WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product java web start✕
Overview 4 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
4matches 1in Waratek scope25.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 2public PoC50.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 25.0% Outside Waratek scope 1 25.0% Not applicable 2 50.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 4 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 2 50.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 50.0%
split by peak 1 / quarter
Not applicable: 2Outside Waratek scope: 1No exploit published: 1 High: 4 not blocked: 4 No public exploit: 2Working exploit published: 2
Q4 021 Not applicable1 High1 not blocked1 No public exploit1 Q1 030 Q2 030 Q3 030 Q4 031 No exploit published1 High1 not blocked1 No public exploit1 Q1 040 Q2 040 Q3 040 Q4 040 Q1 050 Q2 050 Q3 050 Q4 050 Q1 060 Q2 060 Q3 060 Q4 060 Q1 070 Q2 070 Q3 071 Outside Waratek scope1 High1 not blocked1 Working exploit published1 Q4 070 Q1 080 Q2 080 Q3 080 Q4 081 Not applicable1 High1 not blocked1 Working exploit published1
Q4 02Q2 03Q4 03Q2 04Q4 04Q2 05Q4 05Q2 06Q4 06Q2 07Q4 07Q2 08Q4 08
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2008-4910 High 2008-11-04 Not applicable Working exploit published The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the showDocument method.
CVE-2007-5019 High 2007-09-20 Outside Waratek scope Working exploit published Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method.
CVE-2003-1229 High 2003-12-31 No exploit published No public exploit X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files.
CVE-2002-2005 High 2002-12-31 Not applicable No public exploit Unknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only) allows attackers to gain access to restricted resources via unknown attack vectors.