Overview 102 matches · 0 protected · 36 exploited · 4 CISA KEV · 101 public PoC
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
102
100.0%
No exploit published
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
102
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
36
35.3%
Working exploit published
63
61.8%
Proof of concept only
3
2.9%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 12 / year
20001
Mitigation candidate1
Medium1
not blocked1
Working exploit published1
20010
20020
20030
20040
20050
20060
20074
Mitigation candidate4
Medium4
not blocked4
Working exploit published4
20082
Mitigation candidate2
Medium2
not blocked2
Working exploit published2
20095
Mitigation candidate5
High4
Medium1
not blocked5
Exploited1
Working exploit published4
20103
Mitigation candidate3
Medium2
Low1
not blocked3
Working exploit published3
20113
Mitigation candidate3
High3
not blocked3
Working exploit published3
20124
Mitigation candidate4
High1
Medium3
not blocked4
Working exploit published4
20137
Mitigation candidate7
High3
Medium4
not blocked7
Exploited1
Working exploit published6
20146
Mitigation candidate6
High2
Medium4
not blocked6
Exploited2
Working exploit published4
20150
20165
Mitigation candidate5
Critical1
High3
Medium1
not blocked5
Working exploit published5
20173
Mitigation candidate3
Critical2
High1
not blocked3
Exploited3
20184
Mitigation candidate4
High2
Medium2
not blocked4
Exploited3
Working exploit published1
20198
Mitigation candidate8
Critical1
High4
Medium3
not blocked8
Exploited3
Working exploit published5
202010
Mitigation candidate10
Critical2
High2
Medium6
not blocked10
Exploited3
Working exploit published7
20217
Mitigation candidate7
Critical2
High2
Medium3
not blocked7
Exploited4
Working exploit published2
Proof of concept only1
20225
Mitigation candidate5
Critical2
High3
not blocked5
Exploited2
Working exploit published2
Proof of concept only1
202312
Mitigation candidate12
Critical4
High6
Medium2
not blocked12
Exploited5
Working exploit published6
Proof of concept only1
20246
Mitigation candidate6
Critical4
High1
Medium1
not blocked6
Exploited3
Working exploit published3
20257
Mitigation candidate7
Critical4
High1
Medium2
not blocked7
Exploited6
Working exploit published1
200120042007201020132016201920222025
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2006-7196 | Medium | 2007-05-10 | Mitigation candidate | Working exploit published | Cross-site scripting (XSS) vulnerability in the calendar application example in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0 through 4.1.31, 5.0.0 through 5.0.30, and 5.5.0 through 5.5.15 allows remote attackers to inject arbitrary web script or HTML via the time parameter to cal2.jsp and possibly unspecified other vectors. NOTE: this may be related to CVE-2006-0254.1. |
| CVE-2000-0760 | Medium | 2000-10-20 | Mitigation candidate | Working exploit published | The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension. |