WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Product fuse✕Has a public PoC✕
Overview 23 matches · 8 in Waratek scope · 5 protected · 6 exploited · 4 CISA KEV · 8 EPSS ≥ 0.5
23matches 8in Waratek scope34.8% 5protected21.7% 6exploited26.1% 4CISA KEV17.4% 8EPSS ≥ 0.534.8%
Protected by Waratek 7 30.4% Rule in development 0 0.0% Mitigation candidate 1 4.3% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 15 65.2% Withdrawn CVE 0 0.0%
Critical 5 21.7% High 9 39.1% Medium 7 30.4% Low 2 8.7% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 5 21.7% partly blocked 2 8.7% not blocked 16 69.6% not established 0 0.0% unrecorded 0 0.0%
Exploited 6 26.1% Working exploit published 16 69.6% Proof of concept only 1 4.3% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 3 / year
Not applicable: 15Mitigation candidate: 1Protected by Waratek: 7 Low: 2Medium: 7High: 9Critical: 5 not blocked: 16partly blocked: 2blocked by ARMR today: 5 Proof of concept only: 1Working exploit published: 16Exploited: 6
19991 Not applicable1 High1 not blocked1 Working exploit published1 20000 20011 Not applicable1 Medium1 not blocked1 Working exploit published1 20022 Not applicable2 High1 Medium1 not blocked2 Working exploit published2 20030 20041 Not applicable1 Medium1 not blocked1 Working exploit published1 20052 Not applicable2 Medium1 Low1 not blocked2 Working exploit published2 20060 20072 Not applicable2 High1 Medium1 not blocked2 Working exploit published2 20081 Not applicable1 High1 not blocked1 Working exploit published1 20090 20100 20112 Not applicable2 High1 Medium1 not blocked2 Working exploit published2 20121 Not applicable1 Medium1 not blocked1 Working exploit published1 20130 20140 20152 Protected by Waratek1 Not applicable1 Critical1 Low1 blocked by ARMR today1 not blocked1 Exploited1 Working exploit published1 20161 Protected by Waratek1 Critical1 partly blocked1 Exploited1 20173 Protected by Waratek3 Critical2 High1 blocked by ARMR today2 partly blocked1 Exploited2 Working exploit published1 20182 Protected by Waratek1 Not applicable1 Critical1 High1 blocked by ARMR today1 not blocked1 Working exploit published1 Proof of concept only1 20190 20200 20211 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 20220 20231 Mitigation candidate1 High1 not blocked1 Exploited1
1999200120032005200720092011201320152017201920212023
23 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2023-44487 High 2023-10-10 Mitigation candidate Exploited The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-4104 High 2021-12-14 Protected by Waratek Exploited JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.
CVE-2018-10906 High 2018-07-24 Not applicable Working exploit published In fuse before versions 2.9.8 and 3.x before 3.2.5, fusermount is vulnerable to a restriction bypass when SELinux is active. This allows non-root users to mount a FUSE file system with the 'allow_other' mount option regardless of whether 'user_allow_other' is set in the fuse configuration. An attacker may use this flaw to mount a FUSE file system, accessible by other users, and trick them into accessing files on that file system, possibly causing Denial of Service or other unspecified effects.
CVE-2018-1270 Critical 2018-04-06 Protected by Waratek Proof of concept only Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.
CVE-2015-7501 Critical 2017-11-09 Protected by Waratek Exploited Red Hat JBoss A-MQ 6.x; BPM Suite (BPMS) 6.x; BRMS 6.x and 5.x; Data Grid (JDG) 6.x; Data Virtualization (JDV) 6.x and 5.x; Enterprise Application Platform 6.x, 5.x, and 4.3.x; Fuse 6.x; Fuse Service Works (FSW) 6.x; Operations Network (JBoss ON) 3.x; Portal 6.x; SOA Platform (SOA-P) 5.x; Web Server (JWS) 3.x; Red Hat OpenShift/xPAAS 3.x; and Red Hat Subscription Asset Manager 1.3 allow remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons Collections (ACC) library.
