Overview 34 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 5 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
34
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
34
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
34
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 6 / year
19993
Not applicable3
High3
not blocked3
Working exploit published3
20000
20010
20023
Not applicable3
Medium3
not blocked3
Working exploit published3
20032
Not applicable2
High1
Low1
not blocked2
Working exploit published2
20043
Not applicable3
High2
Medium1
not blocked3
Working exploit published3
20050
20063
Not applicable3
Medium3
not blocked3
Working exploit published3
20074
Not applicable4
High1
Medium2
Low1
not blocked4
Working exploit published4
20081
Not applicable1
High1
not blocked1
Working exploit published1
20096
Not applicable6
High3
Medium3
not blocked6
Working exploit published6
20101
Not applicable1
Medium1
not blocked1
Working exploit published1
20111
Not applicable1
Medium1
not blocked1
Working exploit published1
20123
Not applicable3
Medium3
not blocked3
Working exploit published3
20131
Not applicable1
Medium1
not blocked1
Working exploit published1
20142
Not applicable2
Medium2
not blocked2
Working exploit published2
20150
20160
20170
20180
20190
20201
Not applicable1
Medium1
not blocked1
Working exploit published1
20002002200420062008201020122014201620182020
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2019-15993 | Medium | 2020-09-23 | Not applicable | Working exploit published | A vulnerability in the web UI of Cisco Small Business Switches could allow an unauthenticated, remote attacker to access sensitive device information. The vulnerability exists because the software lacks proper authentication controls to information accessible from the web UI. An attacker could exploit this vulnerability by sending a malicious HTTP request to the web UI of an affected device. A successful exploit could allow the attacker to access sensitive device information, which includes configuration files. |
| CVE-2014-8652 | Medium | 2014-11-10 | Not applicable | Working exploit published | Elipse E3 3.x and earlier allows remote attackers to cause a denial of service (application crash and plant outage) via a rapid series of HTTP requests to index.html on TCP port 1681. |
| CVE-2014-8657 | Medium | 2014-11-06 | Not applicable | Working exploit published | The Compal Broadband Networks (CBN) CH6640E and CG6640E Wireless Gateway 1.0 with firmware CH6640-3.5.11.7-NOSH allows remote attackers to cause a denial of service (disconnect all wifi clients) via a request to wirelessChannelStatus.html. |
| CVE-2013-1451 | Medium | 2013-01-29 | Not applicable | Working exploit published | Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted HTML document that triggers many HTTPS requests to an arbitrary host, followed by an HTTPS request to a trusted host and then an HTTP request to an untrusted host, a related issue to CVE-2013-1450. |
| CVE-2012-0957 | Medium | 2012-12-21 | Not applicable | Working exploit published | The override_release function in kernel/sys.c in the Linux kernel before 3.4.16 allows local users to obtain sensitive information from kernel stack memory via a uname system call in conjunction with a UNAME26 personality. |
| CVE-2012-5613 | Medium | 2012-12-03 | Not applicable | Working exploit published | MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other versions, when configured to assign the FILE privilege to users who should not have administrative privileges, allows remote authenticated users to gain privileges by leveraging the FILE privilege to create files as the MySQL administrator. NOTE: the vendor disputes this issue, stating that this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. NOTE: it could be argued that this should not be included in CVE because it is a configuration issue. |
| CVE-2012-6050 | Medium | 2012-11-27 | Not applicable | Working exploit published | The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll. |
| CVE-2011-4404 | Medium | 2011-11-19 | Not applicable | Working exploit published | The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware vCenter Update Manager 4.0 before Update 4 and 4.1 before Update 2 allows remote attackers to conduct directory traversal attacks and read arbitrary files via unspecified vectors, a related issue to CVE-2009-1523. |
| CVE-2010-0380 | Medium | 2010-01-22 | Not applicable | Working exploit published | install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation. |
| CVE-2009-2335 | Medium | 2009-07-10 | Not applicable | Working exploit published | WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login attempt depending on whether the user account exists, which allows remote attackers to enumerate valid usernames. NOTE: the vendor reportedly disputes the significance of this issue, indicating that the behavior exists for "user convenience." |
| CVE-2009-1312 | Medium | 2009-04-22 | Not applicable | Working exploit published | Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected. |
| CVE-2009-0641 | High | 2009-02-20 | Not applicable | Working exploit published | sys_term.c in telnetd in FreeBSD 7.0-RELEASE and other 7.x versions deletes dangerous environment variables with a method that was valid only in older FreeBSD distributions, which might allow remote attackers to execute arbitrary code by passing a crafted environment variable from a telnet client, as demonstrated by an LD_PRELOAD value that references a malicious library. |
| CVE-2009-0399 | High | 2009-02-03 | Not applicable | Working exploit published | Chipmunk Blogger Script allows remote attackers to gain administrator privileges via a direct request to admin/reguser.php. NOTE: this is only a vulnerability when the administrator does not properly follow installation directions. |
| CVE-2003-1566 | Medium | 2009-01-15 | Not applicable | Working exploit published | Microsoft Internet Information Services (IIS) 5.0 does not log requests that use the TRACK method, which allows remote attackers to obtain sensitive information without detection. |
