Overview 2,651 matches · 105 in Waratek scope · 6 protected · 13 exploited · 1 CISA KEV · 308 public PoC · 46 EPSS ≥ 0.5
2,651matches
105in Waratek scope4.0%
6protected0.2%
13exploited0.5%
1CISA KEV0.0%
308public PoC11.6%
46EPSS ≥ 0.51.7%
Protected by Waratek
6
0.2%
Rule in development
0
0.0%
Mitigation candidate
3
0.1%
No exploit published
96
3.6%
Outside Waratek scope
49
1.8%
Not applicable
2,497
94.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
6
0.2%
partly blocked
0
0.0%
not blocked
2,645
99.8%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 401 / year
19961
Not applicable1
Medium1
not blocked1
No public exploit1
19971
Not applicable1
Medium1
not blocked1
No public exploit1
19980
19990
20000
20011
Not applicable1
Medium1
not blocked1
No public exploit1
200214
Not applicable14
Medium14
not blocked14
Working exploit published1
No public exploit13
20036
Not applicable6
Medium6
not blocked6
Working exploit published2
No public exploit4
20049
Outside Waratek scope1
Not applicable8
Medium9
not blocked9
Working exploit published2
No public exploit7
200519
Not applicable19
Medium19
not blocked19
Working exploit published3
No public exploit16
200622
Not applicable22
Medium22
not blocked22
Working exploit published4
No public exploit18
2007124
No exploit published2
Outside Waratek scope3
Not applicable119
Medium124
not blocked124
Exploited1
Working exploit published23
No public exploit100
2008203
No exploit published10
Outside Waratek scope1
Not applicable192
Medium203
not blocked203
Working exploit published44
Proof of concept only1
No public exploit158
2009239
No exploit published12
Outside Waratek scope2
Not applicable225
Medium239
not blocked239
Exploited1
Working exploit published101
No public exploit137
2010196
No exploit published3
Outside Waratek scope1
Not applicable192
Medium196
not blocked196
Working exploit published28
Proof of concept only1
No public exploit167
2011150
No exploit published12
Outside Waratek scope2
Not applicable136
Medium150
not blocked150
Exploited1
Working exploit published11
No public exploit138
2012362
Mitigation candidate3
No exploit published12
Not applicable347
Medium362
not blocked362
Exploited3
Working exploit published16
Forecast only42
No public exploit301
2013344
No exploit published11
Outside Waratek scope13
Not applicable320
Medium344
not blocked344
Exploited2
Working exploit published10
No public exploit332
2014401
Protected by Waratek5
No exploit published13
Outside Waratek scope8
Not applicable375
Medium401
blocked by ARMR today5
not blocked396
Exploited3
Working exploit published25
No public exploit373
2015275
Protected by Waratek1
No exploit published13
Outside Waratek scope6
Not applicable255
Medium275
blocked by ARMR today1
not blocked274
Exploited1
Working exploit published20
No public exploit254
201696
No exploit published4
Outside Waratek scope3
Not applicable89
Medium96
not blocked96
Working exploit published4
No public exploit92
201749
No exploit published1
Outside Waratek scope2
Not applicable46
Medium49
not blocked49
Working exploit published3
Proof of concept only1
No public exploit45
201817
No exploit published1
Not applicable16
Medium17
not blocked17
Working exploit published1
No public exploit16
201927
Outside Waratek scope6
Not applicable21
Medium27
not blocked27
Working exploit published2
No public exploit25
202015
Outside Waratek scope1
Not applicable14
Medium15
not blocked15
No public exploit15
20218
No exploit published1
Not applicable7
Medium8
not blocked8
No public exploit8
202215
No exploit published1
Not applicable14
Medium15
not blocked15
Exploited1
Proof of concept only1
No public exploit13
20233
Not applicable3
Medium3
not blocked3
Proof of concept only1
No public exploit2
202411
Not applicable11
Medium11
not blocked11
No public exploit11
202518
Not applicable18
Medium18
not blocked18
Proof of concept only1
No public exploit17
202625
Not applicable25
Medium25
not blocked25
Proof of concept only3
No public exploit22
19961999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-101184 | Medium | 2026-11-02 | Not applicable | No public exploit | Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-101172 | Medium | 2026-11-02 | Not applicable | No public exploit | Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality. |
| CVE-2026-116367 | Medium | 2026-10-26 | Not applicable | Proof of concept only | A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possible to launch the attack remotely. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2026-76488 | Medium | 2026-10-07 | Not applicable | No public exploit | A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability, the attacker must have valid administrative credentials. This vulnerability is due to insufficient access control to file system resources. An attacker could exploit this vulnerability by submitting crafted values in specific UI fields. A successful exploit could allow the attacker to access sensitive files from the underlying file system of an affected device, including key materials that could be used to elevate privileges to root on the affected APIC and on managed switches. |
