Overview 2,245 matches · 62 in Waratek scope · 9 protected · 39 exploited · 2 CISA KEV · 429 public PoC · 38 EPSS ≥ 0.5
2,245matches
62in Waratek scope2.8%
9protected0.4%
39exploited1.7%
2CISA KEV0.1%
429public PoC19.1%
38EPSS ≥ 0.51.7%
Protected by Waratek
9
0.4%
Rule in development
0
0.0%
Mitigation candidate
4
0.2%
No exploit published
49
2.2%
Outside Waratek scope
30
1.3%
Not applicable
2,153
95.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
9
0.4%
partly blocked
0
0.0%
not blocked
2,236
99.6%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 468 / year
19971
Not applicable1
High1
not blocked1
No public exploit1
19981
Not applicable1
High1
not blocked1
No public exploit1
19996
Not applicable6
High6
not blocked6
Working exploit published2
No public exploit4
20002
Not applicable2
High2
not blocked2
Working exploit published2
20012
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
200212
No exploit published1
Not applicable11
High12
not blocked12
Working exploit published3
No public exploit9
200311
Not applicable11
High11
not blocked11
Working exploit published3
No public exploit8
200410
Not applicable10
High10
not blocked10
Working exploit published2
No public exploit8
200516
Outside Waratek scope1
Not applicable15
High16
not blocked16
Working exploit published5
No public exploit11
200625
No exploit published1
Not applicable24
High25
not blocked25
Working exploit published3
No public exploit22
200775
No exploit published2
Outside Waratek scope1
Not applicable72
High75
not blocked75
Exploited1
Working exploit published19
No public exploit55
2008208
Protected by Waratek2
Mitigation candidate1
No exploit published12
Outside Waratek scope2
Not applicable191
High208
blocked by ARMR today2
not blocked206
Exploited3
Working exploit published56
No public exploit149
2009153
No exploit published8
Outside Waratek scope2
Not applicable143
High153
not blocked153
Exploited3
Working exploit published80
No public exploit70
2010100
Not applicable100
High100
not blocked100
Exploited2
Working exploit published23
No public exploit75
201176
No exploit published2
Not applicable74
High76
not blocked76
Exploited3
Working exploit published8
No public exploit65
2012122
No exploit published2
Outside Waratek scope3
Not applicable117
High122
not blocked122
Exploited3
Working exploit published19
Proof of concept only2
No public exploit98
2013129
Protected by Waratek1
Mitigation candidate1
No exploit published1
Outside Waratek scope3
Not applicable123
High129
blocked by ARMR today1
not blocked128
Exploited7
Working exploit published13
No public exploit109
2014191
Protected by Waratek3
Mitigation candidate2
No exploit published1
Outside Waratek scope3
Not applicable182
High191
blocked by ARMR today3
not blocked188
Exploited6
Working exploit published21
Proof of concept only2
No public exploit162
2015217
Protected by Waratek1
No exploit published2
Outside Waratek scope1
Not applicable213
High217
blocked by ARMR today1
not blocked216
Exploited4
Working exploit published52
Proof of concept only3
No public exploit158
2016468
No exploit published6
Outside Waratek scope4
Not applicable458
High468
not blocked468
Exploited6
Working exploit published46
Proof of concept only5
Forecast only1
No public exploit410
2017220
No exploit published7
Outside Waratek scope2
Not applicable211
High220
not blocked220
Working exploit published21
No public exploit199
201872
No exploit published3
Outside Waratek scope4
Not applicable65
High72
not blocked72
Working exploit published2
No public exploit70
201948
No exploit published1
Outside Waratek scope3
Not applicable44
High48
not blocked48
Working exploit published4
No public exploit44
202024
Outside Waratek scope1
Not applicable23
High24
not blocked24
Working exploit published2
No public exploit22
20214
Protected by Waratek1
Not applicable3
High4
blocked by ARMR today1
not blocked3
No public exploit4
202221
Protected by Waratek1
Not applicable20
High21
blocked by ARMR today1
not blocked20
Exploited1
Proof of concept only1
No public exploit19
20239
Not applicable9
High9
not blocked9
No public exploit9
20248
Not applicable8
High8
not blocked8
No public exploit8
20259
Not applicable9
High9
not blocked9
No public exploit9
20265
Not applicable5
High5
not blocked5
No public exploit5
