WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor robocode✕
Overview 6 matches · 4 in Waratek scope · 1 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
6matches 4in Waratek scope66.7% 1protected16.7% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 16.7% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 50.0% Outside Waratek scope 0 0.0% Not applicable 2 33.3% Withdrawn CVE 0 0.0%
Critical 4 66.7% High 1 16.7% Medium 1 16.7% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 16.7% partly blocked 0 0.0% not blocked 5 83.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 6 100.0%
split by peak 3 / year
Not applicable: 2No exploit published: 3Protected by Waratek: 1 Medium: 1High: 1Critical: 4 not blocked: 5blocked by ARMR today: 1 No public exploit: 6
20071 No exploit published1 Medium1 not blocked1 No public exploit1 20081 Not applicable1 High1 not blocked1 No public exploit1 20090 20100 20110 20120 20130 20140 20150 20160 20170 20180 20191 No exploit published1 Critical1 not blocked1 No public exploit1 20200 20210 20220 20230 20240 20253 Protected by Waratek1 No exploit published1 Not applicable1 Critical3 blocked by ARMR today1 not blocked2 No public exploit3
2007200920112013201520172019202120232025
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2025-14308 Critical 2025-12-09 Not applicable No public exploit An integer overflow vulnerability exists in the write method of the Buffer class in Robocode version 1.9.3.6. The method fails to properly validate the length of data being written, allowing attackers to cause an overflow, potentially leading to buffer overflows and arbitrary code execution. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the data length, leading to potential unauthorized code execution.
CVE-2025-14307 Critical 2025-12-09 No exploit published No public exploit An insecure temporary file creation vulnerability exists in the AutoExtract component of Robocode version 1.9.3.6. The createTempFile method fails to securely create temporary files, allowing attackers to exploit race conditions and potentially execute arbitrary code or overwrite critical files. This vulnerability can be exploited by manipulating the temporary file creation process, leading to potential unauthorized actions.
CVE-2025-14306 Critical 2025-12-09 Protected by Waratek No public exploit A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize file paths, allowing attackers to traverse directories and delete arbitrary files on the system. This vulnerability can be exploited by submitting specially crafted inputs that manipulate the file path, leading to potential unauthorized file deletions. https://robo-code.blogspot.com/
CVE-2019-10648 Critical 2019-03-30 No exploit published No public exploit Robocode through 1.9.3.5 allows remote attackers to cause external service interaction (DNS), as demonstrated by a query for a unique subdomain name within an attacker-controlled DNS zone, because of a .openStream call within java.net.URL.
CVE-2008-2078 High 2008-05-05 Not applicable No public exploit Robocode before 1.6.0 allows user-assisted remote attackers to "access the internals of the Robocode game" via unspecified vectors related to the AWT Event Queue.
CVE-2007-6382 Medium 2007-12-15 No exploit published No public exploit The Event Dispatch Thread in Robocode before 1.5.1 allows remote attackers to execute arbitrary Java code by using a robot to invoke the SwingUtilities.invokeLater method.