Overview 220 matches · 4 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 5 public PoC · 3 EPSS ≥ 0.5
220matches
4in Waratek scope1.8%
0protected0.0%
1exploited0.5%
1CISA KEV0.5%
5public PoC2.3%
3EPSS ≥ 0.51.4%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
4
1.8%
Outside Waratek scope
2
0.9%
Not applicable
214
97.3%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
220
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 75 / year
20021
Not applicable1
High1
not blocked1
No public exploit1
20030
20040
20051
Not applicable1
High1
not blocked1
Working exploit published1
20060
20072
Not applicable2
Critical1
High1
not blocked2
Working exploit published1
No public exploit1
20080
20091
Not applicable1
High1
not blocked1
No public exploit1
20101
Not applicable1
Critical1
not blocked1
Working exploit published1
20110
20120
20130
20140
20150
20160
20176
Not applicable6
High2
Medium4
not blocked6
No public exploit6
20184
Not applicable4
High3
Medium1
not blocked4
No public exploit4
20197
Not applicable7
Critical1
High4
Medium2
not blocked7
No public exploit7
20209
No exploit published2
Not applicable7
Critical1
High3
Medium5
not blocked9
No public exploit9
202120
Not applicable20
Critical2
High8
Medium10
not blocked20
No public exploit20
202230
No exploit published2
Outside Waratek scope1
Not applicable27
Critical2
High12
Medium16
not blocked30
Working exploit published1
Proof of concept only3
No public exploit26
202317
Not applicable17
High8
Medium9
not blocked17
Proof of concept only2
No public exploit15
202425
Not applicable25
Critical2
High13
Medium9
Low1
not blocked25
Proof of concept only3
No public exploit22
202521
Not applicable21
Critical1
High4
Medium15
Low1
not blocked21
Proof of concept only9
No public exploit12
202675
Outside Waratek scope1
Not applicable74
Critical4
High34
Medium31
Low6
not blocked75
Exploited1
Proof of concept only11
No public exploit63
2002200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2019-15942 | High | 2019-09-05 | Not applicable | No public exploit | FFmpeg through 4.2 has a "Conditional jump or move depends on uninitialised value" issue in h2645_parse because alloc_rbsp_buffer in libavcodec/h2645_parse.c mishandles rbsp_buffer. |
| CVE-2019-12107 | High | 2019-05-15 | Not applicable | No public exploit | The upnp_event_prepare function in upnpevents.c in MiniUPnP MiniUPnPd through 2.1 allows a remote attacker to leak information from the heap due to improper validation of an snprintf return value. |
| CVE-2019-10902 | High | 2019-04-09 | Not applicable | No public exploit | In Wireshark 3.0.0, the TSDNS dissector could crash. This was addressed in epan/dissectors/packet-tsdns.c by splitting strings safely. |
| CVE-2019-9704 | Medium | 2019-03-12 | Not applicable | No public exploit | Vixie Cron before the 3.0pl1-133 Debian package allows local users to cause a denial of service (daemon crash) via a large crontab file because the calloc return value is not checked. |
| CVE-2018-20216 | High | 2018-12-20 | Not applicable | No public exploit | QEMU can have an infinite loop in hw/rdma/vmw/pvrdma_dev_ring.c because return values are not checked (and -1 is mishandled). |
| CVE-2018-16643 | Medium | 2018-09-06 | Not applicable | No public exploit | The functions ReadDCMImage in coders/dcm.c, ReadPWPImage in coders/pwp.c, ReadCALSImage in coders/cals.c, and ReadPICTImage in coders/pict.c in ImageMagick 7.0.8-4 do not check the return value of the fputc function, which allows remote attackers to cause a denial of service via a crafted image file. |
| CVE-2018-14622 | High | 2018-08-30 | Not applicable | No public exploit | A null-pointer dereference vulnerability was found in libtirpc before version 0.3.3-rc3. The return value of makefd_xprt() was not checked in all instances, which could lead to a crash when the server exhausted the maximum number of available file descriptors. A remote attacker could cause an rpc-based application to crash by flooding it with new connections. |
