Overview 149 matches · 3 in Waratek scope · 1 protected · 4 exploited · 0 CISA KEV · 19 public PoC · 7 EPSS ≥ 0.5
149matches
3in Waratek scope2.0%
1protected0.7%
4exploited2.7%
0CISA KEV0.0%
19public PoC12.8%
7EPSS ≥ 0.54.7%
Protected by Waratek
1
0.7%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
2
1.3%
Outside Waratek scope
5
3.4%
Not applicable
141
94.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.7%
partly blocked
0
0.0%
not blocked
148
99.3%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 40 / year
20131
Not applicable1
Critical1
not blocked1
No public exploit1
20140
20156
Not applicable6
Critical6
not blocked6
Working exploit published2
No public exploit4
201640
Protected by Waratek1
Not applicable39
Critical40
blocked by ARMR today1
not blocked39
Exploited1
Working exploit published3
No public exploit36
201738
No exploit published2
Outside Waratek scope1
Not applicable35
Critical38
not blocked38
Exploited1
Working exploit published6
Proof of concept only1
No public exploit30
201838
Outside Waratek scope2
Not applicable36
Critical38
not blocked38
Working exploit published1
No public exploit37
20198
Outside Waratek scope2
Not applicable6
Critical8
not blocked8
Working exploit published2
No public exploit6
20203
Not applicable3
Critical3
not blocked3
No public exploit3
20211
Not applicable1
Critical1
not blocked1
No public exploit1
202210
Not applicable10
Critical10
not blocked10
Exploited2
No public exploit8
20232
Not applicable2
Critical2
not blocked2
No public exploit2
20241
Not applicable1
Critical1
not blocked1
No public exploit1
20250
20261
Not applicable1
Critical1
not blocked1
No public exploit1
2014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-96012 | Critical | 2026-10-12 | Not applicable | No public exploit | IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attacker could exploit this vulnerability to obtain elevated privileges on the system. |
| CVE-2023-52106 | Critical | 2024-01-16 | Not applicable | No public exploit | Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of this vulnerability will affect integrity and availability. |
| CVE-2023-3599 | Critical | 2023-07-10 | Not applicable | No public exploit | A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by this issue is the function save_user of the file admin_class.php of the component Add User Handler. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-233450 is the identifier assigned to this vulnerability. |
| CVE-2022-36246 | Critical | 2023-05-30 | Not applicable | No public exploit | Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions. |
| CVE-2022-41781 | Critical | 2022-11-18 | Not applicable | No public exploit | Broken Access Control vulnerability in Permalink Manager Lite plugin <= 2.2.20 on WordPress. |
| CVE-2022-36793 | Critical | 2022-09-09 | Not applicable | No public exploit | Unauthenticated Plugin Settings Change & Data Deletion vulnerabilities in WP Shop plugin <= 3.9.6 at WordPress. |
| CVE-2022-37344 | Critical | 2022-09-06 | Not applicable | No public exploit | Missing Access Control vulnerability in PHP Crafts Accommodation System plugin <= 1.0.1 at WordPress. |
| CVE-2022-36427 | Critical | 2022-09-06 | Not applicable | No public exploit | Missing Access Control vulnerability in About Rentals. Inc. About Rentals plugin <= 1.5 at WordPress. |
| CVE-2022-36425 | Critical | 2022-09-06 | Not applicable | No public exploit | Broken Access Control vulnerability in Beaver Builder plugin <= 2.5.4.3 at WordPress. |
| CVE-2022-36387 | Critical | 2022-09-06 | Not applicable | No public exploit | Broken Access Control vulnerability in Alessio Caiazza's About Me plugin <= 1.0.12 at WordPress. |
| CVE-2022-34149 | Critical | 2022-08-22 | Not applicable | No public exploit | Authentication Bypass vulnerability in miniOrange WP OAuth Server plugin <= 3.0.4 at WordPress. |
| CVE-2022-34487 | Critical | 2022-07-21 | Not applicable | Exploited | Unauthenticated Arbitrary Option Update vulnerability in biplob018's Shortcode Addons plugin <= 3.0.2 at WordPress. |
| CVE-2022-33198 | Critical | 2022-07-21 | Not applicable | Exploited | Unauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress. |
| CVE-2022-29423 | Critical | 2022-05-06 | Not applicable | No public exploit | Pro Features Lock Bypass vulnerability in Countdown & Clock plugin <= 2.3.2 at WordPress. |
| CVE-2021-36879 | Critical | 2021-09-27 | Not applicable | No public exploit | Unauthenticated Privilege Escalation vulnerability in WordPress uListing plugin (versions <= 2.0.5). Possible if WordPress configuration allows user registration. |
