WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-244✕
Overview 10 matches · 0 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
10matches 0in Waratek scope0.0% 0protected0.0% 1exploited10.0% 1CISA KEV10.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 2 20.0% Not applicable 8 80.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 10 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 10 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 10.0% Working exploit published 0 0.0% Proof of concept only 3 30.0% Forecast only 0 0.0% No public exploit 6 60.0%
split by peak 4 / quarter
Not applicable: 8Outside Waratek scope: 2 High: 10 not blocked: 10 No public exploit: 6Proof of concept only: 3Exploited: 1
Q1 252 Not applicable2 High2 not blocked2 Proof of concept only2 Q2 250 Q3 251 Not applicable1 High1 not blocked1 No public exploit1 Q4 252 Not applicable2 High2 not blocked2 No public exploit2 Q1 264 Outside Waratek scope1 Not applicable3 High4 not blocked4 Proof of concept only1 No public exploit3 Q2 260 Q3 261 Outside Waratek scope1 High1 not blocked1 Exploited1
Q1 25Q2 25Q3 25Q4 25Q1 26Q2 26Q3 26
10 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-20349 High 2026-08-11 Outside Waratek scope Exploited A vulnerability in the Remote Access SSL VPN service for Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause the device to reload unexpectedly, resulting in a denial of service (DoS) condition.  This vulnerability is due to insufficient error checking when processing HTTP requests. An attacker could exploit this vulnerability by sending a crafted HTTP request to the Remote Access SSL VPN service on an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
CVE-2025-70873 High 2026-03-12 Not applicable Proof of concept only An information disclosure issue in the zipfileInflate function in the zipfile extension in SQLite v3.51.1 and earlier allows attackers to obtain heap memory via supplying a crafted ZIP file.
CVE-2026-20039 High 2026-03-04 Outside Waratek scope No public exploit A vulnerability in the VPN web server of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to ineffective memory management of the VPN web server. An attacker could exploit this vulnerability by sending a large number of crafted HTTP requests to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
CVE-2025-1722 High 2026-01-20 Not applicable No public exploit IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
CVE-2025-1719 High 2026-01-20 Not applicable No public exploit IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
CVE-2025-1721 High 2025-12-26 Not applicable No public exploit IBM Concert 1.0.0 through 2.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
CVE-2025-36118 High 2025-11-17 Not applicable No public exploit IBM Storage Virtualize 8.4, 8.5, 8.7, and 9.1 IKEv1 implementation allows remote attackers to obtain sensitive information from device memory via a Security Association (SA) negotiation request.
CVE-2025-1759 High 2025-08-18 Not applicable No public exploit IBM Concert Software 1.0.0 through 1.1.0 could allow a remote attacker to obtain sensitive information from allocated memory due to improper clearing of heap memory.
CVE-2025-26305 High 2025-02-20 Not applicable Proof of concept only A memory leak has been identified in the parseSWF_SOUNDINFO function in util/parser.c of libming v0.4.8, which allows attackers to cause a denial of service via a crafted SWF file.
CVE-2025-26304 High 2025-02-20 Not applicable Proof of concept only A memory leak has been identified in the parseSWF_EXPORTASSETS function in util/parser.c of libming v0.4.8.