CVE-2017-12617 High 2017-10-04 Protected by Waratek Exploited When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.
CVE-2017-5645 Critical 2017-04-17 Protected by Waratek Working exploit published In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
CVE-2016-4437 Critical 2016-06-07 Protected by Waratek Exploited Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.
CVE-2015-3202 Low 2015-07-02 Not applicable Working exploit published fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking (1) mount or (2) umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNT_MTAB environment variable that is used by mount's debugging feature.
CVE-2015-1427 Critical 2015-02-17 Protected by Waratek Exploited The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.
CVE-2012-5295 Medium 2012-10-04 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in login.cfm in FuseTalk Forums 3.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the windowed parameter.
CVE-2010-5033 High 2011-11-02 Not applicable Working exploit published SQL injection vulnerability in ProductList.cfm in Fusebox 5.5.1 allows remote attackers to execute arbitrary SQL commands via the CatDisplay parameter.
CVE-2010-3879 Medium 2011-01-22 Not applicable Working exploit published FUSE, possibly 2.8.5 and earlier, allows local users to create mtab entries with arbitrary pathnames, and consequently unmount any filesystem, via a symlink attack on the parent directory of the mountpoint of a FUSE filesystem, a different vulnerability than CVE-2010-0789.
CVE-2008-2284 High 2008-05-18 Not applicable Working exploit published PHP remote file inclusion vulnerability in fusebox5.php in Fusebox 5.5.1 allows remote attackers to execute arbitrary PHP code via a URL in the FUSEBOX_APPLICATION_PATH parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2007-3339 Medium 2007-06-21 Not applicable Working exploit published Multiple cross-site scripting (XSS) vulnerabilities in forum/include/error/autherror.cfm in FuseTalk Basic, Standard, Enterprise, and ColdFusion allow remote attackers to inject arbitrary web script or HTML via the (1) FTVAR_LINKP and (2) FTVAR_URLP parameters to (a) forum/include/error/autherror.cfm, and the (3) FTVAR_SCRIPTRUN parameter to (b) forum/include/common/comfinish.cfm and (c) blog/include/common/comfinish.cfm.
CVE-2007-3301 High 2007-06-20 Not applicable Working exploit published SQL injection vulnerability in forum/include/error/autherror.cfm in FuseTalk allows remote attackers to execute arbitrary SQL commands via the errorcode parameter. NOTE: a patch may have been released privately between April and June 2007. NOTE: this issue may overlap CVE-2007-3273.
CVE-2005-2480 Medium 2005-08-05 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in ColdFusion Fusebox 4.1.0 allows remote attackers to inject arbitrary web script or HTML via the fuseaction parameter, which is not quoted in an error page, as demonstrated using index.cfm.
CVE-2005-1858 Low 2005-06-03 Not applicable Working exploit published FUSE 2.x before 2.3.0 does not properly clear previously used memory from unfilled pages when the filesystem returns a short byte count to a read request, which may allow local users to obtain sensitive information.
CVE-2004-1995 Medium 2004-12-31 Not applicable Working exploit published Cross-Site Request Forgery (CSRF) vulnerability in FuseTalk 2.0 allows remote attackers to create arbitrary accounts via a link to adduser.cfm.
CVE-2002-0504 High 2002-08-12 Not applicable Working exploit published Cross-site scripting vulnerability in Citrix NFuse 1.6 and earlier does not quote results from the getLastError method, which allows remote attackers to execute script in other clients via the NFuse_Application parameter to (1) launch.jsp or (2) launch.asp.
CVE-2002-0502 Medium 2002-08-12 Not applicable Working exploit published Citrix NFuse 1.6 may allow remote attackers to list applications without authentication by accessing the applist.asp page.
CVE-2001-0760 Medium 2001-10-18 Not applicable Working exploit published Citrix Nfuse 1.51 allows remote attackers to obtain the absolute path of the web root via a malformed request to launch.asp that does not provide the session field.
CVE-1999-0759 High 1999-09-13 Not applicable Working exploit published Buffer overflow in FuseMAIL POP service via long USER and PASS commands.