| CVE-2020-3426 | Critical | 2020-09-24 | Not applicable | No public exploit | A vulnerability in the implementation of the Low Power, Wide Area (LPWA) subsystem of Cisco IOS Software for Cisco 800 Series Industrial Integrated Services Routers (Industrial ISRs) and Cisco 1000 Series Connected Grid Routers (CGR1000) could allow an unauthenticated, remote attacker to gain unauthorized read access to sensitive data or cause a denial of service (DoS) condition. The vulnerability is due to a lack of input and validation checking mechanisms for virtual-LPWA (VLPWA) protocol modem messages. An attacker could exploit this vulnerability by supplying crafted packets to an affected device. A successful exploit could allow the attacker to gain unauthorized read access to sensitive data or cause the VLPWA interface of the affected device to shut down, resulting in DoS condition. |
| CVE-2020-3227 | Critical | 2020-06-03 | Not applicable | No public exploit | A vulnerability in the authorization controls for the Cisco IOx application hosting infrastructure in Cisco IOS XE Software could allow an unauthenticated, remote attacker to execute Cisco IOx API commands without proper authorization. The vulnerability is due to incorrect handling of requests for authorization tokens. An attacker could exploit this vulnerability by using a crafted API call to request such a token. An exploit could allow the attacker to obtain an authorization token and execute any of the IOx API commands on an affected device. |
| CVE-2019-19106 | Critical | 2020-04-22 | Not applicable | No public exploit | Improper implementation of Access Control in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway allows an unauthorized user to access data marked as restricted, such as viewing or editing user profiles and application settings. |
| CVE-2019-10709 | Critical | 2019-09-04 | Not applicable | Working exploit published | AsusPTPFilter.sys on Asus Precision TouchPad 11.0.0.25 hardware has a Pool Overflow associated with the \\.\AsusTP device, leading to a DoS or potentially privilege escalation via a crafted DeviceIoControl call. |
| CVE-2016-10935 | Critical | 2019-08-27 | Not applicable | No public exploit | The woocommerce-exporter plugin before 1.8.4 for WordPress has privilege escalation. |
| CVE-2016-10923 | Critical | 2019-08-22 | Not applicable | No public exploit | The woocommerce-store-toolkit plugin before 1.5.8 for WordPress has privilege escalation. |
| CVE-2016-10922 | Critical | 2019-08-22 | Not applicable | No public exploit | The woocommerce-store-toolkit plugin before 1.5.7 for WordPress has privilege escalation. |
| CVE-2016-10886 | Critical | 2019-08-14 | Not applicable | No public exploit | The wp-editor plugin before 1.2.6 for WordPress has incorrect permissions. |
| CVE-2019-1620 | Critical | 2019-06-27 | Outside Waratek scope | Working exploit published | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to upload arbitrary files on an affected device. The vulnerability is due to incorrect permission settings in affected DCNM software. An attacker could exploit this vulnerability by uploading specially crafted data to the affected device. A successful exploit could allow the attacker to write arbitrary files on the filesystem and execute code with root privileges on the affected device. |
| CVE-2016-1579 | Critical | 2019-04-22 | Not applicable | No public exploit | UDM provides support for running commands after a download is completed, this is currently made use of for click package installation. This functionality was not restricted to unconfined applications. Before UDM version 1.2+16.04.20160408-0ubuntu1 any confined application could make use of the UDM C++ API to run arbitrary commands in an unconfined environment as the phablet user. |
| CVE-2019-1723 | Critical | 2019-03-13 | Outside Waratek scope | No public exploit | A vulnerability in the Cisco Common Services Platform Collector (CSPC) could allow an unauthenticated, remote attacker to access an affected device by using an account that has a default, static password. This account does not have administrator privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to the affected system using this account. A successful exploit could allow the attacker to log in to the CSPC using the default account. For Cisco CSPC 2.7.x, Cisco fixed this vulnerability in Release 2.7.4.6. For Cisco CSPC 2.8.x, Cisco fixed this vulnerability in Release 2.8.1.2. |