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-101176 | High | 2026-11-02 | Not applicable | No public exploit | Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-76412 | High | 2026-09-16 | Not applicable | No public exploit | A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability is due to an error when checking the privilege level of a user who is invoking remote diagnostics. An attacker could exploit this vulnerability by authenticating to the device, either through the web-based management interface or the REST API, and using the remote diagnostics debugger to grant a user elevated privileges. A successful exploit could allow the attacker to elevate privileges to root. Notes: To exploit this vulnerability, the attacker must have valid user credentials on the affected device. The CVSSv3.1 Attack Complexity is High due to the multistage process required to fully exploit this vulnerability. |
| CVE-2026-49315 | High | 2026-09-09 | Not applicable | No public exploit | DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49310 | High | 2026-09-09 | Not applicable | No public exploit | Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-20046 | High | 2026-03-11 | Not applicable | No public exploit | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device. This vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker with a low-privileged account could exploit this vulnerability by using the CLI command to bypass the task group–based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on an affected device without authorization checks. |
| CVE-2025-64315 | High | 2025-11-28 | Not applicable | No public exploit | Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity. |
| CVE-2025-58309 | High | 2025-11-28 | Not applicable | No public exploit | Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality. |
| CVE-2025-58302 | High | 2025-11-28 | Not applicable | No public exploit | Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2025-48903 | High | 2025-06-06 | Not applicable | No public exploit | Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2024-53011 | High | 2025-03-03 | Not applicable | No public exploit | Information disclosure may occur due to improper permission and access controls to Video Analytics engine. |
| CVE-2024-56444 | High | 2025-01-08 | Not applicable | No public exploit | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2024-56440 | High | 2025-01-08 | Not applicable | No public exploit | Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. |
| CVE-2023-52955 | High | 2025-01-08 | Not applicable | No public exploit | Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. |
| CVE-2024-43064 | High | 2025-01-06 | Not applicable | No public exploit | Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU. |
| CVE-2024-54104 | High | 2024-12-12 | Not applicable | No public exploit | Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2024-54103 | High | 2024-12-12 | Not applicable | No public exploit | Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2017-9711 | High | 2024-11-22 | Not applicable | No public exploit | Certain unprivileged processes are able to perform IOCTL calls. |
| CVE-2024-45442 | High | 2024-09-04 | Not applicable | No public exploit | Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability. |
| CVE-2024-21469 | High | 2024-07-01 | Not applicable | No public exploit | Memory corruption when an invoke call and a TEE call are bound for the same trusted application. |
| CVE-2023-42005 | High | 2024-05-29 | Not applicable | No public exploit | IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 265264. |
| CVE-2024-22452 | High | 2024-03-04 | Not applicable | No public exploit | Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. A low privilege user could potentially exploit this vulnerability by modifying files in the installation folder to execute arbitrary code, leading to privilege escalation. |
| CVE-2023-44281 | High | 2024-01-24 | Not applicable | No public exploit | Dell Pair Installer version prior to 1.2.1 contains an elevation of privilege vulnerability. A low privilege user with local access to the system could potentially exploit this vulnerability to delete arbitrary files and result in Denial of Service. |
| CVE-2023-39406 | High | 2023-08-13 | Not applicable | No public exploit | Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart. |
| CVE-2023-39394 | High | 2023-08-13 | Not applicable | No public exploit | Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified. |
| CVE-2023-39391 | High | 2023-08-13 | Not applicable | No public exploit | Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality. |
| CVE-2023-39384 | High | 2023-08-13 | Not applicable | No public exploit | Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abnormally. |
| CVE-2023-39380 | High | 2023-08-13 | Not applicable | No public exploit | Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally. |
| CVE-2022-48508 | High | 2023-07-06 | Not applicable | No public exploit | Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity. |
