WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product jquery✕
Overview 6 matches · 0 in Waratek scope · 0 protected · 2 exploited · 0 CISA KEV · 2 public PoC · 2 EPSS ≥ 0.5
6matches 0in Waratek scope0.0% 0protected0.0% 2exploited33.3% 0CISA KEV0.0% 2public PoC33.3% 2EPSS ≥ 0.533.3%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 6 100.0% Withdrawn CVE 0 0.0%
Critical 6 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 6 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 33.3% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 4 66.7%
split by peak 3 / quarter
Not applicable: 6 Critical: 6 not blocked: 6 No public exploit: 4Exploited: 2
Q3 181 Not applicable1 Critical1 not blocked1 No public exploit1 Q4 183 Not applicable3 Critical3 not blocked3 Exploited1 No public exploit2 Q1 190 Q2 190 Q3 190 Q4 190 Q1 201 Not applicable1 Critical1 not blocked1 Exploited1 Q2 200 Q3 200 Q4 200 Q1 210 Q2 210 Q3 210 Q4 210 Q1 221 Not applicable1 Critical1 not blocked1 No public exploit1
Q3 18Q1 19Q3 19Q1 20Q3 20Q1 21Q3 21Q1 22
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2022-24984 Critical 2022-02-16 Not applicable No public exploit Forms generated by JQueryForm.com before 2022-02-05 (if file-upload capability is enabled) allow remote unauthenticated attackers to upload executable files and achieve remote code execution. This occurs because file-extension checks occur on the client side, and because not all executable content (e.g., .phtml or .php.bak) is blocked.
CVE-2014-8739 Critical 2020-02-08 Not applicable Exploited Unrestricted file upload vulnerability in server/php/UploadHandler.php in the jQuery File Upload Plugin 6.4.4 for jQuery, as used in the Creative Solutions Creative Contact Form (formerly Sexy Contact Form) before 1.0.0 for WordPress and before 2.0.1 for Joomla!, allows remote attackers to execute arbitrary code by uploading a PHP file with an PHP extension, then accessing it via a direct request to the file in files/, as exploited in the wild in October 2014.
CVE-2018-9207 Critical 2018-11-19 Not applicable No public exploit Arbitrary file upload in jQuery Upload File <= 4.0.2
CVE-2018-9208 Critical 2018-11-05 Not applicable No public exploit Unauthenticated arbitrary file upload vulnerability in jQuery Picture Cut <= v1.1Beta
CVE-2018-9206 Critical 2018-10-11 Not applicable Exploited Unauthenticated arbitrary file upload vulnerability in Blueimp jQuery-File-Upload <= v9.22.0
CVE-2018-0645 Critical 2018-09-07 Not applicable No public exploit MTAppjQuery 1.8.1 and earlier allows remote PHP code execution via unspecified vectors.