| CVE-2018-11462 | Critical | 2018-12-12 | Not applicable | No public exploit | A vulnerability has been identified in SINUMERIK 808D V4.7 (All versions), SINUMERIK 808D V4.8 (All versions), SINUMERIK 828D V4.7 (All versions < V4.7 SP6 HF1), SINUMERIK 840D sl V4.7 (All versions < V4.7 SP6 HF5), SINUMERIK 840D sl V4.8 (All versions < V4.8 SP3). By sending a specially crafted authentication request to the affected systems a remote attacker could escalate his privileges to an elevated user account but not to root. The security vulnerability could be exploited by an attacker with network access to the affected systems. Successful exploitation requires no privileges and no user interaction. The vulnerability could allow an attacker to compromise confidentiality, integrity and availability of the system. At the time of advisory publication no public exploitation of this security vulnerability was known. |
| CVE-2013-4451 | Critical | 2018-09-21 | Not applicable | No public exploit | gitolite commit fa06a34 through 3.5.3 might allow attackers to have unspecified impact via vectors involving world-writable permissions when creating (1) ~/.gitolite.rc, (2) ~/.gitolite, or (3) ~/repositories/gitolite-admin.git on fresh installs. |
| CVE-2018-0399 | Critical | 2018-07-18 | Outside Waratek scope | No public exploit | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to retrieve a cleartext password from an affected system. Cisco Bug IDs: CSCvg71044. |
| CVE-2018-0398 | Critical | 2018-07-18 | Outside Waratek scope | No public exploit | Multiple vulnerabilities in the web-based management interface of Cisco Finesse could allow an unauthenticated, remote attacker to conduct a server-side request forgery (SSRF) attack. Cisco Bug IDs: CSCvg71018. |
| CVE-2016-9075 | Critical | 2018-06-11 | Not applicable | No public exploit | An issue where WebExtensions can use the mozAddonManager API to elevate privilege due to privileged pages being allowed in the permissions list. This allows a malicious extension to then install additional extensions without explicit user permission. This vulnerability affects Firefox < 50. |
| CVE-2011-3172 | Critical | 2018-06-08 | Not applicable | No public exploit | A vulnerability in pam_modules of SUSE Linux Enterprise allows attackers to log into accounts that should have been disabled. Affected releases are SUSE Linux Enterprise: versions prior to 12. |
| CVE-2018-7505 | Critical | 2018-05-15 | Not applicable | No public exploit | In Advantech WebAccess versions V8.2_20170817 and prior, WebAccess versions V8.3.0 and prior, WebAccess Dashboard versions V.2.0.15 and prior, WebAccess Scada Node versions prior to 8.3.1, and WebAccess/NMS 2.0.3 and prior, a TFTP application has unrestricted file uploads to the web application without authorization, which may allow an attacker to execute arbitrary code. |
| CVE-2014-2552 | Critical | 2018-04-27 | Not applicable | No public exploit | Brookins Consulting (BC) Collected Information Export extension for eZ Publish 1.1.0 does not properly restrict access, which allows remote attackers to gain access to sensitive data. |
| CVE-2016-10457 | Critical | 2018-04-18 | Not applicable | No public exploit | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MDM9206, MDM9607, MDM9650, MSM8909W, SD 210/SD 212/SD 205, SD 400, SD 410/12, SD 425, SD 430, SD 450, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, SD 835, and SDX20, app is requesting more permissions than required. |
| CVE-2015-9196 | Critical | 2018-04-18 | Not applicable | No public exploit | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Small Cell SoC FSM9055, MDM9635M, SD 400, and SD 800, improper input validation in tzbsp_ocmem can cause privilege escalation. |
| CVE-2014-10057 | Critical | 2018-04-18 | Not applicable | No public exploit | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, MDM9640, MDM9650, SD 210/SD 212/SD 205, SD 400, SD 425, SD 430, SD 435, SD 617, SD 625, and Snapdragon_High_Med_2016, binary Calibration files under data/misc/audio have 777 permissions. |
| CVE-2014-10054 | Critical | 2018-04-18 | Not applicable | No public exploit | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon Wear MDM9206, MDM9607, MDM9635M, MDM9640, MDM9650, MSM8909W, QCA6174A, QCA6574AU, QCA9377, QCA9379, SD 210/SD 212/SD 205, SD 400, SD 450, SD 410/12, SD 425, SD 430, SD 600, SD 615/16/SD 415, SD 617, SD 625, SD 650/52, SD 800, SD 808, SD 810, SD 820, and SDX20, lack of input validation on BT HCI commands processing allows privilege escalation. |
