WaratekVRT Sign in

Main CVEs

105 CVEs, 4 exploited, 8 protected by Waratek

Reset
More filters (1)
Columns
Product main✕
Overview 105 matches · 8 protected · 4 exploited · 2 CISA KEV · 3 public PoC · 8 EPSS ≥ 0.5
105matches 8protected7.6% 4exploited3.8% 2CISA KEV1.9% 3public PoC2.9% 8EPSS ≥ 0.57.6%
Protected by Waratek 8 7.6% Rule in development 1 1.0% Mitigation candidate 1 1.0% No exploit published 95 90.5%
Critical 8 7.6% High 36 34.3% Medium 61 58.1% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 8 7.6% partly blocked 0 0.0% not blocked 97 92.4% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 3.8% Working exploit published 0 0.0% Proof of concept only 4 3.8% Forecast only 5 4.8% No public exploit 92 87.6%
split by peak 39 / year
No exploit published: 95Mitigation candidate: 1Rule in development: 1Protected by Waratek: 8 Medium: 61High: 36Critical: 8 not blocked: 97blocked by ARMR today: 8 No public exploit: 92Forecast only: 5Proof of concept only: 4Exploited: 4
20091 No exploit published1 Medium1 not blocked1 No public exploit1 20100 20110 20121 No exploit published1 Medium1 not blocked1 No public exploit1 20130 20140 20150 20161 No exploit published1 High1 not blocked1 No public exploit1 20171 No exploit published1 High1 not blocked1 No public exploit1 20184 Protected by Waratek2 No exploit published2 High2 Medium2 blocked by ARMR today2 not blocked2 No public exploit4 201910 No exploit published10 High5 Medium5 not blocked10 No public exploit10 20202 No exploit published2 High2 not blocked2 No public exploit2 202113 Protected by Waratek1 No exploit published12 Critical5 High4 Medium4 blocked by ARMR today1 not blocked12 Exploited1 No public exploit12 202211 Protected by Waratek1 Rule in development1 No exploit published9 Critical1 High5 Medium5 blocked by ARMR today1 not blocked10 Exploited2 Proof of concept only1 Forecast only4 No public exploit4 20236 Protected by Waratek1 Mitigation candidate1 No exploit published4 Critical1 High3 Medium2 blocked by ARMR today1 not blocked5 Exploited1 Proof of concept only2 No public exploit3 202439 Protected by Waratek1 No exploit published38 High3 Medium36 blocked by ARMR today1 not blocked38 Proof of concept only1 Forecast only1 No public exploit37 20254 Protected by Waratek1 No exploit published3 Critical1 High1 Medium2 blocked by ARMR today1 not blocked3 No public exploit4 202612 Protected by Waratek1 No exploit published11 High9 Medium3 blocked by ARMR today1 not blocked11 No public exploit12
201020122014201620182020202220242026
105 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2017-15713 Medium 2018-01-19 No exploit published No public exploit Vulnerability in Apache Hadoop 0.23.x, 2.x before 2.7.5, 2.8.x before 2.8.3, and 3.0.0-alpha through 3.0.0-beta1 allows a cluster user to expose private files owned by the user running the MapReduce job history server process. The malicious user can construct a configuration file containing XML directives that reference sensitive files on the MapReduce job history server host.
CVE-2017-3166 High 2017-11-13 No exploit published No public exploit In Apache Hadoop versions 2.6.1 to 2.6.5, 2.7.0 to 2.7.3, and 3.0.0-alpha1, if a file in an encryption zone with access permissions that make it world readable is localized via YARN's localization mechanism, that file will be stored in a world-readable location and can be shared freely with any application that requests to localize that file.
CVE-2016-3456 High 2016-04-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul component in Oracle Supply Chain Products Suite 12.1.1, 12.1.2, and 12.1.3 allows remote attackers to affect confidentiality and integrity via vectors related to Dialog Box.
CVE-2012-1574 Medium 2012-04-12 No exploit published No public exploit The Kerberos/MapReduce security functionality in Apache Hadoop 0.20.203.0 through 0.20.205.0, 0.23.x before 0.23.2, and 1.0.x before 1.0.2, as used in Cloudera CDH CDH3u0 through CDH3u2, Cloudera hadoop-0.20-sbin before 0.20.2+923.197, and other products, allows remote authenticated users to impersonate arbitrary cluster user accounts via unspecified vectors.
CVE-2008-7227 Medium 2009-09-14 No exploit published No public exploit PartialBufferOutputStream2 in GeoServer before 1.6.1 and 1.7.0-beta1 attempts to flush buffer contents even when it is handling an "in memory buffer," which prevents the reporting of a service exception, with unknown impact and attack vectors.
‹ prev page 2 of 2 next ›