waratek Exploited ActionForm in Apache Software Foundation (ASF) Struts before 1.2.9 with BeanUtils 1.7 allows remote attackers to cause a denial of service via a multipart/form-data encoded form with a parameter name that references the public getMultipartRequestHandler method, which provides further access to elements in the CommonsMultipartRequestHandler implementation and BeanUtils.