| CVE-2023-21641 | High | 2023-07-04 | Not applicable | No public exploit | An app with non-privileged access can change global system brightness and cause undesired system behavior. |
| CVE-2023-22633 | High | 2023-06-13 | Not applicable | No public exploit | An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions 8.7.0 all versions may allow an unauthenticated attacker to perform a DoS attack on the device via client-secure renegotiation. |
| CVE-2023-24573 | High | 2023-02-10 | Not applicable | No public exploit | Dell Command | Monitor versions prior to 10.9 contain an arbitrary folder delete vulnerability during uninstallation. A locally authenticated malicious user may potentially exploit this vulnerability leading to arbitrary folder deletion. |
| CVE-2022-42461 | High | 2022-11-18 | Not applicable | No public exploit | Broken Access Control vulnerability in miniOrange's Google Authenticator plugin <= 5.6.1 on WordPress. |
| CVE-2022-42459 | High | 2022-11-18 | Not applicable | No public exploit | Auth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin <= 9.7.1 on WordPress. |
| CVE-2022-45069 | High | 2022-11-17 | Not applicable | No public exploit | Auth. (contributor+) Privilege Escalation vulnerability in Crowdsignal Dashboard plugin <= 3.0.9 on WordPress. |
| CVE-2022-45066 | High | 2022-11-17 | Not applicable | No public exploit | Auth. (subscriber+) Broken Access Control vulnerability in WooSwipe WooCommerce Gallery plugin <= 2.0.1 on WordPress. |
| CVE-2022-41978 | High | 2022-11-09 | Not applicable | No public exploit | Auth. (subscriber+) Arbitrary Options Update vulnerability in Zoho CRM Lead Magnet plugin <= 1.7.5.8 on WordPress. |
| CVE-2022-38104 | High | 2022-10-21 | Not applicable | No public exploit | Auth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari's Accordions – Multiple Accordions or FAQs Builder plugin (versions <= 2.0.3 on WordPress. |
| CVE-2022-3421 | High | 2022-10-17 | Not applicable | No public exploit | An attacker can pre-create the `/Applications/Google\ Drive.app/Contents/MacOS` directory which is expected to be owned by root to be owned by a non-root user. When the Drive for Desktop installer is run for the first time, it will place a binary in that directory with execute permissions and set its setuid bit. Since the attacker owns the directory, the attacker can replace the binary with a symlink, causing the installer to set the setuid bit on the symlink. When the symlink is executed, it will run with root permissions. We recommend upgrading past version 64.0 |
| CVE-2021-28052 | High | 2022-09-26 | Not applicable | No public exploit | A tenant administrator Hitachi Content Platform (HCP) may modify the configuration in another tenant without authorization, potentially allowing unauthorized access to data in the other tenant. Also, a tenant user (non-administrator) may view configuration in another tenant without authorization. This issue affects: Hitachi Vantara Hitachi Content Platform versions prior to 8.3.7; 9.0.0 versions prior to 9.2.3. |
| CVE-2022-38134 | High | 2022-09-23 | Not applicable | No public exploit | Authenticated (subscriber+) Broken Access Control vulnerability in Customer Reviews for WooCommerce plugin <= 5.3.5 at WordPress. |
| CVE-2022-38070 | High | 2022-09-09 | Not applicable | No public exploit | Privilege Escalation (subscriber+) vulnerability in Pop-up plugin <= 1.1.5 at WordPress. |
| CVE-2022-34868 | High | 2022-08-23 | Not applicable | No public exploit | Authenticated Arbitrary Settings Update vulnerability in YooMoney ЮKassa для WooCommerce plugin <= 2.3.0 at WordPress. |
| CVE-2022-25649 | High | 2022-08-05 | Not applicable | No public exploit | Multiple Improper Access Control vulnerabilities in StoreApps Affiliate For WooCommerce premium plugin <= 4.7.0 at WordPress. |
| CVE-2022-33970 | High | 2022-07-27 | Not applicable | No public exploit | Authenticated WordPress Options Change vulnerability in Biplob018 Shortcode Addons plugin <= 3.1.2 at WordPress. |
| CVE-2022-36375 | High | 2022-07-25 | Not applicable | No public exploit | Authenticated (high role user) WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin <= 3.6.0 at WordPress. |
| CVE-2022-33969 | High | 2022-07-25 | Not applicable | No public exploit | Authenticated WordPress Options Change vulnerability in Biplob Adhikari's Flipbox plugin <= 2.6.0 at WordPress. |
| CVE-2022-27235 | High | 2022-07-22 | Not applicable | No public exploit | Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress. |