| CVE-2016-8488 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-31625756. |
| CVE-2016-8487 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823724. |
| CVE-2016-8484 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-28823575. |
| CVE-2016-10299 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-32577244. |
| CVE-2016-10298 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393252. |
| CVE-2016-10233 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in the Qualcomm video driver. Product: Android. Versions: Android kernel. Android ID: A-34389926. References: QC-CR#897452. |
| CVE-2016-10230 | Critical | 2018-04-04 | Not applicable | No public exploit | A remote code execution vulnerability in the Qualcomm crypto driver. Product: Android. Versions: Android kernel. Android ID: A-34389927. References: QC-CR#1091408. |
| CVE-2015-9014 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393750. |
| CVE-2015-9013 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393251. |
| CVE-2015-9012 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384691. |
| CVE-2015-9011 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714882. |
| CVE-2015-9010 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393101. |
| CVE-2015-9009 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36393600. |
| CVE-2015-9008 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384689. |
| CVE-2014-9959 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36383694. |
| CVE-2014-9958 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384774. |
| CVE-2014-9957 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36387564. |
| CVE-2014-9956 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36389611. |
| CVE-2014-9955 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36384686. |
| CVE-2014-9954 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36388559. |
| CVE-2014-9953 | Critical | 2018-04-04 | Not applicable | No public exploit | An elevation of privilege vulnerability in Qualcomm closed source components. Product: Android. Versions: Android kernel. Android ID: A-36714770. |
| CVE-2018-5472 | Critical | 2018-03-26 | Not applicable | No public exploit | Philips Intellispace Portal all versions 7.0.x and 8.0.x have an insecure windows permissions vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code. |
| CVE-2018-5468 | Critical | 2018-03-26 | Not applicable | No public exploit | Philips Intellispace Portal all versions 7.0.x and 8.0.x have a remote desktop access vulnerability that could allow an attacker to gain unauthorized access and in some cases escalate their level of privilege or execute arbitrary code |
| CVE-2018-7500 | Critical | 2018-03-14 | Not applicable | No public exploit | A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account. |
| CVE-2018-0130 | Critical | 2018-02-22 | Not applicable | No public exploit | A vulnerability in the use of JSON web tokens by the web-based service portal of Cisco Elastic Services Controller Software could allow an unauthenticated, remote attacker to gain administrative access to an affected system. The vulnerability is due to the presence of static default credentials for the web-based service portal of the affected software. An attacker could exploit this vulnerability by extracting the credentials from an image of the affected software and using those credentials to generate a valid administrative session token for the web-based service portal of any other installation of the affected software. A successful exploit could allow the attacker to gain administrative access to the web-based service portal of an affected system. This vulnerability affects Cisco Elastic Services Controller Software Release 3.0.0. Cisco Bug IDs: CSCvg30884. |
| CVE-2014-7862 | Critical | 2018-01-04 | Not applicable | Working exploit published | The DCPluginServelet servlet in ManageEngine Desktop Central and Desktop Central MSP before build 90109 allows remote attackers to create administrator accounts via an addPlugInUser action. |
| CVE-2014-0073 | Critical | 2017-10-30 | Not applicable | No public exploit | The CDVInAppBrowser class in the Apache Cordova In-App-Browser standalone plugin (org.apache.cordova.inappbrowser) before 0.3.2 for iOS and the In-App-Browser plugin for iOS from Cordova 2.6.0 through 2.9.0 does not properly validate callback identifiers, which allows remote attackers to execute arbitrary JavaScript in the host page and consequently gain privileges via a crafted gap-iab: URI. |
