WaratekVRT Sign in
Reset
More filters
Columns
Overview 116 matches · 0 protected · 28 exploited · 2 CISA KEV · 105 public PoC · 38 EPSS ≥ 0.5
116matches 0protected0.0% 28exploited24.1% 2CISA KEV1.7% 105public PoC90.5% 38EPSS ≥ 0.532.8%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 116 100.0% No exploit published 0 0.0%
Critical 0 0.0% High 116 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 114 98.3% not established 2 1.7% unrecorded 0 0.0%
Exploited 28 24.1% Working exploit published 67 57.8% Proof of concept only 17 14.7% Forecast only 0 0.0% No public exploit 4 3.4%
split by peak 13 / year
Mitigation candidate: 116 High: 116 not established: 2not blocked: 114 No public exploit: 4Proof of concept only: 17Working exploit published: 67Exploited: 28
20002 Mitigation candidate2 High2 not blocked2 Working exploit published2 20010 20022 Mitigation candidate2 High2 not blocked2 Working exploit published2 20032 Mitigation candidate2 High2 not blocked2 Working exploit published2 20040 20050 20060 20071 Mitigation candidate1 High1 not blocked1 Working exploit published1 20081 Mitigation candidate1 High1 not blocked1 Working exploit published1 20094 Mitigation candidate4 High4 not blocked4 Exploited1 Working exploit published3 20101 Mitigation candidate1 High1 not blocked1 Working exploit published1 20114 Mitigation candidate4 High4 not blocked4 Working exploit published4 20122 Mitigation candidate2 High2 not blocked2 Exploited1 Working exploit published1 20134 Mitigation candidate4 High4 not blocked4 Exploited1 Working exploit published2 No public exploit1 20143 Mitigation candidate3 High3 not blocked3 Exploited1 Working exploit published2 20151 Mitigation candidate1 High1 not blocked1 Proof of concept only1 20167 Mitigation candidate7 High7 not blocked7 Working exploit published7 20174 Mitigation candidate4 High4 not blocked4 Exploited1 Working exploit published3 20187 Mitigation candidate7 High7 not blocked7 Exploited1 Working exploit published6 20198 Mitigation candidate8 High8 not blocked7 not established1 Exploited4 Working exploit published4 20208 Mitigation candidate8 High8 not blocked8 Working exploit published3 Proof of concept only5 20219 Mitigation candidate9 High9 not blocked9 Exploited3 Working exploit published4 Proof of concept only2 20228 Mitigation candidate8 High8 not blocked8 Exploited2 Working exploit published3 Proof of concept only3 202313 Mitigation candidate13 High13 not blocked12 not established1 Exploited4 Working exploit published8 Proof of concept only1 202412 Mitigation candidate12 High12 not blocked12 Exploited4 Working exploit published5 Proof of concept only3 20253 Mitigation candidate3 High3 not blocked3 Exploited3 202610 Mitigation candidate10 High10 not blocked10 Exploited2 Working exploit published3 Proof of concept only2 No public exploit3
200220052008201120142017202020232026
116 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2011-0807 High 2011-04-20 Mitigation candidate Working exploit published Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.
CVE-2010-4417 High 2011-01-19 Mitigation candidate Working exploit published Unspecified vulnerability in the Services for Beehive component in Oracle Fusion Middleware 2.0.1.0, 2.0.1.1, 2.0.1.2, 2.0.1.2.1, and 2.0.1.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that voice-servlet/prompt-qa/Index.jspf does not properly handle null (%00) bytes in the evaluation parameter that is used in a filename, which allows attackers to create a file with an executable extension and execute arbitrary JSP code.
CVE-2010-3595 High 2011-01-19 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Document Capture component in Oracle Fusion Middleware 10.1.3.4 and 10.1.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Import Server. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from the original researcher that remote attackers can read arbitrary files via a full pathname in the first argument to the ImportBodyText method in the EasyMail ActiveX control (emsmtp.dll).
CVE-2010-0838 High 2010-04-01 Mitigation candidate Working exploit published Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a stack-based buffer overflow using an untrusted size value in the readMabCurveData function in the CMM module in the JVM.
CVE-2009-3548 High 2009-11-12 Mitigation candidate Working exploit published The Windows installer for Apache Tomcat 6.0.0 through 6.0.20, 5.5.0 through 5.5.28, and possibly earlier versions uses a blank default password for the administrative user, which allows remote attackers to gain privileges.
CVE-2009-3869 High 2009-11-05 Mitigation candidate Working exploit published Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a crafted argument, aka Bug Id 6872357.
CVE-2009-3867 High 2009-11-05 Mitigation candidate Exploited Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.
CVE-2008-5457 High 2009-01-14 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle BEA WebLogic Server Plugins for Apache, Sun and IIS web servers component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2008-1193 High 2008-03-06 Mitigation candidate Working exploit published Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to gain privileges via an untrusted application.
CVE-2007-4381 High 2007-08-17 Mitigation candidate Working exploit published Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform unauthorized actions via an applet that grants certain privileges to itself.
CVE-2003-1123 High 2003-12-31 Mitigation candidate Working exploit published Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.
CVE-2003-0896 High 2003-11-17 Mitigation candidate Working exploit published The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.
CVE-2002-2272 High 2002-12-31 Mitigation candidate Working exploit published Tomcat 4.0 through 4.1.12, using mod_jk 1.2.1 module on Apache 1.3 through 1.3.27, allows remote attackers to cause a denial of service (desynchronized communications) via an HTTP GET request with a Transfer-Encoding chunked field with invalid values.
CVE-2002-0682 High 2002-07-23 Mitigation candidate Working exploit published Cross-site scripting vulnerability in Apache Tomcat 4.0.3 allows remote attackers to execute script as other web users via script in a URL with the /servlet/ mapping, which does not filter the script when an exception is thrown by the servlet.
CVE-2000-0685 High 2000-10-20 Mitigation candidate Working exploit published BEA WebLogic 5.1.x does not properly restrict access to the PageCompileServlet, which could allow remote attackers to compile and execute Java JHTML code by directly invoking the servlet on any source file.
CVE-2000-0684 High 2000-10-20 Mitigation candidate Working exploit published BEA WebLogic 5.1.x does not properly restrict access to the JSPServlet, which could allow remote attackers to compile and execute Java JSP code by directly invoking the servlet on any source file.
‹ prev page 2 of 2 next ›