WaratekVRT Sign in
Reset
More filters (1)
Columns
Published to 2005-01-31✕
Overview 8 matches · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
8matches 0exploited0.0% 0CISA KEV0.0% 1public PoC12.5% 0EPSS ≥ 0.50.0%
Protected by Waratek 8 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 0 0.0% High 3 37.5% Medium 5 62.5% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 8 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 12.5% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 7 87.5%
split by peak 2 / quarter
Protected by Waratek: 8 Medium: 5High: 3 blocked by ARMR today: 8 No public exploit: 7Working exploit published: 1
Q3 011 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 Q4 010 Q1 021 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q2 020 Q3 020 Q4 022 Protected by Waratek2 High1 Medium1 blocked by ARMR today2 No public exploit2 Q1 031 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 Q2 030 Q3 031 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q4 030 Q1 040 Q2 040 Q3 041 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 Q4 041 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1
Q4 01Q2 02Q4 02Q2 03Q4 03Q2 04Q4 04
8 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2004-2320 Medium 2004-12-31 Protected by Waratek No public exploit The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
CVE-2004-0543 High 2004-08-06 Protected by Waratek No public exploit Multiple SQL injection vulnerabilities in Oracle Applications 11.0 and Oracle E-Business Suite 11.5.1 through 11.5.8 allow remote attackers to execute arbitrary SQL procedures and queries.
CVE-2003-0610 Medium 2003-08-27 Protected by Waratek No public exploit Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.
CVE-2003-0042 Medium 2003-02-07 Protected by Waratek Working exploit published Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.
CVE-2002-1987 Medium 2002-12-31 Protected by Waratek No public exploit Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a "\.." (backslash dot dot).
CVE-2002-1631 High 2002-12-31 Protected by Waratek No public exploit SQL injection vulnerability in the query.xsql sample page in Oracle 9i Application Server (9iAS) allows remote attackers to execute arbitrary code via the sql parameter.
CVE-2000-1210 Medium 2002-03-22 Protected by Waratek No public exploit Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.
CVE-2001-0591 High 2001-08-22 Protected by Waratek No public exploit Directory traversal vulnerability in Oracle JSP 1.0.x through 1.1.1 and Oracle 8.1.7 iAS Release 1.0.2 can allow a remote attacker to read or execute arbitrary .jsp files via a '..' (dot dot) attack.