WaratekVRT Sign in
Reset
More filters (1)
Columns
Published to 2012-08-31✕
Overview 113 matches · 16 protected · 0 exploited · 0 CISA KEV · 27 EPSS ≥ 0.5
113matches 16protected14.2% 0exploited0.0% 0CISA KEV0.0% 27EPSS ≥ 0.523.9%
Protected by Waratek 16 14.2% Rule in development 0 0.0% Mitigation candidate 97 85.8% No exploit published 0 0.0%
Critical 0 0.0% High 19 16.8% Medium 83 73.5% Low 11 9.7% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 16 14.2% partly blocked 0 0.0% not blocked 97 85.8% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 113 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 16 / year
Mitigation candidate: 97Protected by Waratek: 16 Low: 11Medium: 83High: 19 not blocked: 97blocked by ARMR today: 16 Working exploit published: 113
20006 Mitigation candidate6 High2 Medium4 not blocked6 Working exploit published6 20012 Mitigation candidate2 Medium2 not blocked2 Working exploit published2 20028 Mitigation candidate8 High2 Medium6 not blocked8 Working exploit published8 20038 Protected by Waratek1 Mitigation candidate7 High2 Medium5 Low1 blocked by ARMR today1 not blocked7 Working exploit published8 20041 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 20055 Protected by Waratek1 Mitigation candidate4 Medium5 blocked by ARMR today1 not blocked4 Working exploit published5 20065 Protected by Waratek1 Mitigation candidate4 Medium5 blocked by ARMR today1 not blocked4 Working exploit published5 200711 Protected by Waratek1 Mitigation candidate10 High1 Medium9 Low1 blocked by ARMR today1 not blocked10 Working exploit published11 200812 Protected by Waratek3 Mitigation candidate9 High1 Medium11 blocked by ARMR today3 not blocked9 Working exploit published12 200916 Protected by Waratek4 Mitigation candidate12 High4 Medium11 Low1 blocked by ARMR today4 not blocked12 Working exploit published16 201014 Protected by Waratek3 Mitigation candidate11 High1 Medium11 Low2 blocked by ARMR today3 not blocked11 Working exploit published14 201111 Protected by Waratek2 Mitigation candidate9 High5 Medium4 Low2 blocked by ARMR today2 not blocked9 Working exploit published11 201214 Mitigation candidate14 High1 Medium9 Low4 not blocked14 Working exploit published14
2000200220042006200820102012
113 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2002-2006 Medium 2002-12-31 Mitigation candidate Working exploit published The default installation of Apache Tomcat 4.0 through 4.1 and 3.0 through 3.3.1 allows remote attackers to obtain the installation path and other sensitive system information via the (1) SnoopServlet or (2) TroubleShooter example servlets.
CVE-2002-1148 Medium 2002-10-11 Mitigation candidate Working exploit published The default servlet (org.apache.catalina.servlets.DefaultServlet) in Tomcat 4.0.4 and 4.1.10 and earlier allows remote attackers to read source code for server files via a direct request to the servlet.
CVE-2002-0936 Medium 2002-10-04 Mitigation candidate Working exploit published The Java Server Pages (JSP) engine in Tomcat allows web page owners to cause a denial of service (engine crash) on the web server via a JSP page that calls WPrinterJob().pageSetup(null,null).
CVE-2002-0682 High 2002-07-23 Mitigation candidate Working exploit published Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet.
CVE-2002-0106 Medium 2002-03-25 Mitigation candidate Working exploit published BEA Systems Weblogic Server 6.1 allows remote attackers to cause a denial of service via a series of requests to .JSP files that contain an MS-DOS device name.
CVE-2001-0590 Medium 2001-08-02 Mitigation candidate Working exploit published Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).
CVE-2001-0390 Medium 2001-07-02 Mitigation candidate Working exploit published IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.
CVE-2000-0760 Medium 2000-10-20 Mitigation candidate Working exploit published The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
CVE-2000-0759 Medium 2000-10-20 Mitigation candidate Working exploit published Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
CVE-2000-0685 High 2000-10-20 Mitigation candidate Working exploit published BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.
CVE-2000-0684 High 2000-10-20 Mitigation candidate Working exploit published BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
CVE-2000-0652 Medium 2000-07-24 Mitigation candidate Working exploit published IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.
CVE-2000-0500 Medium 2000-06-21 Mitigation candidate Working exploit published The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing.
‹ prev page 2 of 2 next ›