WaratekVRT Sign in
Reset
More filters (1)
Columns
Published from 2022-10-01✕
Overview 4 matches · 1 protected · 0 exploited · 0 CISA KEV · 0 public PoC
4matches 1protected25.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0%
Protected by Waratek 1 25.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 75.0%
Critical 0 0.0% High 0 0.0% Medium 4 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 25.0% partly blocked 0 0.0% not blocked 3 75.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 4 100.0% No public exploit 0 0.0%
split by peak 1 / month
No exploit published: 3Protected by Waratek: 1 Medium: 4 not blocked: 3blocked by ARMR today: 1 Forecast only: 4
Feb 231 No exploit published1 Medium1 not blocked1 Forecast only1 Mar 230 Apr 230 May 231 Protected by Waratek1 Medium1 blocked by ARMR today1 Forecast only1 Jun 230 Jul 230 Aug 230 Sep 230 Oct 230 Nov 230 Dec 230 Jan 240 Feb 240 Mar 241 No exploit published1 Medium1 not blocked1 Forecast only1 Apr 240 May 240 Jun 241 No exploit published1 Medium1 not blocked1 Forecast only1
Feb 23Apr 23Jun 23Aug 23Oct 23Dec 23Feb 24Apr 24Jun 24
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-27136 Medium 2024-06-24 No exploit published Forecast only XSS in Upload page in Apache JSPWiki 2.12.1 and priors allows the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.12.2 or later.
CVE-2024-28156 Medium 2024-03-06 No exploit published Forecast only Jenkins Build Monitor View Plugin 1.14-860.vd06ef2568b_3f and earlier does not escape Build Monitor View names, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure Build Monitor Views.
CVE-2023-32985 Medium 2023-05-16 Protected by Waratek Forecast only Jenkins Sidebar Link Plugin 2.2.1 and earlier does not restrict the path of files in a method implementing form validation, allowing attackers with Overall/Read permission to check for the existence of an attacker-specified file path on the Jenkins controller file system.
CVE-2023-25762 Medium 2023-02-15 No exploit published Forecast only Jenkins Pipeline: Build Step Plugin 2.18 and earlier does not escape job names in a JavaScript expression used in the Pipeline Snippet Generator, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control job names.