Sdk CVEs
109 CVEs, 2 exploited, 16 protected by Waratek
Overview 109 matches · 16 protected · 2 exploited · 0 CISA KEV · 6 public PoC · 3 EPSS ≥ 0.5
Protected by Waratek
16
14.7%
Rule in development
0
0.0%
Mitigation candidate
5
4.6%
No exploit published
88
80.7%
blocked by ARMR today
16
14.7%
partly blocked
0
0.0%
not blocked
93
85.3%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 16 / year
20011
No exploit published1
High1
not blocked1
No public exploit1
20020
20030
20041
No exploit published1
Medium1
not blocked1
No public exploit1
20053
Protected by Waratek2
No exploit published1
High1
Medium2
blocked by ARMR today2
not blocked1
No public exploit3
20065
Mitigation candidate1
No exploit published4
Medium5
not blocked5
Working exploit published1
No public exploit4
200710
Protected by Waratek1
Mitigation candidate1
No exploit published8
High5
Medium4
Low1
blocked by ARMR today1
not blocked9
Working exploit published1
No public exploit9
200816
Protected by Waratek2
No exploit published14
High12
Medium4
blocked by ARMR today2
not blocked14
Exploited1
No public exploit15
200915
Protected by Waratek1
Mitigation candidate2
No exploit published12
High10
Medium5
blocked by ARMR today1
not blocked14
Exploited1
Working exploit published1
No public exploit13
201013
No exploit published13
High12
Medium1
not blocked13
No public exploit13
20114
Mitigation candidate1
No exploit published3
High3
Medium1
not blocked4
Working exploit published1
No public exploit3
20120
20131
Protected by Waratek1
High1
blocked by ARMR today1
No public exploit1
20141
No exploit published1
Medium1
not blocked1
No public exploit1
20153
No exploit published3
High2
Low1
not blocked3
No public exploit3
20163
Protected by Waratek1
No exploit published2
Critical1
High2
blocked by ARMR today1
not blocked2
No public exploit3
20171
Protected by Waratek1
High1
blocked by ARMR today1
No public exploit1
20185
Protected by Waratek2
No exploit published3
Critical1
High4
blocked by ARMR today2
not blocked3
No public exploit5
20191
No exploit published1
High1
not blocked1
No public exploit1
20204
No exploit published4
Critical1
High3
not blocked4
No public exploit4
20210
20223
Protected by Waratek1
No exploit published2
Critical1
High2
blocked by ARMR today1
not blocked2
Proof of concept only1
No public exploit2
20232
Protected by Waratek1
No exploit published1
Critical1
Medium1
blocked by ARMR today1
not blocked1
No public exploit2
20243
No exploit published3
Medium3
not blocked3
No public exploit3
20252
No exploit published2
High1
Medium1
not blocked2
No public exploit2
202612
Protected by Waratek3
No exploit published9
Critical3
High5
Medium4
blocked by ARMR today3
not blocked9
Proof of concept only7
No public exploit5
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2006-6736 | Medium | 2006-12-26 | No exploit published | No public exploit | Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and earlier 1.4.x versions, and SDK and JRE 1.3.1_18 and earlier allows attackers to use untrusted applets to "access data in other applets," aka "The second issue." |
| CVE-2006-2426 | Medium | 2006-05-17 | Mitigation candidate | Working exploit published | Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk consumption) by using the Font.createFont function to create temporary files of arbitrary size in the %temp% directory. |
| CVE-2006-0615 | Medium | 2006-02-09 | No exploit published | No public exploit | Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_09 allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "second and third issues." |
| CVE-2006-0614 | Medium | 2006-02-09 | No exploit published | No public exploit | Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.1_16 and 1.4.x through 1.4.2_08 allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors involving the reflection APIs, aka the "first issue." |
| CVE-2005-3583 | High | 2005-11-16 | No exploit published | No public exploit | (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss. |
| CVE-2005-1080 | Medium | 2005-05-02 | Protected by Waratek | No public exploit | Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file. |
| CVE-2005-0223 | Medium | 2005-05-02 | Protected by Waratek | No public exploit | The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization. |
| CVE-2004-0651 | Medium | 2004-08-06 | No exploit published | No public exploit | Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang). |
| CVE-2001-1480 | High | 2001-12-31 | No exploit published | No public exploit | Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard. |