| CVE-2022-23714 | High | 2022-07-06 | Not applicable | Exploited | A local privilege escalation (LPE) issue was discovered in the ransomware canaries features of Elastic Endpoint Security for Windows, which could allow unprivileged users to elevate their privileges to those of the LocalSystem account. |
| CVE-2021-33036 | High | 2022-06-15 | Protected by Waratek | No public exploit | In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary commands as root user. Users should upgrade to Apache Hadoop 2.10.2, 3.2.3, 3.3.2 or higher. |
| CVE-2022-1548 | High | 2022-05-03 | Not applicable | No public exploit | Mattermost Playbooks plugin 1.25 and earlier fails to properly restrict user-level permissions, which allows playbook members to escalate their membership privileges and perform actions restricted to playbook admins. |
| CVE-2022-0237 | High | 2022-03-17 | Not applicable | No public exploit | Rapid7 Insight Agent versions 3.1.2.38 and earlier suffer from a privilege escalation vulnerability, whereby an attacker can hijack the flow of execution due to an unquoted argument to the runas.exe command used by the ir_agent.exe component, resulting in elevated rights and persistent access to the machine. This issue was fixed in Rapid7 Insight Agent version 3.1.3.80. |
| CVE-2022-23731 | High | 2022-03-11 | Not applicable | Proof of concept only | V8 javascript engine (heap vulnerability) can cause privilege escalation ,which can impact on some webOS TV models. |
| CVE-2021-27644 | High | 2021-11-01 | Protected by Waratek | No public exploit | In Apache DolphinScheduler before 1.3.6 versions, authorized users can use SQL injection in the data source center. (Only applicable to MySQL data source with internal login account password) |
| CVE-2021-28497 | High | 2021-09-09 | Not applicable | No public exploit | In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, the bash shell might be accessible to unprivileged users in situations where they should not have access. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.26.6 and below releases in the MOS-0.2x train MOS-0.31.1 and below releases in the MOS-0.3x train |
| CVE-2021-22661 | High | 2021-02-26 | Not applicable | No public exploit | Changing the password on the module webpage does not require the user to type in the current password first. Thus, the password could be changed by a user or external process without knowledge of the current password on the ICX35-HWC-A and ICX35-HWC-E (Versions 1.9.62 and prior). |
| CVE-2019-18945 | High | 2021-02-26 | Not applicable | No public exploit | Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability. |
| CVE-2020-3530 | High | 2020-09-04 | Not applicable | No public exploit | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to execute that command, even though administrative privileges should be required. The attacker must have valid credentials on the affected device. The vulnerability is due to incorrect mapping in the source code of task group assignments for a specific command. An attacker could exploit this vulnerability by issuing the command, which they should not be authorized to issue, on an affected device. A successful exploit could allow the attacker to invalidate the integrity of the disk and cause the device to restart. This vulnerability could allow a user with read permissions to issue a specific command that should require Administrator privileges. |
| CVE-2020-3473 | High | 2020-09-04 | Not applicable | No public exploit | A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local CLI shell user to elevate privileges and gain full administrative control of the device. The vulnerability is due to incorrect mapping of a command to task groups within the source code. An attacker could exploit this vulnerability by first authenticating to the local CLI shell on the device and using the CLI command to bypass the task group–based checks. A successful exploit could allow the attacker to elevate privileges and perform actions on the device without authorization checks. |
| CVE-2020-3443 | High | 2020-08-26 | Not applicable | No public exploit | A vulnerability in Cisco Smart Software Manager On-Prem (SSM On-Prem) could allow an authenticated, remote attacker to elevate privileges and execute commands with higher privileges. The vulnerability is due to insufficient authorization of the System Operator role capabilities. An attacker could exploit this vulnerability by logging in with the System Operator role, performing a series of actions, and then assuming a new higher privileged role. A successful exploit could allow the attacker to perform all actions associated with the privilege of the assumed role. If that role is an administrative role, the attacker would gain full access to the device. |
