WaratekVRT Sign in
Reset
More filters (1)
Columns
Published from 2024-05-01✕
Overview 3 matches · 1 protected · 0 exploited · 0 CISA KEV · 0 public PoC
3matches 1protected33.3% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0%
Protected by Waratek 1 33.3% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 66.7%
Critical 1 33.3% High 1 33.3% Medium 1 33.3% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 33.3% partly blocked 0 0.0% not blocked 2 66.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 3 100.0% No public exploit 0 0.0%
split by peak 1 / month
No exploit published: 2Protected by Waratek: 1 Medium: 1High: 1Critical: 1 not blocked: 2blocked by ARMR today: 1 Forecast only: 3
Jun 241 No exploit published1 Medium1 not blocked1 Forecast only1 Jul 240 Aug 240 Sep 240 Oct 240 Nov 241 No exploit published1 High1 not blocked1 Forecast only1 Dec 240 Jan 251 Protected by Waratek1 Critical1 blocked by ARMR today1 Forecast only1
Jun 24Jul 24Aug 24Sep 24Oct 24Nov 24Dec 24Jan 25
3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-54676 Critical 2025-01-08 Protected by Waratek Forecast only Vendor: The Apache Software Foundation Versions Affected: Apache OpenMeetings from 2.1.0 before 8.0.0 Description: Default clustering instructions at https://openmeetings.apache.org/Clustering.html  doesn't specify white/black lists for OpenJPA this leads to possible deserialisation of untrusted data. Users are recommended to upgrade to version 8.0.0 and update their startup scripts to include the relevant 'openjpa.serialization.class.blacklist' and 'openjpa.serialization.class.whitelist' configurations as shown in the documentation.
CVE-2024-54003 High 2024-11-27 No exploit published Forecast only Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape the view name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Create permission.
CVE-2024-27136 Medium 2024-06-24 No exploit published Forecast only XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.