WaratekVRT Sign in
Reset
More filters (2)
Columns
Published from 2019-05-01✕Product java✕
Overview 204 matches · 29 protected · 0 exploited · 0 CISA KEV · 4 public PoC · 1 EPSS ≥ 0.5
204matches 29protected14.2% 0exploited0.0% 0CISA KEV0.0% 4public PoC2.0% 1EPSS ≥ 0.50.5%
Protected by Waratek 29 14.2% Rule in development 0 0.0% Mitigation candidate 2 1.0% No exploit published 173 84.8%
Critical 32 15.7% High 106 52.0% Medium 57 27.9% Low 9 4.4% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 29 14.2% partly blocked 0 0.0% not blocked 175 85.8% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 34 16.7% Forecast only 0 0.0% No public exploit 170 83.3%
split by peak 96 / year
No exploit published: 173Mitigation candidate: 2Protected by Waratek: 29 Low: 9Medium: 57High: 106Critical: 32 not blocked: 175blocked by ARMR today: 29 No public exploit: 170Proof of concept only: 34
20199 Protected by Waratek4 No exploit published5 High3 Medium5 Low1 blocked by ARMR today4 not blocked5 No public exploit9 202010 No exploit published10 Critical3 High5 Medium2 not blocked10 No public exploit10 202117 Protected by Waratek4 Mitigation candidate2 No exploit published11 Critical4 High5 Medium7 Low1 blocked by ARMR today4 not blocked13 Proof of concept only2 No public exploit15 202224 Protected by Waratek4 No exploit published20 Critical1 High16 Medium6 Low1 blocked by ARMR today4 not blocked20 Proof of concept only7 No public exploit17 202320 Protected by Waratek2 No exploit published18 Critical5 High11 Medium4 blocked by ARMR today2 not blocked18 Proof of concept only7 No public exploit13 202419 Protected by Waratek6 No exploit published13 Critical1 High11 Medium5 Low2 blocked by ARMR today6 not blocked13 Proof of concept only6 No public exploit13 20259 Protected by Waratek3 No exploit published6 Critical2 High5 Medium2 blocked by ARMR today3 not blocked6 Proof of concept only2 No public exploit7 202696 Protected by Waratek6 No exploit published90 Critical16 High50 Medium26 Low4 blocked by ARMR today6 not blocked90 Proof of concept only10 No public exploit86
20192020202120222023202420252026
204 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2019-4473 High 2019-08-05 No exploit published No public exploit Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.
CVE-2019-3802 Medium 2019-06-03 No exploit published No public exploit This affects Spring Data JPA in versions up to and including 2.1.6, 2.0.14 and 1.11.20. ExampleMatcher using ExampleMatcher.StringMatcher.STARTING, ExampleMatcher.StringMatcher.ENDING or ExampleMatcher.StringMatcher.CONTAINING could return more results than anticipated when a maliciously crafted example value is supplied.
CVE-2019-11808 Low 2019-05-07 No exploit published No public exploit Ratpack versions before 1.6.1 generate a session ID using a cryptographically weak PRNG in the JDK's ThreadLocalRandom. This means that if an attacker can determine a small window for the server start time and obtain a session ID value, they can theoretically determine the sequence of session IDs.
CVE-2019-3797 Medium 2019-05-06 Protected by Waratek No public exploit This affects Spring Data JPA in versions up to and including 2.1.5, 2.0.13 and 1.11.19. Derived queries using any of the predicates ‘startingWith’, ‘endingWith’ or ‘containing’ could return more results than anticipated when a maliciously crafted query parameter value is supplied. Also, LIKE expressions in manually defined queries could return unexpected results if the parameter values bound did not have escaped reserved characters properly.
‹ prev page 3 of 3 next ›