WaratekVRT Sign in
Reset
More filters (2)
Columns
Published from 2014-03-01✕Published to 2014-03-31✕
Overview 7 matches · 3 protected · 1 exploited · 0 CISA KEV · 1 public PoC · 1 EPSS ≥ 0.5
7matches 3protected42.9% 1exploited14.3% 0CISA KEV0.0% 1public PoC14.3% 1EPSS ≥ 0.514.3%
Protected by Waratek 3 42.9% Rule in development 0 0.0% Mitigation candidate 1 14.3% No exploit published 3 42.9%
Critical 0 0.0% High 2 28.6% Medium 4 57.1% Low 1 14.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 3 42.9% partly blocked 0 0.0% not blocked 4 57.1% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 14.3% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 6 85.7%
split by peak 7 / month
No exploit published: 3Mitigation candidate: 1Protected by Waratek: 3 Low: 1Medium: 4High: 2 not blocked: 4blocked by ARMR today: 3 No public exploit: 6Exploited: 1
Mar 147 Protected by Waratek3 Mitigation candidate1 No exploit published3 High2 Medium4 Low1 blocked by ARMR today3 not blocked4 Exploited1 No public exploit6
Mar 14
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2014-0086 Medium 2014-03-31 No exploit published No public exploit The doFilter function in webapp/PushHandlerFilter.java in JBoss RichFaces 4.3.4, 4.3.5, and 5.x allows remote attackers to cause a denial of service (memory consumption and out-of-memory error) via a large number of malformed atmosphere push requests.
CVE-2014-0003 High 2014-03-21 Protected by Waratek No public exploit The XSLT component in Apache Camel 2.11.x before 2.11.4, 2.12.x before 2.12.3, and possibly earlier versions allows remote attackers to execute arbitrary Java methods via a crafted message.
CVE-2014-0002 High 2014-03-21 Protected by Waratek No public exploit The XSLT component in Apache Camel before 2.11.4 and 2.12.x before 2.12.3 allows remote attackers to read arbitrary files and possibly have other unspecified impact via an XML document containing an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
CVE-2014-1904 Medium 2014-03-20 No exploit published No public exploit Cross-site scripting (XSS) vulnerability in web/servlet/tags/form/FormTag.java in Spring MVC in Spring Framework 3.0.0 before 3.2.8 and 4.0.0 before 4.0.2 allows remote attackers to inject arbitrary web script or HTML via the requested URI in a default action.
CVE-2014-0094 Medium 2014-03-11 Mitigation candidate Exploited The ParametersInterceptor in Apache Struts before 2.3.16.2 allows remote attackers to "manipulate" the ClassLoader via the class parameter, which is passed to the getClass method.
CVE-2014-2067 Low 2014-03-01 No exploit published No public exploit Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."
CVE-2014-2059 Medium 2014-03-01 Protected by Waratek No public exploit Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.