| CVE-2020-7352 | High | 2020-08-06 | Not applicable | Working exploit published | The GalaxyClientService component of GOG Galaxy runs with elevated SYSTEM privileges in a Windows environment. Due to the software shipping with embedded, static RSA private key, an attacker with this key material and local user permissions can effectively send any operating system command to the service for execution in this elevated context. The service listens for such commands on a locally-bound network port, localhost:9978. A Metasploit module has been published which exploits this vulnerability. This issue affects the 2.0.x branch of the software (2.0.12 and earlier) as well as the 1.2.x branch (1.2.64 and earlier). A fix was issued for the 2.0.x branch of the affected software. |
| CVE-2020-11933 | High | 2020-07-29 | Not applicable | No public exploit | cloud-init as managed by snapd on Ubuntu Core 16 and Ubuntu Core 18 devices was run without restrictions on every boot, which a physical attacker could exploit by crafting cloud-init user-data/meta-data via external media to perform arbitrary changes on the device to bypass intended security mechanisms such as full disk encryption. This issue did not affect traditional Ubuntu systems. Fixed in snapd version 2.45.2, revision 8539 and core version 2.45.2, revision 9659. |
| CVE-2020-12028 | High | 2020-07-20 | Not applicable | Working exploit published | In all versions of FactoryTalk View SEA remote, an authenticated attacker may be able to utilize certain handlers to interact with the data on the remote endpoint since those handlers do not enforce appropriate permissions. Rockwell Automation recommends enabling built in security features found within FactoryTalk View SE. Users should follow guidance found in knowledge base articles 109056 and 1126943 to set up IPSec and/or HTTPs. |
| CVE-2020-3379 | High | 2020-07-16 | Not applicable | No public exploit | A vulnerability in Cisco SD-WAN Solution Software could allow an authenticated, local attacker to elevate privileges to Administrator on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain administrative privileges. |
| CVE-2020-3180 | High | 2020-07-16 | Not applicable | No public exploit | A vulnerability in Cisco SD-WAN Solution Software could allow an unauthenticated, local attacker to access an affected device by using an account that has a default, static password. This account has root privileges. The vulnerability exists because the affected software has a user account with a default, static password. An attacker could exploit this vulnerability by remotely connecting to an affected system by using this account. A successful exploit could allow the attacker to log in by using this account with root privileges. |
| CVE-2020-3229 | High | 2020-06-03 | Not applicable | No public exploit | A vulnerability in Role Based Access Control (RBAC) functionality of Cisco IOS XE Web Management Software could allow a Read-Only authenticated, remote attacker to execute commands or configuration changes as an Admin user. The vulnerability is due to incorrect handling of RBAC for the administration GUI. An attacker could exploit this vulnerability by sending a modified HTTP request to the affected device. An exploit could allow the attacker as a Read-Only user to execute CLI commands or configuration changes as if they were an Admin user. |
| CVE-2020-8489 | High | 2020-04-29 | Not applicable | No public exploit | Insufficient protection of the inter-process communication functions in ABB System 800xA Information Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting the runtime values to be stored in the archive, or making Information Management history services unavailable. |
| CVE-2020-8488 | High | 2020-04-29 | Not applicable | No public exploit | Insufficient protection of the inter-process communication functions in ABB System 800xA Batch Management (all published versions) enables an attacker authenticated on the local system to inject data, affecting User Interface update during batch execution and/or compare/printing functionalities. |
| CVE-2020-8487 | High | 2020-04-29 | Not applicable | No public exploit | Insufficient protection of the inter-process communication functions in ABB System 800xA Base (all published versions) enables an attacker authenticated on the local system to inject data, affect node redundancy handling. |
| CVE-2020-8486 | High | 2020-04-29 | Not applicable | No public exploit | Insufficient protection of the inter-process communication functions in ABB System 800xA RNRP (all published versions) enables an attacker authenticated on the local system to inject data, affect node redundancy handling. |