| CVE-2017-12251 | Critical | 2017-10-19 | Not applicable | No public exploit | A vulnerability in the web console of the Cisco Cloud Services Platform (CSP) 2100 could allow an authenticated, remote attacker to interact maliciously with the services or virtual machines (VMs) operating remotely on an affected CSP device. The vulnerability is due to weaknesses in the generation of certain authentication mechanisms in the URL of the web console. An attacker could exploit this vulnerability by browsing to one of the hosted VMs' URLs in Cisco CSP and viewing specific patterns that control the web application's mechanisms for authentication control. An exploit could allow the attacker to access a specific VM on the CSP, which causes a complete loss of the system's confidentiality, integrity, and availability. This vulnerability affects Cisco Cloud Services Platform (CSP) 2100 running software release 2.1.0, 2.1.1, 2.1.2, 2.2.0, 2.2.1, or 2.2.2. Cisco Bug IDs: CSCve64690. |
| CVE-2015-4650 | Critical | 2017-10-16 | Outside Waratek scope | No public exploit | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors. |
| CVE-2015-4683 | Critical | 2017-09-19 | Not applicable | Working exploit published | Polycom RealPresence Resource Manager (aka RPRM) before 8.4 allows attackers to obtain sensitive information and potentially gain privileges by leveraging use of session identifiers as parameters with HTTP GET requests. |
| CVE-2015-4523 | Critical | 2017-09-11 | Not applicable | Working exploit published | Blue Coat Malware Analysis Appliance (MAA) before 4.2.5 and Malware Analyzer G2 allow remote attackers to bypass a virtual machine protection mechanism and consequently write to arbitrary files, cause a denial of service (host reboot or reset to factory defaults), or execute arbitrary code via vectors related to saving files during analysis. |
| CVE-2015-4629 | Critical | 2017-09-07 | Not applicable | No public exploit | Huawei E5756S before V200R002B146D23SP00C00 allows remote attackers to read device configuration information, enable PIN/PUK authentication, and perform other unspecified actions. |
| CVE-2014-8428 | Critical | 2017-08-28 | Not applicable | No public exploit | Privilege escalation vulnerability in Barracuda Load Balancer 5.0.0.015 via the use of an improperly protected SSH key. |
| CVE-2015-5244 | Critical | 2017-08-07 | Not applicable | No public exploit | The NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote attackers to bypass application restrictions. |
| CVE-2015-2560 | Critical | 2017-08-02 | Not applicable | No public exploit | Manage Engine Desktop Central 9 before build 90135 allows remote attackers to change passwords of users with the Administrator role via an addOrModifyUser operation to servlets/DCOperationsServlet. |
| CVE-2017-6713 | Critical | 2017-07-06 | Not applicable | No public exploit | A vulnerability in the Play Framework of Cisco Elastic Services Controller (ESC) could allow an unauthenticated, remote attacker to gain full access to the affected system. The vulnerability is due to static, default credentials for the Cisco ESC UI that are shared between installations. An attacker who can extract the static credentials from an existing installation of Cisco ESC could generate an admin session token that allows access to all instances of the ESC web UI. This vulnerability affects Cisco Elastic Services Controller prior to releases 2.3.1.434 and 2.3.2. Cisco Bug IDs: CSCvc76627. |
| CVE-2017-6640 | Critical | 2017-06-08 | Not applicable | No public exploit | A vulnerability in Cisco Prime Data Center Network Manager (DCNM) Software could allow an unauthenticated, remote attacker to log in to the administrative console of a DCNM server by using an account that has a default, static password. The account could be granted root- or system-level privileges. The vulnerability exists because the affected software has a default user account that has a default, static password. The user account is created automatically when the software is installed. An attacker could exploit this vulnerability by connecting remotely to an affected system and logging in to the affected software by using the credentials for this default user account. A successful exploit could allow the attacker to use this default user account to log in to the affected software and gain access to the administrative console of a DCNM server. This vulnerability affects Cisco Prime Data Center Network Manager (DCNM) Software releases prior to Release 10.2(1) for Microsoft Windows, Linux, and Virtual Appliance platforms. Cisco Bug IDs: CSCvd95346. |