| CVE-2006-7236 | High | 2009-01-02 | Not applicable | Working exploit published | The default configuration of xterm on Debian GNU/Linux sid and possibly Ubuntu enables the allowWindowOps resource, which allows user-assisted attackers to execute arbitrary code or have unspecified other impact via escape sequences. |
| CVE-2008-1507 | High | 2008-03-25 | Not applicable | Working exploit published | PEEL, possibly 3.x and earlier, has (1) a default info@peel.fr account with password admin, and (2) a default contact@peel.fr account with password cinema, which allows remote attackers to gain administrative access. |
| CVE-2007-6379 | Medium | 2007-12-15 | Not applicable | Working exploit published | BadBlue 2.72b and earlier allows remote attackers to obtain sensitive information via an invalid browse parameter, which reveals the installation path in an error message. |
| CVE-2007-6210 | Low | 2007-12-04 | Not applicable | Working exploit published | zabbix_agentd 1.1.4 in ZABBIX before 1.4.3 runs "UserParameter" scripts with gid 0, which might allow local users to gain privileges. |
| CVE-2007-3898 | Medium | 2007-11-14 | Not applicable | Working exploit published | The DNS server in Microsoft Windows 2000 Server SP4, and Server 2003 SP1 and SP2, uses predictable transaction IDs when querying other DNS servers, which allows remote attackers to spoof DNS replies, poison the DNS cache, and facilitate further attack vectors. |
| CVE-2007-2216 | High | 2007-08-14 | Not applicable | Working exploit published | The tblinf32.dll (aka vstlbinf.dll) ActiveX control for Internet Explorer 5.01, 6 SP1, and 7 uses an incorrect IObjectsafety implementation, which allows remote attackers to execute arbitrary code by requesting the HelpString property, involving a crafted DLL file argument to the TypeLibInfoFromFile function, which overwrites the HelpStringDll property to call the DLLGetDocumentation function in another DLL file, aka "ActiveX Object Vulnerability." |
| CVE-2006-6899 | Medium | 2006-12-31 | Not applicable | Working exploit published | hidd in BlueZ (bluez-utils) before 2.25 allows remote attackers to obtain control of the (1) Mouse and (2) Keyboard Human Interface Device (HID) via a certain configuration of two HID (PSM) endpoints, operating as a server, aka HidAttack. |
| CVE-2006-2363 | Medium | 2006-05-15 | Not applicable | Working exploit published | SQL injection vulnerability in the weblinks option (weblinks.html.php) in Limbo CMS allows remote attackers to execute arbitrary SQL commands via the catid parameter. |
| CVE-2006-0848 | Medium | 2006-02-22 | Not applicable | Working exploit published | The "Open 'safe' files after downloading" option in Safari on Apple Mac OS X allows remote user-assisted attackers to execute arbitrary commands by tricking a user into downloading a __MACOSX folder that contains metadata (resource fork) that invokes the Terminal, which automatically interprets the script using bash, as demonstrated using a ZIP file that contains a script with a safe file extension. |
| CVE-2004-2692 | High | 2004-12-31 | Not applicable | Working exploit published | The exec_dir PHP patch (php-exec-dir) 4.3.2 through 4.3.7 with safe mode disabled allows remote attackers to bypass restrictions and execute arbitrary commands via a backtick operator, which is not handled using the php_escape_shell_cmd function. |
| CVE-2004-2687 | High | 2004-12-31 | Not applicable | Working exploit published | distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks. |
| CVE-2004-0605 | Medium | 2004-12-06 | Not applicable | Working exploit published | Non-registered IRC users using (1) ircd-hybrid 7.0.1 and earlier, (2) ircd-ratbox 1.5.1 and earlier, or (3) ircd-ratbox 2.0rc6 and earlier do not have a rate-limit imposed, which could allow remote attackers to cause a denial of service by repeatedly making requests, which are slowly dequeued. |
| CVE-2003-1452 | Low | 2003-12-31 | Not applicable | Working exploit published | Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program. |
| CVE-2003-1341 | High | 2003-12-31 | Not applicable | Working exploit published | The default installation of Trend Micro OfficeScan 3.0 through 3.54 and 5.x allows remote attackers to bypass authentication from cgiChkMasterPasswd.exe and gain access to the web management console via a direct request to cgiMasterPwd.exe. |
| CVE-2002-2336 | Medium | 2002-12-31 | Not applicable | Working exploit published | Norton Personal Firewall 2002 4.0, when configured to automatically block attacks, allows remote attackers to block IP addresses and cause a denial of service via spoofed packets. |
| CVE-2002-2335 | Medium | 2002-12-31 | Not applicable | Working exploit published | Killer Protection 1.0 stores the vars.inc include file under the web root with insufficient access control, which allows remote attackers to obtain user names and passwords and log in using protection.php. |
| CVE-2002-2247 | Medium | 2002-12-31 | Not applicable | Working exploit published | The administrator/phpinfo.php script in Mambo Site Server 4.0.11 allows remote attackers to obtain sensitive information such as the full web root path via phpinfo.php, which calls the phpinfo function. |
| CVE-1999-0886 | High | 1999-09-17 | Not applicable | Working exploit published | The security descriptor for RASMAN allows users to point to an alternate location via the Windows NT Service Control Manager. |
| CVE-1999-0725 | High | 1999-08-19 | Not applicable | Working exploit published | When IIS is run with a default language of Chinese, Korean, or Japanese, it allows a remote attacker to view the source code of certain files, a.k.a. "Double Byte Code Page". |
| CVE-1999-0875 | High | 1999-08-11 | Not applicable | Working exploit published | DHCP clients with ICMP Router Discovery Protocol (IRDP) enabled allow remote attackers to modify their default routes. |