WaratekVRT Sign in
Reset
More filters (1)
Columns
Published to 2006-10-31✕
Overview 12 matches · 0 exploited · 0 CISA KEV · 3 public PoC · 0 EPSS ≥ 0.5
12matches 0exploited0.0% 0CISA KEV0.0% 3public PoC25.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 12 100.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 12 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 12 100.0% partly blocked 0 0.0% not blocked 0 0.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 25.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 9 75.0%
split by peak 2 / quarter
Protected by Waratek: 12 Medium: 12 blocked by ARMR today: 12 No public exploit: 9Working exploit published: 3
Q1 021 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q2 020 Q3 020 Q4 021 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q1 031 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 Q2 030 Q3 031 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q4 030 Q1 040 Q2 040 Q3 040 Q4 041 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q1 050 Q2 052 Protected by Waratek2 Medium2 blocked by ARMR today2 No public exploit2 Q3 050 Q4 051 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 Q1 062 Protected by Waratek2 Medium2 blocked by ARMR today2 No public exploit2 Q2 061 Protected by Waratek1 Medium1 blocked by ARMR today1 Working exploit published1 Q3 061 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1
Q1 02Q3 02Q1 03Q3 03Q1 04Q3 04Q1 05Q3 05Q1 06Q3 06
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2006-3934 Medium 2006-07-31 Protected by Waratek No public exploit Absolute path traversal vulnerability in downloadTrigger.jsp in Alkacon OpenCms before 6.2.2 allows remote authenticated users to download arbitrary files via an absolute pathname in the filePath parameter.
CVE-2006-2758 Medium 2006-06-02 Protected by Waratek Working exploit published Directory traversal vulnerability in jetty 6.0.x (jetty6) beta16 allows remote attackers to read arbitrary files via a %2e%2e%5c (encoded ../) in the URL. NOTE: this might be the same issue as CVE-2005-3747.
CVE-2006-1548 Medium 2006-03-30 Protected by Waratek No public exploit Cross-site scripting (XSS) vulnerability in (1) LookupDispatchAction and possibly (2) DispatchAction and (3) ActionDispatcher in Apache Software Foundation (ASF) Struts before 1.2.9 allows remote attackers to inject arbitrary web script or HTML via the parameter name, which is not filtered in the resulting error message.
CVE-2006-0275 Medium 2006-01-18 Protected by Waratek No public exploit Unspecified vulnerability in the Oracle Reports Developer component of Oracle Application Server 9.0.4.2 has unspecified impact and attack vectors, as identified by Oracle Vuln# REP04. NOTE: Oracle has not disputed reliable researcher claims that this issue is related to directory traversal that allows reading of portions of arbitrary XML files via the customize parameter.
CVE-2005-3745 Medium 2005-11-22 Protected by Waratek Working exploit published Cross-site scripting (XSS) vulnerability in Apache Struts 1.2.7, and possibly other versions allows remote attackers to inject arbitrary web script or HTML via the query string, which is not properly quoted or filtered when the request handler generates an error message.
CVE-2005-1080 Medium 2005-05-02 Protected by Waratek No public exploit Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.
CVE-2005-0223 Medium 2005-05-02 Protected by Waratek No public exploit The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service (Java Virtual Machine hang) via object deserialization.
CVE-2004-2320 Medium 2004-12-31 Protected by Waratek No public exploit The default configuration of BEA WebLogic Server and Express 8.1 SP2 and earlier, 7.0 SP4 and earlier, 6.1 through SP6, and 5.1 through SP13 responds to the HTTP TRACE request, which can allow remote attackers to steal information using cross-site tracing (XST) attacks in applications that are vulnerable to cross-site scripting.
CVE-2003-0610 Medium 2003-08-27 Protected by Waratek No public exploit Directory traversal vulnerability in ePO agent for McAfee ePolicy Orchestrator 3.0 allows remote attackers to read arbitrary files via a certain HTTP request.
CVE-2003-0042 Medium 2003-02-07 Protected by Waratek Working exploit published Jakarta Tomcat before 3.3.1a, when used with JDK 1.3.1 or earlier, allows remote attackers to list directories even with an index.html or other file present, or obtain unprocessed source code for a JSP file, via a URL containing a null character.
CVE-2002-1987 Medium 2002-12-31 Protected by Waratek No public exploit Directory traversal vulnerability in view_source.jsp in Resin 2.1.2 allows remote attackers to read arbitrary files via a "\.." (backslash dot dot).
CVE-2000-1210 Medium 2002-03-22 Protected by Waratek No public exploit Directory traversal vulnerability in source.jsp of Apache Tomcat before 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the argument to source.jsp.