| CVE-2020-8485 | High | 2020-04-29 | Not applicable | No public exploit | Insufficient protection of the inter-process communication functions in ABB System 800xA for MOD 300 (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash. |
| CVE-2020-8484 | High | 2020-04-29 | Not applicable | No public exploit | Insufficient protection of the inter-process communication functions in ABB System 800xA for DCI (all published versions) enables an attacker authenticated on the local system to inject data, allowing reads and writes to the controllers or cause windows processes to crash. |
| CVE-2019-19100 | High | 2020-04-29 | Not applicable | No public exploit | A privilege escalation vulnerability in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x, 4.2.x, < 4.3.11SP, < 4.4.9SP, < 4.5.4SP, <. 4.6.3SP, < 4.7.2 and < 4.8.1 allow authenticated users to delete arbitrary files via an exposed interface. |
| CVE-2020-7259 | High | 2020-04-15 | Not applicable | No public exploit | Exploitation of Privilege/Trust vulnerability in file in McAfee Endpoint Security (ENS) Prior to 10.7.0 February 2020 Update allows local users to bypass local security protection via a carefully crafted input file |
| CVE-2020-7257 | High | 2020-04-15 | Not applicable | No public exploit | Privilege escalation vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to cause the deletion and creation of files they would not normally have permission to through altering the target of symbolic links whilst an anti-virus scan was in progress. This is timing dependent. |
| CVE-2020-7260 | High | 2020-03-26 | Not applicable | No public exploit | DLL Side Loading vulnerability in the installer for McAfee Application and Change Control (MACC) prior to 8.3 allows local users to execute arbitrary code via execution from a compromised folder. |
| CVE-2020-3265 | High | 2020-03-19 | Not applicable | No public exploit | A vulnerability in Cisco SD-WAN Solution software could allow an authenticated, local attacker to elevate privileges to root on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted request to an affected system. A successful exploit could allow the attacker to gain root-level privileges. |
| CVE-2020-7254 | High | 2020-03-12 | Not applicable | No public exploit | Privilege Escalation vulnerability in the command line interface in McAfee Advanced Threat Defense (ATD) 4.x prior to 4.8.2 allows local users to execute arbitrary code via improper access controls on the sudo command. |
| CVE-2020-3112 | High | 2020-02-19 | Outside Waratek scope | No public exploit | A vulnerability in the REST API endpoint of Cisco Data Center Network Manager (DCNM) could allow an authenticated, remote attacker to elevate privileges on the application. The vulnerability is due to insufficient access control validation. An attacker could exploit this vulnerability by authenticating with a low-privilege account and sending a crafted request to the API. A successful exploit could allow the attacker to interact with the API with administrative privileges. |
| CVE-2020-8093 | High | 2020-01-30 | Not applicable | No public exploit | A vulnerability in the AntivirusforMac binary as used in Bitdefender Antivirus for Mac allows an attacker to inject a library using DYLD environment variable to cause third-party code execution |
| CVE-2020-3115 | High | 2020-01-26 | Not applicable | No public exploit | A vulnerability in the CLI of the Cisco SD-WAN Solution vManage software could allow an authenticated, local attacker to elevate privileges to root-level privileges on the underlying operating system. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted file to the affected system. An exploit could allow the attacker to elevate privileges to root-level privileges. |
| CVE-2019-11773 | High | 2019-09-12 | Not applicable | No public exploit | Prior to 0.1, AIX builds of Eclipse OMR contain unused RPATHs which may facilitate code injection and privilege elevation by local users. |
| CVE-2019-1966 | High | 2019-08-30 | Outside Waratek scope | No public exploit | A vulnerability in a specific CLI command within the local management (local-mgmt) context for Cisco UCS Fabric Interconnect Software could allow an authenticated, local attacker to gain elevated privileges as the root user on an affected device. The vulnerability is due to extraneous subcommand options present for a specific CLI command within the local-mgmt context. An attacker could exploit this vulnerability by authenticating to an affected device, entering the local-mgmt context, and issuing a specific CLI command and submitting user input. A successful exploit could allow the attacker to execute arbitrary operating system commands as root on an affected device. The attacker would need to have valid user credentials for the device. |
