Overview 115 matches · 9 protected · 1 exploited · 0 CISA KEV · 5 public PoC · 2 EPSS ≥ 0.5
Protected by Waratek
9
7.8%
Rule in development
0
0.0%
Mitigation candidate
4
3.5%
No exploit published
102
88.7%
blocked by ARMR today
9
7.8%
partly blocked
0
0.0%
not blocked
106
92.2%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
0.9%
Working exploit published
4
3.5%
Proof of concept only
0
0.0%
Forecast only
1
0.9%
No public exploit
109
94.8%
split by
peak 24 / year
19961
No exploit published1
High1
not blocked1
No public exploit1
19970
19980
19991
No exploit published1
High1
not blocked1
No public exploit1
20000
20011
No exploit published1
High1
not blocked1
No public exploit1
20020
20032
Mitigation candidate1
No exploit published1
High1
Low1
not blocked2
Working exploit published1
No public exploit1
20041
No exploit published1
Medium1
not blocked1
No public exploit1
20058
No exploit published8
High2
Medium5
Low1
not blocked8
No public exploit8
20064
No exploit published4
Medium3
Low1
not blocked4
No public exploit4
20077
No exploit published7
High3
Medium3
Low1
not blocked7
No public exploit7
20084
Mitigation candidate2
No exploit published2
High1
Medium3
not blocked4
Working exploit published2
No public exploit2
200916
Protected by Waratek1
No exploit published15
High9
Medium7
blocked by ARMR today1
not blocked15
No public exploit16
20103
Protected by Waratek1
No exploit published2
High2
Low1
blocked by ARMR today1
not blocked2
No public exploit3
20116
Mitigation candidate1
No exploit published5
High2
Medium2
Low2
not blocked6
Working exploit published1
No public exploit5
20126
No exploit published6
High3
Medium2
Low1
not blocked6
No public exploit6
201324
Protected by Waratek3
No exploit published21
High16
Medium7
Low1
blocked by ARMR today3
not blocked21
Exploited1
Forecast only1
No public exploit22
20149
Protected by Waratek3
No exploit published6
High2
Medium6
Low1
blocked by ARMR today3
not blocked6
No public exploit9
20158
No exploit published8
Critical1
High3
Medium3
Low1
not blocked8
No public exploit8
20165
Protected by Waratek1
No exploit published4
Critical1
High4
blocked by ARMR today1
not blocked4
No public exploit5
20179
No exploit published9
High3
Medium6
not blocked9
No public exploit9
19971999200120032005200720092011201320152017
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2006-2501 | Medium | 2006-05-20 | No exploit published | No public exploit | Cross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System Web Server 6.1 SP4 and earlier, Sun ONE Application Server 7 Platform and Standard Edition Update 6 and earlier, and Java System Application Server 7 2004Q2 Standard and Enterprise Edition Update 2 and earlier, allows remote attackers to inject arbitrary web script or HTML via unknown attack vectors, possibly involving error messages. |
| CVE-2005-4805 | Medium | 2005-12-31 | No exploit published | No public exploit | Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors. |
| CVE-2005-4804 | Medium | 2005-12-31 | No exploit published | No public exploit | Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to deployed web applications. |
| CVE-2005-2738 | Medium | 2005-12-31 | No exploit published | No public exploit | Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program. |
| CVE-2005-2530 | High | 2005-12-31 | No exploit published | No public exploit | Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions." |
| CVE-2005-2529 | High | 2005-12-31 | No exploit published | No public exploit | Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives." |
| CVE-2005-2527 | Low | 2005-12-31 | No exploit published | No public exploit | Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack. |
| CVE-2005-4046 | Medium | 2005-12-07 | No exploit published | No public exploit | Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct man-in-the-middle (MITM) attacks and "compromise data privacy." |
| CVE-2005-0742 | Medium | 2005-05-02 | No exploit published | No public exploit | Cross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. |
| CVE-2004-2216 | Medium | 2004-12-31 | No exploit published | No public exploit | Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service (crash) via a malformed client certificate. |
| CVE-2003-1229 | High | 2003-12-31 | No exploit published | No public exploit | X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files. |
| CVE-2003-1134 | Low | 2003-12-31 | Mitigation candidate | Working exploit published | Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception. |
| CVE-2001-1480 | High | 2001-12-31 | No exploit published | No public exploit | Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard. |
| CVE-1999-0440 | High | 1999-03-01 | No exploit published | No public exploit | The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages. |
| CVE-1999-0142 | High | 1996-03-01 | No exploit published | No public exploit | The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts. |