WaratekVRT Sign in
Reset
More filters (1)
Columns
Published to 2003-07-31✕
Overview 5 matches · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
5matches 0exploited0.0% 0CISA KEV0.0% 1public PoC20.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 5 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 0 0.0% High 2 40.0% Medium 3 60.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 5 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 20.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 4 80.0%
split by peak 2 / quarter
Protected by Waratek: 5 Medium: 3High: 2 blocked by ARMR today: 5 No public exploit: 4Working exploit published: 1
Q3 011 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 Q4 010 Q1 021 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q2 020 Q3 020 Q4 022 Protected by Waratek2 High1 Medium1 blocked by ARMR today2 No public exploit2 Q1 031 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1
Q3 01Q4 01Q1 02Q2 02Q3 02Q4 02Q1 03
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2003-0042 Medium 2003-02-07 Protected by Waratek Working exploit published Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.
CVE-2002-1987 Medium 2002-12-31 Protected by Waratek No public exploit Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a "\.." (backslash dot dot).
CVE-2002-1631 High 2002-12-31 Protected by Waratek No public exploit SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.
CVE-2000-1210 Medium 2002-03-22 Protected by Waratek No public exploit Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.
CVE-2001-0591 High 2001-08-22 Protected by Waratek No public exploit Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.