| CVE-2019-11245 | High | 2019-08-29 | Not applicable | No public exploit | In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true, the kubelet will refuse to start the container as root. If the pod did not specify mustRunAsNonRoot: true, the kubelet will run the container as uid 0. |
| CVE-2017-18584 | High | 2019-08-22 | Not applicable | No public exploit | The post-pay-counter plugin before 2.731 for WordPress has no permissions check for an update-settinga action. |
| CVE-2019-14257 | High | 2019-08-21 | Not applicable | No public exploit | pyraw in Zenoss 2.5.3 allows local privilege escalation by modifying environment variables to redirect execution before privileges are dropped, aka ZEN-31765. |
| CVE-2019-12634 | High | 2019-08-21 | Outside Waratek scope | No public exploit | A vulnerability in the web-based management interface of Cisco Integrated Management Controller (IMC) Supervisor, Cisco UCS Director, and Cisco UCS Director Express for Big Data could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition. The vulnerability is due to a missing authentication check in an API call. An attacker who can send a request to an affected system could cause all currently authenticated users to be logged off. Repeated exploitation could cause the inability to maintain a session in the web-based management portal. |
| CVE-2019-2122 | High | 2019-08-20 | Not applicable | No public exploit | In LockTaskController.lockKeyguardIfNeeded of the LockTaskController.java, there was a difference in the handling of the default case between the WindowManager and the Settings. This could lead to a local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Versions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9. Android ID: A-127605586. |
| CVE-2019-12808 | High | 2019-08-13 | Not applicable | No public exploit | ALTOOLS update service 18.1 and earlier versions contains a local privilege escalation vulnerability due to insecure permission. An attacker can overwrite an executable that is launched as a service to exploit this vulnerability and execute arbitrary code with system privileges. |
| CVE-2017-18413 | High | 2019-08-02 | Not applicable | No public exploit | In cPanel before 67.9999.103, the backup system overwrites root's home directory when a mount disappears (SEC-299). |
| CVE-2017-18383 | High | 2019-08-02 | Not applicable | No public exploit | cPanel before 68.0.15 writes home-directory backups to an incorrect location (SEC-309). |
| CVE-2019-11771 | High | 2019-07-17 | No exploit published | No public exploit | AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users. |
| CVE-2019-1889 | High | 2019-07-04 | Not applicable | No public exploit | A vulnerability in the REST API for software device management in Cisco Application Policy Infrastructure Controller (APIC) Software could allow an authenticated, remote attacker to escalate privileges to root on an affected device. The vulnerability is due to incomplete validation and error checking for the file path when specific software is uploaded. An attacker could exploit this vulnerability by uploading malicious software using the REST API. A successful exploit could allow an attacker to escalate their privilege level to root. The attacker would need to have the administrator role on the device. |
| CVE-2019-1855 | High | 2019-07-04 | Not applicable | No public exploit | A vulnerability in the loading mechanism of specific dynamic link libraries in Cisco Jabber for Windows could allow an authenticated, local attacker to perform a DLL preloading attack. To exploit this vulnerability, the attacker would need to have valid credentials on the Windows system. The vulnerability is due to insufficient validation of the resources loaded by the application at run time. An attacker could exploit this vulnerability by crafting a malicious DLL file and placing it in a specific location on the targeted system. The malicious DLL file would execute when the Jabber application launches. A successful exploit could allow the attacker to execute arbitrary code on the target machine with the privileges of another user's account. |