| CVE-2016-4435 | Critical | 2017-05-25 | Not applicable | No public exploit | An endpoint of the Agent running on the BOSH Director VM with stemcell versions prior to 3232.6 and 3146.13 may allow unauthenticated clients to read or write blobs or cause a denial of service attack on the Director VM. This vulnerability requires that the unauthenticated clients guess or find a URL matching an existing GUID. |
| CVE-2017-6622 | Critical | 2017-05-18 | Not applicable | Working exploit published | A vulnerability in the web interface for Cisco Prime Collaboration Provisioning could allow an unauthenticated, remote attacker to bypass authentication and perform command injection with root privileges. The vulnerability is due to missing security constraints in certain HTTP request methods, which could allow access to files via the web interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the targeted application. This vulnerability affects Cisco Prime Collaboration Provisioning Software Releases prior to 12.1. Cisco Bug IDs: CSCvc98724. |
| CVE-2016-10372 | Critical | 2017-05-16 | Not applicable | Exploited | The Eir D1000 modem does not properly restrict the TR-064 protocol, which allows remote attackers to execute arbitrary commands via TCP port 7547, as demonstrated by opening WAN access to TCP port 80, retrieving the login password (which defaults to the Wi-Fi password), and using the NewNTPServer feature. |
| CVE-2016-8649 | Critical | 2017-05-01 | Not applicable | No public exploit | lxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged container to use an inherited file descriptor, of the host's /proc, to access the rest of the host's filesystem via the openat() family of syscalls. |
| CVE-2016-6903 | Critical | 2017-04-24 | Not applicable | No public exploit | lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. |
| CVE-2016-6902 | Critical | 2017-04-24 | Not applicable | No public exploit | lshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute arbitrary commands. |
| CVE-2016-3067 | Critical | 2017-04-21 | Not applicable | No public exploit | Cygwin before 2.5.0 does not properly handle updating permissions when changing users, which allows attackers to gain privileges. |
| CVE-2016-6727 | Critical | 2017-04-17 | Not applicable | No public exploit | The Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute arbitrary code. |
| CVE-2014-7921 | Critical | 2017-04-13 | Not applicable | No public exploit | mediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7920. |
| CVE-2014-7920 | Critical | 2017-04-13 | Not applicable | Proof of concept only | mediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE: This is a different vulnerability than CVE-2014-7921. |
| CVE-2015-8965 | Critical | 2017-04-06 | No exploit published | No public exploit | Rogue Wave JViews before 8.8 patch 21 and 8.9 before patch 1 allows remote attackers to execute arbitrary Java code that exists in the classpath, such as test code or administration code. The issue exists because the ilog.views.faces.IlvFacesController servlet in jviews-framework-all.jar does not require explicit configuration of servlets that can be called. |
| CVE-2016-10152 | Critical | 2017-03-28 | Not applicable | No public exploit | The read_config_file function in lib/hesiod.c in Hesiod 3.2.1 falls back to the ".athena.mit.edu" default domain when opening the configuration file fails, which allows remote attackers to gain root privileges by poisoning the DNS cache. |
| CVE-2014-7279 | Critical | 2017-03-23 | Not applicable | Working exploit published | The Konke Smart Plug K does not require authentication for TELNET sessions, which allows remote attackers to obtain "equipment management authority" via TCP traffic to port 23. |
| CVE-2015-8954 | Critical | 2017-03-20 | Not applicable | No public exploit | The MemcmpLowercase function in Suricata before 2.0.6 improperly excludes the first byte from comparisons, which might allow remote attackers to bypass intrusion-prevention functionality via a crafted HTTP request. |
| CVE-2014-8708 | Critical | 2017-03-17 | Not applicable | No public exploit | Pluck CMS 4.7.2 allows remote attackers to execute arbitrary code via the blog form feature. |
