Overview 8 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 0 EPSS ≥ 0.5
8matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
3public PoC37.5%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
8
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
8
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
3
37.5%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
5
62.5%
split by
peak 4 / quarter
Q4 021
Not applicable1
Medium1
not blocked1
Working exploit published1
Q1 031
Not applicable1
High1
not blocked1
No public exploit1
Q2 034
Not applicable4
High2
Medium2
not blocked4
Working exploit published2
No public exploit2
Q3 030
Q4 030
Q1 041
Not applicable1
Medium1
not blocked1
No public exploit1
Q2 040
Q3 040
Q4 040
Q1 050
Q2 050
Q3 050
Q4 050
Q1 060
Q2 060
Q3 060
Q4 061
Not applicable1
Medium1
not blocked1
No public exploit1
Q4 02Q2 03Q4 03Q2 04Q4 04Q2 05Q4 05Q2 06Q4 06
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2006-5654 | Medium | 2006-11-03 | Not applicable | No public exploit | Unspecified vulnerability in the Network Security Services (NSS) in Sun Java System Web Server 6.0 before SP 10 and ONE Application Server 7 before Update 3, when SSLv2 is enabled, allows remote authenticated users to cause a denial of service (application crash) via unspecified vectors. NOTE: due to lack of details from the vendor, it is unclear whether this is related to vector 1 in CVE-2006-5201 or CVE-2006-3127. |
| CVE-2004-1815 | Medium | 2004-03-15 | Not applicable | No public exploit | Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption). |
| CVE-2003-0414 | High | 2003-06-30 | Not applicable | No public exploit | The installation of Sun ONE Application Server 7.0 for Windows 2000/XP creates a statefile with world-readable permissions, which allows local users to gain privileges by reading a plaintext password in the statefile. |
| CVE-2003-0413 | Medium | 2003-06-30 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in the webapps-simple sample application for (1) Sun ONE Application Server 7.0 for Windows 2000/XP or (2) Sun Java System Web Server 6.1 allows remote attackers to insert arbitrary web script or HTML via an HTTP request that generates an "Invalid JSP file" error, which inserts the text in the resulting error message. |
| CVE-2003-0412 | Medium | 2003-06-30 | Not applicable | No public exploit | Sun ONE Application Server 7.0 for Windows 2000/XP does not log the complete URI of a long HTTP request, which could allow remote attackers to hide malicious activities. |
| CVE-2003-0411 | High | 2003-06-30 | Not applicable | Working exploit published | Sun ONE Application Server 7.0 for Windows 2000/XP allows remote attackers to obtain JSP source code via a request that uses the uppercase ".JSP" extension instead of the lowercase .jsp extension. |
| CVE-2002-0387 | High | 2003-03-18 | Not applicable | No public exploit | Buffer overflow in gxnsapi6.dll NSAPI plugin of the Connector Module for Sun ONE Application Server before 6.5 allows remote attackers to execute arbitrary code via a long HTTP request URL. |
| CVE-2002-1042 | Medium | 2002-10-04 | Not applicable | Working exploit published | Directory traversal vulnerability in search engine for iPlanet web server 6.0 SP2 and 4.1 SP9, and Netscape Enterprise Server 3.6, when running on Windows platforms, allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in the NS-query-pat parameter. |