WaratekVRT Sign in
Reset
More filters (1)
Columns
Published to 2005-02-28✕
Overview 5 matches · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
5matches 0exploited0.0% 0CISA KEV0.0% 1public PoC20.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 5 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 5 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 5 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 20.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 4 80.0%
split by peak 1 / quarter
Protected by Waratek: 5 Medium: 5 blocked by ARMR today: 5 No public exploit: 4Working exploit published: 1
Q1 021 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q2 020 Q3 020 Q4 021 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q1 031 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 Q2 030 Q3 031 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q4 030 Q1 040 Q2 040 Q3 040 Q4 041 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1
Q1 02Q2 02Q3 02Q4 02Q1 03Q2 03Q3 03Q4 03Q1 04Q2 04Q3 04Q4 04
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2004-2320 Medium 2004-12-31 Protected by Waratek No public exploit The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
CVE-2003-0610 Medium 2003-08-27 Protected by Waratek No public exploit Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.
CVE-2003-0042 Medium 2003-02-07 Protected by Waratek Working exploit published Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.
CVE-2002-1987 Medium 2002-12-31 Protected by Waratek No public exploit Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a "\.." (backslash dot dot).
CVE-2000-1210 Medium 2002-03-22 Protected by Waratek No public exploit Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.