| CVE-2018-14367 | High | 2018-07-19 | Not applicable | No public exploit | In Wireshark 2.6.0 to 2.6.1 and 2.4.0 to 2.4.7, the CoAP protocol dissector could crash. This was addressed in epan/dissectors/packet-coap.c by properly checking for a NULL condition. |
| CVE-2017-0774 | Medium | 2017-09-08 | Not applicable | No public exploit | A denial of service vulnerability in the Android media framework (libstagefright). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-62673844. |
| CVE-2017-0720 | High | 2017-08-09 | Not applicable | No public exploit | A remote code execution vulnerability in the Android media framework (libhevc). Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-37430213. |
| CVE-2017-0599 | Medium | 2017-05-12 | Not applicable | No public exploit | A remote denial of service vulnerability in libhevc in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High severity due to the possibility of remote denial of service. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-34672748. |
| CVE-2017-6964 | High | 2017-03-28 | Not applicable | No public exploit | dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the (1) setuid or (2) setgid function, which might cause dmcrypt-get-device to execute code, which was intended to run as an unprivileged user, as root. This affects eject through 2.1.5+deb1+cvs20081104-13.1 on Debian, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.10.1 on Ubuntu 16.10, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.04.1 on Ubuntu 16.04 LTS, eject before 2.1.5+deb1+cvs20081104-13.1ubuntu0.14.04.1 on Ubuntu 14.04 LTS, and eject before 2.1.5+deb1+cvs20081104-9ubuntu0.1 on Ubuntu 12.04 LTS. |
| CVE-2016-10061 | Medium | 2017-03-03 | Not applicable | No public exploit | The ReadGROUP4Image function in coders/tiff.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (crash) via a crafted image file. |
| CVE-2016-10060 | Medium | 2017-03-02 | Not applicable | No public exploit | The ConcatenateImages function in MagickWand/magick-cli.c in ImageMagick before 7.0.1-10 does not check the return value of the fputc function, which allows remote attackers to cause a denial of service (application crash) via a crafted file. |
| CVE-2010-0211 | Critical | 2010-07-28 | Not applicable | Working exploit published | The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite. |
| CVE-2009-0265 | High | 2009-01-26 | Not applicable | No public exploit | Internet Systems Consortium (ISC) BIND 9.6.0 and earlier does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077 and CVE-2009-0025. |
| CVE-2007-5191 | High | 2007-10-04 | Not applicable | No public exploit | mount and umount in util-linux and loop-aes-utils call the setuid and setgid functions in the wrong order and do not check the return values, which might allow attackers to gain privileges via helpers such as mount.nfs. |
| CVE-2007-3798 | Critical | 2007-07-16 | Not applicable | Working exploit published | Integer overflow in print-bgp.c in the BGP dissector in tcpdump 3.9.6 and earlier allows remote attackers to execute arbitrary code via crafted TLVs in a BGP packet, related to an unchecked return value. |
| CVE-2005-4360 | High | 2005-12-20 | Not applicable | Working exploit published | The URL parser in Microsoft Internet Information Services (IIS) 5.1 on Windows XP Professional SP2 allows remote attackers to execute arbitrary code via multiple requests to ".dll" followed by arguments such as "~0" through "~9", which causes ntdll.dll to produce a return value that is not correctly handled by IIS, as demonstrated using "/_vti_bin/.dll/*/~0". NOTE: the consequence was originally believed to be only a denial of service (application crash and reboot). |
| CVE-2002-1372 | High | 2002-12-26 | Not applicable | No public exploit | Common Unix Printing System (CUPS) 1.1.14 through 1.1.17 does not properly check the return values of various file and socket operations, which could allow a remote attacker to cause a denial of service (resource exhaustion) by causing file descriptors to be assigned and not released, as demonstrated by fanta. |