| CVE-2026-101102 | Medium | 2026-09-28 | Not applicable | No public exploit | A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's own code, SAFETY.md, and design notes all explicitly state the worker is "containment, not a security boundary". The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2026-81644 | Medium | 2026-09-09 | Not applicable | No public exploit | DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49313 | Medium | 2026-09-09 | Not applicable | No public exploit | Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49312 | Medium | 2026-09-09 | Not applicable | No public exploit | Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49309 | Medium | 2026-09-09 | Not applicable | No public exploit | Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-41987 | Medium | 2026-09-09 | Not applicable | No public exploit | Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49308 | Medium | 2026-08-17 | Not applicable | No public exploit | Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-49304 | Medium | 2026-08-17 | Not applicable | No public exploit | Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-49303 | Medium | 2026-08-17 | Not applicable | No public exploit | Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-58556 | Medium | 2026-07-15 | Not applicable | No public exploit | Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-58555 | Medium | 2026-07-15 | Not applicable | No public exploit | Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2026-14784 | Medium | 2026-07-06 | Not applicable | No public exploit | A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipulation leads to sandbox issue. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance. |
| CVE-2026-9368 | Medium | 2026-05-24 | Not applicable | Proof of concept only | A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of the file tools/code_execution_tool.py of the component Environment Variable Handler. Such manipulation leads to sandbox issue. It is possible to launch the attack remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2026-6224 | Medium | 2026-04-13 | Not applicable | Proof of concept only | A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. This issue affects the function createSafeConsole of the file packages/plugins/@nocobase/plugin-workflow-javascript/src/server/Vm.js. Performing a manipulation results in sandbox issue. The attack can be initiated remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2026-28541 | Medium | 2026-03-05 | Not applicable | No public exploit | Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2025-66319 | Medium | 2026-03-05 | Not applicable | No public exploit | Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity. |
| CVE-2026-24931 | Medium | 2026-02-06 | Not applicable | No public exploit | Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-24924 | Medium | 2026-02-06 | Not applicable | No public exploit | Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-24923 | Medium | 2026-02-06 | Not applicable | No public exploit | Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2026-24920 | Medium | 2026-02-06 | Not applicable | No public exploit | Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2025-68967 | Medium | 2026-01-14 | Not applicable | No public exploit | Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2025-66329 | Medium | 2025-12-08 | Not applicable | No public exploit | Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2025-66325 | Medium | 2025-12-08 | Not applicable | No public exploit | Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2025-58315 | Medium | 2025-11-28 | Not applicable | No public exploit | Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2025-58312 | Medium | 2025-11-28 | Not applicable | No public exploit | Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2025-58294 | Medium | 2025-11-28 | Not applicable | No public exploit | Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2025-58293 | Medium | 2025-10-11 | Not applicable | No public exploit | Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability. |
| CVE-2025-58285 | Medium | 2025-10-11 | Not applicable | No public exploit | Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2025-58284 | Medium | 2025-10-11 | Not applicable | No public exploit | Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2025-58283 | Medium | 2025-10-11 | Not applicable | No public exploit | Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2025-58282 | Medium | 2025-10-11 | Not applicable | No public exploit | Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2025-54654 | Medium | 2025-10-11 | Not applicable | No public exploit | Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality |
| CVE-2025-58276 | Medium | 2025-09-05 | Not applicable | No public exploit | Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2025-54608 | Medium | 2025-08-06 | Not applicable | No public exploit | Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set. |
| CVE-2025-53186 | Medium | 2025-07-07 | Not applicable | No public exploit | Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability. |
| CVE-2025-53178 | Medium | 2025-07-07 | Not applicable | No public exploit | Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units. |
| CVE-2025-5321 | Medium | 2025-05-29 | Not applicable | Proof of concept only | A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component run_view Object Handler. The manipulation of the argument Abfrage leads to erweiterte Rechte. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2025-46587 | Medium | 2025-05-06 | Not applicable | No public exploit | Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2025-20145 | Medium | 2025-03-12 | Not applicable | No public exploit | A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets are handled incorrectly when they are received on an ingress interface on one line card and destined out of an egress interface on another line card where the egress ACL is configured. An attacker could exploit this vulnerability by attempting to send traffic through an affected device. A successful exploit could allow the attacker to bypass an egress ACL on the affected device. For more information about this vulnerability, see the section of this advisory. Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. |
| CVE-2024-20371 | Medium | 2024-11-06 | Not applicable | No public exploit | A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device. This vulnerability exists because ACL deny rules are not properly enforced at the time of device reboot. An attacker could exploit this vulnerability by attempting to send traffic to the management interface of an affected device. A successful exploit could allow the attacker to send traffic to the management interface of the affected device. |
| CVE-2024-51527 | Medium | 2024-11-05 | Not applicable | No public exploit | Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2024-51524 | Medium | 2024-11-05 | Not applicable | No public exploit | Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2024-20370 | Medium | 2024-10-23 | Not applicable | No public exploit | A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to elevate their administrative privileges to root. The attacker would need valid administrative credentials on the device to exploit this vulnerability. This vulnerability exists because certain system configurations and executable files have insecure storage and permissions. An attacker could exploit this vulnerability by authenticating on the device and then performing a series of steps that includes downloading malicious system files and accessing the Cisco FXOS CLI to configure the attack. A successful exploit could allow the attacker to obtain root access on the device. |
| CVE-2024-45449 | Medium | 2024-09-04 | Not applicable | No public exploit | Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
| CVE-2023-7265 | Medium | 2024-08-08 | Not applicable | No public exploit | Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability |
| CVE-2024-39670 | Medium | 2024-07-25 | Not applicable | No public exploit | Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability. |
| CVE-2024-5465 | Medium | 2024-06-14 | Not applicable | No public exploit | Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability. |
| CVE-2024-20361 | Medium | 2024-05-22 | Not applicable | No public exploit | A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass configured access controls on managed devices that are running Cisco Firepower Threat Defense (FTD) Software. This vulnerability is due to the incorrect deployment of the Object Groups for ACLs feature from Cisco FMC Software to managed FTD devices in high-availability setups. After an affected device is rebooted following Object Groups for ACLs deployment, an attacker can exploit this vulnerability by sending traffic through the affected device. A successful exploit could allow the attacker to bypass configured access controls and successfully send traffic to devices that are expected to be protected by the affected device. |
| CVE-2024-32996 | Medium | 2024-05-14 | Not applicable | No public exploit | Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability. |
| CVE-2023-52721 | Medium | 2024-05-14 | Not applicable | No public exploit | The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality. |