| CVE-2017-3831 | Critical | 2017-03-15 | Not applicable | No public exploit | A vulnerability in the web-based GUI of Cisco Mobility Express 1800 Series Access Points could allow an unauthenticated, remote attacker to bypass authentication. The attacker could be granted full administrator privileges. The vulnerability is due to improper implementation of authentication for accessing certain web pages using the GUI interface. An attacker could exploit this vulnerability by sending a crafted HTTP request to the web interface of the affected system. A successful exploit could allow the attacker to bypass authentication and perform unauthorized configuration changes or issue control commands to the affected device. This vulnerability affects Cisco Mobility Express 1800 Series Access Points running a software version prior to 8.2.110.0. Cisco Bug IDs: CSCuy68219. |
| CVE-2016-7955 | Critical | 2017-03-15 | Not applicable | No public exploit | The logcheck function in session.inc in AlienVault OSSIM before 5.3.1, when an action has been created, and USM before 5.3.1 allows remote attackers to bypass authentication and consequently obtain sensitive information, modify the application, or execute arbitrary code as root via an "AV Report Scheduler" HTTP User-Agent header. |
| CVE-2014-9921 | Critical | 2017-03-14 | Not applicable | No public exploit | Information disclosure vulnerability in McAfee (now Intel Security) Cloud Analysis and Deconstructive Services (CADS) 1.0.0.3x, 1.0.0.4d and earlier allows remote unauthenticated users to view, add, and remove users via a configuration error. |
| CVE-2016-9269 | Critical | 2017-02-21 | Not applicable | Working exploit published | Remote Command Execution in com.trend.iwss.gui.servlet.ManagePatches in Trend Micro Interscan Web Security Virtual Appliance (IWSVA) version 6.5-SP2_Build_Linux_1707 and earlier allows authenticated, remote users with least privileges to run arbitrary commands on the system as root via Patch Update functionality. This was resolved in Version 6.5 CP 1737. |
| CVE-2016-9366 | Critical | 2017-02-13 | Not applicable | No public exploit | An issue was discovered in Moxa NPort 5110 versions prior to 2.6, NPort 5130/5150 Series versions prior to 3.6, NPort 5200 Series versions prior to 2.8, NPort 5400 Series versions prior to 3.11, NPort 5600 Series versions prior to 3.7, NPort 5100A Series & NPort P5150A versions prior to 1.3, NPort 5200A Series versions prior to 1.3, NPort 5150AI-M12 Series versions prior to 1.2, NPort 5250AI-M12 Series versions prior to 1.2, NPort 5450AI-M12 Series versions prior to 1.2, NPort 5600-8-DT Series versions prior to 2.4, NPort 5600-8-DTL Series versions prior to 2.4, NPort 6x50 Series versions prior to 1.13.11, NPort IA5450A versions prior to v1.4. An attacker can freely use brute force to determine parameters needed to bypass authentication. |
| CVE-2016-8363 | Critical | 2017-02-13 | Not applicable | No public exploit | An issue was discovered in Moxa OnCell OnCellG3470A-LTE, AWK-1131A/3131A/4131A Series, AWK-3191 Series, AWK-5232/6232 Series, AWK-1121/1127 Series, WAC-1001 V2 Series, WAC-2004 Series, AWK-3121-M12-RTG Series, AWK-3131-M12-RCC Series, AWK-5232-M12-RCC Series, TAP-6226 Series, AWK-3121/4121 Series, AWK-3131/4131 Series, and AWK-5222/6222 Series. User is able to execute arbitrary OS commands on the server. |
| CVE-2015-8768 | Critical | 2017-02-13 | Not applicable | No public exploit | click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which allows remote attackers to install an alternate security policy and gain privileges via a crafted package, as demonstrated by the test.mmrow app for Ubuntu phone. |
| CVE-2016-10150 | Critical | 2017-02-06 | Not applicable | No public exploit | Use-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in the Linux kernel before 4.8.13 allows host OS users to cause a denial of service (host OS crash) or possibly gain privileges via crafted ioctl calls on the /dev/kvm device. |
| CVE-2015-2794 | Critical | 2017-02-06 | Not applicable | Working exploit published | The installation wizard in DotNetNuke (DNN) before 7.4.1 allows remote attackers to reinstall the application and gain SuperUser access via a direct request to Install/InstallWizard.aspx. |
| CVE-2016-9403 | Critical | 2017-01-31 | Not applicable | No public exploit | newreply.php in MyBB (aka MyBulletinBoard) before 1.8.7 and MyBB Merge System before 1.8.7 allows remote attackers to have unspecified impact by leveraging a missing permission check. |