| CVE-2017-8230 | High | 2019-07-03 | Not applicable | No public exploit | On Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices, the users on the device are divided into 2 groups "admin" and "user". However, as a part of security analysis it was identified that a low privileged user who belongs to the "user" group and who has access to login in to the web administrative interface of the device can add a new administrative user to the interface using HTTP APIs provided by the device and perform all the actions as an administrative user by using that account. If the firmware version V2.420.AC00.16.R 9/9/2016 is dissected using binwalk tool, one obtains a _user-x.squashfs.img.extracted archive which contains the filesystem set up on the device that many of the binaries in the /usr folder. The binary "sonia" is the one that has the vulnerable functions that performs the various action described in HTTP APIs. If one opens this binary in IDA-pro one will notice that this follows a ARM little endian format. The function at address 0x00429084 in IDA pro is the one that processes the HTTP API request for "addUser" action. If one traces the calls to this function, it can be clearly seen that the function sub_ 41F38C at address 0x0041F588 parses the call received from the browser and passes it to the "addUser" function without any authorization check. |
| CVE-2017-8228 | High | 2019-07-03 | Not applicable | No public exploit | Amcrest IPM-721S V2.420.AC00.16.R.20160909 devices mishandle reboots within the past two hours. Amcrest cloud services does not perform a thorough verification when allowing the user to add a new camera to the user's account to ensure that the user actually owns the camera other than knowing the serial number of the camera. This can allow an attacker who knows the serial number to easily add another user's camera to an attacker's cloud account and control it completely. This is possible in case of any camera that is currently not a part of an Amcrest cloud account or has been removed from the user's cloud account. Also, another requirement for a successful attack is that the user should have rebooted the camera in the last two hours. However, both of these conditions are very likely for new cameras that are sold over the Internet at many ecommerce websites or vendors that sell the Amcrest products. The successful attack results in an attacker being able to completely control the camera which includes being able to view and listen on what the camera can see, being able to change the motion detection settings and also be able to turn the camera off without the user being aware of it. Note: The same attack can be executed using the Amcrest Cloud mobile application. |
| CVE-2019-13125 | High | 2019-07-01 | Not applicable | No public exploit | HaboMalHunter through 2.0.0.3 in Tencent Habo allows attackers to evade dynamic malware analysis via PIE compilation. |
| CVE-2019-1621 | High | 2019-06-27 | Outside Waratek scope | No public exploit | A vulnerability in the web-based management interface of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settings on affected DCNM software. An attacker could exploit this vulnerability by connecting to the web-based management interface of an affected device and requesting specific URLs. A successful exploit could allow the attacker to download arbitrary files from the underlying filesystem of the affected device. |
| CVE-2019-1626 | High | 2019-06-20 | Not applicable | No public exploit | A vulnerability in the vManage web-based UI (Web UI) of the Cisco SD-WAN Solution could allow an authenticated, remote attacker to gain elevated privileges on an affected vManage device. The vulnerability is due to a failure to properly authorize certain user actions in the device configuration. An attacker could exploit this vulnerability by logging in to the vManage Web UI and sending crafted HTTP requests to vManage. A successful exploit could allow attackers to gain elevated privileges and make changes to the configuration that they would not normally be authorized to make. |
| CVE-2019-1625 | High | 2019-06-20 | Not applicable | No public exploit | A vulnerability in the CLI of Cisco SD-WAN Solution could allow an authenticated, local attacker to elevate lower-level privileges to the root user on an affected device. The vulnerability is due to insufficient authorization enforcement. An attacker could exploit this vulnerability by authenticating to the targeted device and executing commands that could lead to elevated privileges. A successful exploit could allow the attacker to make configuration changes to the system as the root user. |
| CVE-2019-2003 | High | 2019-06-19 | Not applicable | No public exploit | In addLinks of Linkify.java, there is a possible phishing vector due to an unusual root cause. This could lead to remote code execution or misdirection of clicks with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-7.0 Android-7.1.1 Android-7.1.2 Android-8.0 Android-8.1 Android-9Android ID: A-116321860 |