| CVE-2023-20190 | Medium | 2023-09-13 | Not applicable | No public exploit | A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass the protection that is offered by a configured ACL on an affected device. This vulnerability is due to incorrect destination address range encoding in the compression module of an ACL that is applied to an interface of an affected device. An attacker could exploit this vulnerability by sending traffic through the affected device that should be denied by the configured ACL. A successful exploit could allow the attacker to bypass configured ACL protections on the affected device, allowing the attacker to access trusted networks that the device might be protecting. There are workarounds that address this vulnerability. This advisory is part of the September 2023 release of the Cisco IOS XR Software Security Advisory Bundled Publication. For a complete list of the advisories and links to them, see Cisco Event Response: September 2023 Semiannual Cisco IOS XR Software Security Advisory Bundled Publication . |
| CVE-2023-39387 | Medium | 2023-08-13 | Not applicable | No public exploit | Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows. |
| CVE-2023-2255 | Medium | 2023-05-25 | Not applicable | Proof of concept only | Improper access control in editor components of The Document Foundation LibreOffice allowed an attacker to craft a document that would cause external links to be loaded without prompt. In the affected versions of LibreOffice documents that used "floating frames" linked to external files, would load the contents of those frames without prompting the user for permission to do so. This was inconsistent with the treatment of other linked content in LibreOffice. This issue affects: The Document Foundation LibreOffice 7.4 versions prior to 7.4.7; 7.5 versions prior to 7.5.3. |
| CVE-2022-45369 | Medium | 2022-11-18 | Not applicable | No public exploit | Auth. (subscriber+) Broken Access Control vulnerability in Plugin for Google Reviews plugin <= 2.2.2 on WordPress. |
| CVE-2022-41839 | Medium | 2022-11-18 | Not applicable | No public exploit | Broken Access Control vulnerability in WordPress LoginPress plugin <= 1.6.2 on WordPress leading to unauth. changing of Opt-In or Opt-Out tracking settings. |
| CVE-2022-38974 | Medium | 2022-11-18 | Not applicable | No public exploit | Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with subscriber or higher user roles to change the status of the translation jobs. |
| CVE-2022-41132 | Medium | 2022-11-17 | Not applicable | No public exploit | Unauthenticated Plugin Settings Change Leading To Stored XSS Vulnerability in Ezoic plugin <= 2.8.8 on WordPress. |
| CVE-2022-38461 | Medium | 2022-11-17 | Not applicable | No public exploit | Broken Access Control vulnerability in WPML Multilingual CMS premium plugin <= 4.5.10 on WordPress allows users with a subscriber or higher user role to change plugin settings (selected language for legacy widgets, the default behavior for media content). |
| CVE-2022-42460 | Medium | 2022-11-10 | Not applicable | No public exploit | Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) in Traffic Manager plugin <= 1.4.5 on WordPress. |
| CVE-2022-35238 | Medium | 2022-09-23 | Not applicable | No public exploit | Unauthenticated Plugin Settings Change vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress. |
| CVE-2022-38135 | Medium | 2022-09-12 | Not applicable | No public exploit | Broken Access Control vulnerability in Dean Oakley's Photospace Gallery plugin <= 2.3.5 at WordPress allows users with subscriber or higher role to change plugin settings. |
| CVE-2022-38067 | Medium | 2022-09-09 | Not applicable | No public exploit | Unauthenticated Event Deletion vulnerability in Totalsoft Event Calendar – Calendar plugin <= 1.4.6 at WordPress. |
| CVE-2022-38058 | Medium | 2022-09-09 | Not applicable | No public exploit | Authenticated (subscriber+) Plugin Setting change vulnerability in WP Shamsi plugin <= 4.1.1 at WordPress. |
| CVE-2022-35242 | Medium | 2022-08-23 | Not applicable | No public exploit | Unauthenticated plugin settings change vulnerability in 59sec THE Leads Management System: 59sec LITE plugin <= 3.4.1 at WordPress. |
| CVE-2020-36528 | Medium | 2022-06-07 | Not applicable | Proof of concept only | A vulnerability, which was classified as critical, was found in Platinum Mobile 1.0.4.850. Affected is /MobileHandler.ashx which leads to broken access control. The attack requires authentication. Upgrading to version 1.0.4.851 is able to address this issue. It is recommended to upgrade the affected component. |
| CVE-2022-29444 | Medium | 2022-05-02 | Not applicable | Exploited | Plugin Settings Change leading to Cross-Site Scripting (XSS) vulnerability in Cloudways Breeze plugin <= 2.0.2 on WordPress allows users with a subscriber or higher user role to execute any of the wp_ajax_* actions in the class Breeze_Configuration which includes the ability to change any of the plugin's settings including CDN setting which could be further used for XSS attack. |
