WaratekVRT Sign in
Reset
More filters (1)
Columns
Published to 2010-02-28✕
Overview 3 matches · 2 protected · 0 exploited · 0 CISA KEV · 0 EPSS ≥ 0.5
3matches 2protected66.7% 0exploited0.0% 0CISA KEV0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 2 66.7% Rule in development 0 0.0% Mitigation candidate 1 33.3% No exploit published 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 0 0.0% Low 3 100.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 66.7% partly blocked 0 0.0% not blocked 1 33.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / quarter
Mitigation candidate: 1Protected by Waratek: 2 Low: 3 not blocked: 1blocked by ARMR today: 2 Working exploit published: 3
Q4 031 Mitigation candidate1 Low1 not blocked1 Working exploit published1 Q1 040 Q2 040 Q3 040 Q4 040 Q1 050 Q2 050 Q3 050 Q4 050 Q1 060 Q2 060 Q3 060 Q4 060 Q1 070 Q2 070 Q3 070 Q4 071 Protected by Waratek1 Low1 blocked by ARMR today1 Working exploit published1 Q1 080 Q2 080 Q3 080 Q4 080 Q1 090 Q2 090 Q3 090 Q4 091 Protected by Waratek1 Low1 blocked by ARMR today1 Working exploit published1
Q4 03Q2 04Q4 04Q2 05Q4 05Q2 06Q4 06Q2 07Q4 07Q2 08Q4 08Q2 09Q4 09
3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2009-2898 Low 2009-10-13 Protected by Waratek Working exploit published Cross-site scripting (XSS) vulnerability in the Alerts list feature in the web interface in SpringSource Hyperic HQ 3.2.x before 3.2.6.1, 4.0.x before 4.0.3.1, 4.1.x before 4.1.2.1, and 4.2-beta1; Application Management Suite (AMS) 2.0.0.SR3; and tc Server 6.0.20.B allows remote authenticated users to inject arbitrary web script or HTML via the Description field. NOTE: some of these details are obtained from third party information.
CVE-2007-5461 Low 2007-10-15 Protected by Waratek Working exploit published Absolute path traversal vulnerability in Apache Tomcat 4.0.0 through 4.0.6, 4.1.0, 5.0.0, 5.5.0 through 5.5.25, and 6.0.0 through 6.0.14, under certain configurations, allows remote authenticated users to read arbitrary files via a WebDAV write request that specifies an entity with a SYSTEM tag.
CVE-2003-1134 Low 2003-12-31 Mitigation candidate Working exploit published Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception.