WaratekVRT Sign in
Reset
More filters (1)
Columns
Published to 2012-11-30✕
Overview 108 matches · 0 protected · 7 exploited · 2 CISA KEV · 102 public PoC · 22 EPSS ≥ 0.5
108matches 0protected0.0% 7exploited6.5% 2CISA KEV1.9% 102public PoC94.4% 22EPSS ≥ 0.520.4%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 108 100.0% No exploit published 0 0.0%
Critical 1 0.9% High 19 17.6% Medium 79 73.1% Low 9 8.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 106 98.1% not established 2 1.9% unrecorded 0 0.0%
Exploited 7 6.5% Working exploit published 101 93.5% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 23 / year
Mitigation candidate: 108 Low: 9Medium: 79High: 19Critical: 1 not established: 2not blocked: 106 Working exploit published: 101Exploited: 7
20006 Mitigation candidate6 High2 Medium4 not blocked6 Working exploit published6 20012 Mitigation candidate2 Medium2 not blocked2 Working exploit published2 20028 Mitigation candidate8 High2 Medium6 not blocked8 Working exploit published8 20037 Mitigation candidate7 High2 Medium4 Low1 not blocked7 Working exploit published7 20041 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 20054 Mitigation candidate4 Medium4 not blocked4 Working exploit published4 20064 Mitigation candidate4 Medium4 not blocked4 Working exploit published4 200710 Mitigation candidate10 High1 Medium9 not blocked10 Working exploit published10 20089 Mitigation candidate9 High1 Medium8 not blocked9 Working exploit published9 200913 Mitigation candidate13 High4 Medium9 not blocked13 Exploited1 Working exploit published12 201012 Mitigation candidate12 High1 Medium9 Low2 not blocked12 Exploited1 Working exploit published11 20119 Mitigation candidate9 High4 Medium3 Low2 not blocked9 Working exploit published9 201223 Mitigation candidate23 Critical1 High2 Medium16 Low4 not blocked21 not established2 Exploited5 Working exploit published18
2000200220042006200820102012
108 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2001-0590 Medium 2001-08-02 Mitigation candidate Working exploit published Apache Software Foundation Tomcat Servlet prior to 3.2.2 allows a remote attacker to read the source code to arbitrary 'jsp' files via a malformed URL request which does not end with an HTTP protocol specification (i.e. HTTP/1.0).
CVE-2001-0390 Medium 2001-07-02 Mitigation candidate Working exploit published IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long string of %0a characters.
CVE-2000-0760 Medium 2000-10-20 Mitigation candidate Working exploit published The Snoop servlet in Jakarta Tomcat 3.1 and 3.0 under Apache reveals sensitive system information when a remote attacker requests a nonexistent URL with a .snp extension.
CVE-2000-0759 Medium 2000-10-20 Mitigation candidate Working exploit published Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path.
CVE-2000-0685 High 2000-10-20 Mitigation candidate Working exploit published BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.
CVE-2000-0684 High 2000-10-20 Mitigation candidate Working exploit published BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
CVE-2000-0652 Medium 2000-07-24 Mitigation candidate Working exploit published IBM WebSphere allows remote attackers to read source code for executable web files by directly calling the default InvokerServlet using a URL which contains the "/servlet/file" string.
CVE-2000-0500 Medium 2000-06-21 Mitigation candidate Working exploit published The default configuration of BEA WebLogic 5.1.0 allows a remote attacker to view source code of programs by requesting a URL beginning with /file/, which causes the default servlet to display the file without further processing.
‹ prev page 2 of 2 next ›