| CVE-2022-23709 | Medium | 2022-03-03 | Not applicable | No public exploit | A flaw was discovered in Kibana in which users with Read access to the Uptime feature could modify alerting rules. A user with this privilege would be able to create new alerting rules or overwrite existing ones. However, any new or modified rules would not be enabled, and a user with this privilege could not modify alerting connectors. This effectively means that Read users could disable existing alerting rules. |
| CVE-2022-23708 | Medium | 2022-03-03 | No exploit published | No public exploit | A flaw was discovered in Elasticsearch 7.17.0’s upgrade assistant, in which upgrading from version 6.x to 7.x would disable the in-built protections on the security index, allowing authenticated users with “*” index permissions access to this index. |
| CVE-2021-25482 | Medium | 2021-10-06 | Not applicable | No public exploit | SQL injection vulnerabilities in CMFA framework prior to SMR Oct-2021 Release 1 allow untrusted application to overwrite some CMFA framework information. |
| CVE-2021-25472 | Medium | 2021-10-06 | Not applicable | No public exploit | An improper access control vulnerability in BluetoothSettingsProvider prior to SMR Oct-2021 Release 1 allows untrusted application to overwrite some Bluetooth information. |
| CVE-2021-27851 | Medium | 2021-04-26 | Not applicable | No public exploit | A security vulnerability that can lead to local privilege escalation has been found in ’guix-daemon’. It affects multi-user setups in which ’guix-daemon’ runs locally. The attack consists in having an unprivileged user spawn a build process, for instance with `guix build`, that makes its build directory world-writable. The user then creates a hardlink to a root-owned file such as /etc/shadow in that build directory. If the user passed the --keep-failed option and the build eventually fails, the daemon changes ownership of the whole build tree, including the hardlink, to the user. At that point, the user has write access to the target file. Versions after and including v0.11.0-3298-g2608e40988, and versions prior to v1.2.0-75109-g94f0312546 are vulnerable. |
| CVE-2021-21438 | Medium | 2021-03-22 | Not applicable | No public exploit | Agents are able to see linked FAQ articles without permissions (defined in FAQ Category). This issue affects: FAQ version 6.0.29 and prior versions, OTRS version 7.0.24 and prior versions. |
| CVE-2021-21437 | Medium | 2021-03-22 | Not applicable | No public exploit | Agents are able to see linked Config Items without permissions, which are defined in General Catalog. This issue affects: OTRSCIsInCustomerFrontend 7.0.15 and prior versions, ITSMConfigurationManagement 7.0.24 and prior versions |
| CVE-2021-21436 | Medium | 2021-02-08 | Not applicable | No public exploit | Agents are able to see and link Config Items without permissions, which are defined in General Catalog. This issue affects: OTRS AG OTRSCIsInCustomerFrontend 7.0.x version 7.0.14 and prior versions. |
| CVE-2021-1258 | Medium | 2021-01-13 | Not applicable | No public exploit | A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system (OS) of an affected device. The vulnerability is due to insufficient file permission restrictions. An attacker could exploit this vulnerability by sending a crafted command from the local CLI to the application. A successful exploit could allow the attacker to read arbitrary files on the underlying OS of the affected device. The attacker would need to have valid user credentials to exploit this vulnerability. |
| CVE-2020-13922 | Medium | 2021-01-11 | No exploit published | No public exploit | Versions of Apache DolphinScheduler prior to 1.3.2 allowed an ordinary user under any tenant to override another users password through the API interface. |
| CVE-2019-16017 | Medium | 2020-09-23 | Outside Waratek scope | No public exploit | A vulnerability in the Operations, Administration, Maintenance and Provisioning (OAMP) OpsConsole Server for Cisco Unified Customer Voice Portal (CVP) could allow an authenticated, remote attacker to execute Insecure Direct Object Reference actions on specific pages within the OAMP application. The vulnerability is due to insufficient input validation on specific pages of the OAMP application. An attacker could exploit this vulnerability by authenticating to Cisco Unified CVP and sending crafted HTTP requests. A successful exploit could allow an attacker with administrator or read-only privileges to learn information outside of their expected scope. An attacker with administrator privileges could modify certain configuration details of resources outside of their defined scope, which could result in a denial of service (DoS) condition. |
