WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Vendor eclipse✕Has a public PoC✕
Overview 13 matches · 7 in Waratek scope · 3 protected · 4 exploited · 1 CISA KEV · 7 EPSS ≥ 0.5
13matches 7in Waratek scope53.8% 3protected23.1% 4exploited30.8% 1CISA KEV7.7% 7EPSS ≥ 0.553.8%
Protected by Waratek 3 23.1% Rule in development 0 0.0% Mitigation candidate 4 30.8% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 6 46.2% Withdrawn CVE 0 0.0%
Critical 2 15.4% High 4 30.8% Medium 7 53.8% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 3 23.1% partly blocked 0 0.0% not blocked 10 76.9% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 30.8% Working exploit published 8 61.5% Proof of concept only 1 7.7% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 5 / year
Not applicable: 6Mitigation candidate: 4Protected by Waratek: 3 Medium: 7High: 4Critical: 2 not blocked: 10blocked by ARMR today: 3 Proof of concept only: 1Working exploit published: 8Exploited: 4
20091 Not applicable1 Medium1 not blocked1 Working exploit published1 20100 20112 Not applicable2 Medium2 not blocked2 Working exploit published2 20120 20130 20140 20150 20161 Mitigation candidate1 High1 not blocked1 Working exploit published1 20170 20180 20191 Not applicable1 High1 not blocked1 Proof of concept only1 20201 Mitigation candidate1 Critical1 not blocked1 Working exploit published1 20215 Protected by Waratek3 Mitigation candidate1 Not applicable1 Critical1 Medium4 blocked by ARMR today3 not blocked2 Exploited3 Working exploit published2 20220 20231 Mitigation candidate1 High1 not blocked1 Exploited1 20240 20250 20261 Not applicable1 High1 not blocked1 Working exploit published1
201020122014201620182020202220242026
13 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-12609 High 2026-08-05 Not applicable Working exploit published In Eclipse Theia versions 1.66.0 and up until including 1.73.1, the `@theia/plugin-ext` backend exposes the `/hostedPlugin/:pluginId/:path(*)` HTTP endpoint, which resolves the requested file path with `path.resolve(localPath, filePath)` without verifying that the resolved path stays within the plugin's directory. An unauthenticated network attacker can send percent-encoded `../` sequences (`%2e%2e%2f`) that decode into the path parameter and escape the plugin directory, allowing arbitrary files readable by the Theia backend process to be retrieved. Plugin IDs are derived deterministically from a plugin's publisher and name, so built-in plugins serve as reliable anchors that require no prior knowledge of the target system.
CVE-2023-44487 High 2023-10-10 Mitigation candidate Exploited The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVE-2021-34429 Medium 2021-07-15 Protected by Waratek Exploited For Eclipse Jetty versions 9.4.37-9.4.42, 10.0.1-10.0.5 & 11.0.1-11.0.5, URIs can be crafted using some encoded characters to access the content of the WEB-INF directory and/or bypass some security constraints. This is a variation of the vulnerability reported in CVE-2021-28164/GHSA-v7ff-8wcx-gmc5.
CVE-2021-34427 Critical 2021-06-25 Not applicable Exploited In Eclipse BIRT versions 4.8.0 and earlier, an attacker can use query parameters to create a JSP file which is accessible from remote (current BIRT viewer dir) to inject JSP code into the running instance.
CVE-2021-28169 Medium 2021-06-09 Mitigation candidate Exploited For Eclipse Jetty versions <= 9.4.40, <= 10.0.2, <= 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example a request to `/concat?/%2557EB-INF/web.xml` can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.
CVE-2020-6950 Medium 2021-06-02 Protected by Waratek Working exploit published Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter.
CVE-2021-28164 Medium 2021-04-01 Protected by Waratek Working exploit published In Eclipse Jetty 9.4.37.v20210219 to 9.4.38.v20210224, the default compliance mode allows requests with URIs that contain %2e or %2e%2e segments to access protected resources within the WEB-INF directory. For example a request to /context/%2e/WEB-INF/web.xml can retrieve the web.xml file. This can reveal sensitive information regarding the implementation of a web application.
CVE-2014-9390 Critical 2020-02-12 Mitigation candidate Working exploit published Git before 1.8.5.6, 1.9.x before 1.9.5, 2.0.x before 2.0.5, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 on Windows and OS X; Mercurial before 3.2.3 on Windows and OS X; Apple Xcode before 6.2 beta 3; mine all versions before 08-12-2014; libgit2 all versions up to 0.21.2; Egit all versions before 08-12-2014; and JGit all versions before 08-12-2014 allow remote Git servers to execute arbitrary commands via a tree containing a crafted .git/config file with (1) an ignorable Unicode codepoint, (2) a git~1/config representation, or (3) mixed case that is improperly handled on a case-insensitive filesystem.
CVE-2019-17633 High 2019-12-19 Not applicable Proof of concept only For Eclipse Che versions 6.16 to 7.3.0, with both authentication and TLS disabled, visiting a malicious web site could trigger the start of an arbitrary Che workspace. Che with no authentication and no TLS is not usually deployed on a public network but is often used for local installations (e.g. on personal laptops). In that case, even if the Che API is not exposed externally, some javascript running in the local browser is able to send requests to it.
CVE-2015-2080 High 2016-10-07 Mitigation candidate Working exploit published The exception handling code in Eclipse Jetty before 9.2.9.v20150224 allows remote attackers to obtain sensitive information from process memory via illegal characters in an HTTP header, aka JetLeak.
CVE-2010-4647 Medium 2011-01-13 Not applicable Working exploit published Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE before 3.6.2 allow remote attackers to inject arbitrary web script or HTML via the query string to (1) help/index.jsp or (2) help/advanced/content.jsp.
CVE-2008-7271 Medium 2011-01-13 Not applicable Working exploit published Multiple cross-site scripting (XSS) vulnerabilities in the Help Contents web application (aka the Help Server) in Eclipse IDE, possibly 3.3.2, allow remote attackers to inject arbitrary web script or HTML via (1) the searchWord parameter to help/advanced/searchView.jsp or (2) the workingSet parameter in an add action to help/advanced/workingSetManager.jsp, a different issue than CVE-2010-4647.
CVE-2009-4521 Medium 2009-12-31 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in birt-viewer/run in Eclipse Business Intelligence and Reporting Tools (BIRT) before 2.5.0, as used in KonaKart and other products, allows remote attackers to inject arbitrary web script or HTML via the __report parameter.