WaratekVRT Sign in
Reset
More filters (2)
Columns
Published to 2005-09-30✕Product java✕
Overview 7 matches · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
7matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 1public PoC14.3% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 14.3% No exploit published 6 85.7%
Critical 0 0.0% High 4 57.1% Medium 2 28.6% Low 1 14.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 7 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 14.3% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 6 85.7%
split by peak 2 / year
No exploit published: 6Mitigation candidate: 1 Low: 1Medium: 2High: 4 not blocked: 7 No public exploit: 6Working exploit published: 1
19961 No exploit published1 High1 not blocked1 No public exploit1 19970 19980 19991 No exploit published1 High1 not blocked1 No public exploit1 20000 20011 No exploit published1 High1 not blocked1 No public exploit1 20020 20032 Mitigation candidate1 No exploit published1 High1 Low1 not blocked2 Working exploit published1 No public exploit1 20041 No exploit published1 Medium1 not blocked1 No public exploit1 20051 No exploit published1 Medium1 not blocked1 No public exploit1
1996199719981999200020012002200320042005
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2005-0742 Medium 2005-05-02 No exploit published No public exploit Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2004-2216 Medium 2004-12-31 No exploit published No public exploit Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service (crash) via a malformed client certificate.
CVE-2003-1229 High 2003-12-31 No exploit published No public exploit X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files.
CVE-2003-1134 Low 2003-12-31 Mitigation candidate Working exploit published Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception.
CVE-2001-1480 High 2001-12-31 No exploit published No public exploit Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.
CVE-1999-0440 High 1999-03-01 No exploit published No public exploit The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
CVE-1999-0142 High 1996-03-01 No exploit published No public exploit The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.