WaratekVRT Sign in
Reset
More filters (1)
Columns
Product api✕
Overview 205 matches · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 1 EPSS ≥ 0.5
205matches 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 1EPSS ≥ 0.50.5%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 205 100.0%
Critical 29 14.1% High 57 27.8% Medium 113 55.1% Low 6 2.9% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 205 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 13 6.3% Forecast only 1 0.5% No public exploit 191 93.2%
split by peak 46 / year
No exploit published: 205 Low: 6Medium: 113High: 57Critical: 29 not blocked: 205 No public exploit: 191Forecast only: 1Proof of concept only: 13
20081 No exploit published1 Medium1 not blocked1 No public exploit1 20090 20100 20110 20121 No exploit published1 High1 not blocked1 No public exploit1 20133 No exploit published3 Medium3 not blocked3 No public exploit3 20141 No exploit published1 Medium1 not blocked1 No public exploit1 20151 No exploit published1 Medium1 not blocked1 No public exploit1 20167 No exploit published7 Medium7 not blocked7 No public exploit7 20175 No exploit published5 High2 Medium3 not blocked5 No public exploit5 201815 No exploit published15 Critical1 High3 Medium11 not blocked15 No public exploit15 201919 No exploit published19 Critical5 High7 Medium7 not blocked19 No public exploit19 202018 No exploit published18 Critical3 High2 Medium12 Low1 not blocked18 No public exploit18 202118 No exploit published18 Critical1 High7 Medium8 Low2 not blocked18 No public exploit18 20228 No exploit published8 Critical1 High1 Medium6 not blocked8 Proof of concept only2 No public exploit6 202321 No exploit published21 Critical4 High5 Medium12 not blocked21 Proof of concept only5 No public exploit16 20244 No exploit published4 Critical3 High1 not blocked4 Forecast only1 No public exploit3 202537 No exploit published37 Critical3 High11 Medium21 Low2 not blocked37 Proof of concept only3 No public exploit34 202646 No exploit published46 Critical8 High17 Medium20 Low1 not blocked46 Proof of concept only3 No public exploit43
2008201020122014201620182020202220242026
205 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2013-2254 Medium 2013-10-17 No exploit published No public exploit The deepGetOrCreateNode function in impl/operations/AbstractCreateOperation.java in org.apache.sling.servlets.post.bundle 2.2.0 and 2.3.0 in Apache Sling does not properly handle a NULL value that returned when the session does not have permissions to the root node, which allows remote attackers to cause a denial of service (infinite loop) via unspecified vectors.
CVE-2013-5960 Medium 2013-09-30 No exploit published No public exploit The authenticated-encryption feature in the symmetric-encryption implementation in the OWASP Enterprise Security API (ESAPI) for Java 2.x before 2.1.0.1 does not properly resist tampering with serialized ciphertext, which makes it easier for remote attackers to bypass intended cryptographic protection mechanisms via an attack against the intended cipher mode in a non-default configuration, a different vulnerability than CVE-2013-5679.
CVE-2013-1624 Medium 2013-02-08 No exploit published No public exploit The TLS implementation in the Bouncy Castle Java library before 1.48 and C# library before 1.8 does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
CVE-2012-5817 High 2012-11-04 No exploit published No public exploit Codehaus XFire 1.2.6 and earlier, as used in the Amazon EC2 API Tools Java library and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
CVE-2008-1285 Medium 2008-03-11 No exploit published No public exploit Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
‹ prev page 3 of 3 next ›