WaratekVRT Sign in
Reset
More filters (1)
Columns
Published to 2008-11-30✕
Overview 7 matches · 0 exploited · 0 CISA KEV · 2 EPSS ≥ 0.5
7matches 0exploited0.0% 0CISA KEV0.0% 2EPSS ≥ 0.528.6%
Protected by Waratek 7 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 6 85.7% Low 1 14.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 7 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 7 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / quarter
Protected by Waratek: 7 Low: 1Medium: 6 blocked by ARMR today: 7 Working exploit published: 7
Q1 031 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 Q2 030 Q3 030 Q4 030 Q1 040 Q2 040 Q3 040 Q4 040 Q1 050 Q2 050 Q3 050 Q4 051 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 Q1 060 Q2 061 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 Q3 060 Q4 060 Q1 070 Q2 070 Q3 070 Q4 071 Protected by Waratek1 Low1 blocked by ARMR today1 Working exploit published1 Q1 081 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 Q2 080 Q3 082 Protected by Waratek2 Medium2 blocked by ARMR today2 Working exploit published2
Q1 03Q3 03Q1 04Q3 04Q1 05Q3 05Q1 06Q3 06Q1 07Q3 07Q1 08Q3 08
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2008-2938 Medium 2008-08-13 Protected by Waratek Working exploit published Directory traversal vulnerability in Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when allowLinking and UTF-8 are enabled, allows remote attackers to read arbitrary files via encoded directory traversal sequences in the URI, a different vulnerability than CVE-2008-2370. NOTE: versions earlier than 6.0.18 were reported affected, but the vendor advisory lists 6.0.16 as the last affected version.
CVE-2008-2370 Medium 2008-08-04 Protected by Waratek Working exploit published Apache Tomcat 4.1.0 through 4.1.37, 5.5.0 through 5.5.26, and 6.0.0 through 6.0.16, when a RequestDispatcher is used, performs path normalization before removing the query string from the URI, which allows remote attackers to conduct directory traversal attacks and read arbitrary files via a .. (dot dot) in a request parameter.
CVE-2008-1301 Medium 2008-03-12 Protected by Waratek Working exploit published Absolute path traversal vulnerability in system/workplace/admin/workplace/logfileview/logfileViewSettings.jsp in Alkacon OpenCms 7.0.3 and 7.0.4 allows remote authenticated administrators to read arbitrary files via a full pathname in the filePath.0 parameter.
CVE-2007-5461 Low 2007-10-15 Protected by Waratek Working exploit published Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
CVE-2006-2758 Medium 2006-06-02 Protected by Waratek Working exploit published Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.
CVE-2005-3745 Medium 2005-11-22 Protected by Waratek Working exploit published Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.
CVE-2003-0042 Medium 2003-02-07 Protected by Waratek Working exploit published Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.