Overview 205 matches · 29 protected · 0 exploited · 0 CISA KEV · 4 public PoC · 1 EPSS ≥ 0.5
Protected by Waratek
29
14.1%
Rule in development
0
0.0%
Mitigation candidate
2
1.0%
No exploit published
174
84.9%
blocked by ARMR today
29
14.1%
partly blocked
0
0.0%
not blocked
176
85.9%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
34
16.6%
Forecast only
0
0.0%
No public exploit
171
83.4%
split by
peak 96 / year
201910
Protected by Waratek4
No exploit published6
High3
Medium6
Low1
blocked by ARMR today4
not blocked6
No public exploit10
202010
No exploit published10
Critical3
High5
Medium2
not blocked10
No public exploit10
202117
Protected by Waratek4
Mitigation candidate2
No exploit published11
Critical4
High5
Medium7
Low1
blocked by ARMR today4
not blocked13
Proof of concept only2
No public exploit15
202224
Protected by Waratek4
No exploit published20
Critical1
High16
Medium6
Low1
blocked by ARMR today4
not blocked20
Proof of concept only7
No public exploit17
202320
Protected by Waratek2
No exploit published18
Critical5
High11
Medium4
blocked by ARMR today2
not blocked18
Proof of concept only7
No public exploit13
202419
Protected by Waratek6
No exploit published13
Critical1
High11
Medium5
Low2
blocked by ARMR today6
not blocked13
Proof of concept only6
No public exploit13
20259
Protected by Waratek3
No exploit published6
Critical2
High5
Medium2
blocked by ARMR today3
not blocked6
Proof of concept only2
No public exploit7
202696
Protected by Waratek6
No exploit published90
Critical16
High50
Medium26
Low4
blocked by ARMR today6
not blocked90
Proof of concept only10
No public exploit86
20192020202120222023202420252026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2019-4473 | High | 2019-08-05 | No exploit published | No public exploit | Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984. |
| CVE-2019-3802 | Medium | 2019-06-03 | No exploit published | No public exploit | This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied. |
| CVE-2019-11808 | Low | 2019-05-07 | No exploit published | No public exploit | Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom. This means that if an attacker can determine a small window for the server start time and obtain a session ID value, they can theoretically determine the sequence of session IDs. |
| CVE-2019-3797 | Medium | 2019-05-06 | Protected by Waratek | No public exploit | This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE expressions in manually defined queries could return unexpected results if the parameter values bound did not have escaped reserved characters properly. |
| CVE-2014-3603 | Medium | 2019-04-04 | No exploit published | No public exploit | The (1) HttpResource and (2) FileBackedHttpResource implementations in Shibboleth Identity Provider (IdP) before 2.4.1 and OpenSAML Java 2.6.2 do not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate. |