| CVE-2020-3485 | Medium | 2020-08-26 | Not applicable | No public exploit | A vulnerability in the role-based access control (RBAC) functionality of the web management software of Cisco Vision Dynamic Signage Director could allow an authenticated, remote attacker to access resources that they should not be able to access and perform actions that they should not be able to perform. The vulnerability exists because the web management software does not properly handle RBAC. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to view and delete certain screen content on the system that the attacker would not normally have privileges to access. |
| CVE-2020-3215 | Medium | 2020-06-03 | Not applicable | No public exploit | A vulnerability in the Virtual Services Container of Cisco IOS XE Software could allow an authenticated, local attacker to gain root-level privileges on an affected device. The vulnerability is due to insufficient validation of a user-supplied open virtual appliance (OVA). An attacker could exploit this vulnerability by installing a malicious OVA on an affected device. |
| CVE-2020-3214 | Medium | 2020-06-03 | Not applicable | No public exploit | A vulnerability in Cisco IOS XE Software could allow an authenticated, local attacker to escalate their privileges to a user with root-level privileges. The vulnerability is due to insufficient validation of user-supplied content. This vulnerability could allow an attacker to load malicious software onto an affected device. |
| CVE-2020-3213 | Medium | 2020-06-03 | Not applicable | No public exploit | A vulnerability in the ROMMON of Cisco IOS XE Software could allow an authenticated, local attacker to elevate privileges to those of the root user of the underlying operating system. The vulnerability is due to the ROMMON allowing for special parameters to be passed to the device at initial boot up. An attacker could exploit this vulnerability by sending parameters to the device at initial boot up. An exploit could allow the attacker to elevate from a Priv15 user to the root user and execute arbitrary commands with the privileges of the root user. |
| CVE-2020-3208 | Medium | 2020-06-03 | Not applicable | No public exploit | A vulnerability in the image verification feature of Cisco IOS Software for Cisco 809 and 829 Industrial Integrated Services Routers (Industrial ISRs) could allow an authenticated, local attacker to boot a malicious software image on an affected device. The vulnerability is due to insufficient access restrictions on the area of code that manages the image verification feature. An attacker could exploit this vulnerability by first authenticating to the targeted device and then logging in to the Virtual Device Server (VDS) of an affected device. The attacker could then, from the VDS shell, disable Cisco IOS Software integrity (image) verification. A successful exploit could allow the attacker to boot a malicious Cisco IOS Software image on the targeted device. To exploit this vulnerability, the attacker must have valid user credentials at privilege level 15. |
| CVE-2020-8478 | Medium | 2020-04-29 | Not applicable | No public exploit | Insufficient protection of the inter-process communication functions in ABB System 800xA products OPC Server for AC 800M, MMS Server for AC 800M and Base Software for SoftControl (all published versions) enables an attacker authenticated on the local system to inject data, affecting the online view of runtime data shown in Control Builder. |
| CVE-2019-19107 | Medium | 2020-04-22 | Not applicable | No public exploit | The Configuration pages in ABB Telephone Gateway TG/S 3.2 and Busch-Jaeger 6186/11 Telefon-Gateway for user profiles and services transfer the password in plaintext (although hidden when displayed). |
| CVE-2020-7255 | Medium | 2020-04-15 | Not applicable | No public exploit | Privilege escalation vulnerability in the administrative user interface in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2020 Update allows local users to gain elevated privileges via ENS not checking user permissions when editing configuration in the ENS client interface. Administrators can lock the ENS client interface through ePO to prevent users being able to edit the configuration. |
| CVE-2020-1630 | Medium | 2020-04-08 | Not applicable | No public exploit | A privilege escalation vulnerability in Juniper Networks Junos OS devices configured with dual Routing Engines (RE), Virtual Chassis (VC) or high-availability cluster may allow a local authenticated low-privileged user with access to the shell to perform unauthorized configuration modification. This issue does not affect Junos OS device with single RE or stand-alone configuration. This issue affects Juniper Networks Junos OS 12.3 versions prior to 12.3R12-S14; 12.3X48 versions prior to 12.3X48-D86, 12.3X48-D90; 14.1X53 versions prior to 14.1X53-D51; 15.1 versions prior to 15.1R7-S6; 15.1X49 versions prior to 15.1X49-D181, 15.1X49-D190; 15.1X53 versions prior to 15.1X53-D592; 16.1 versions prior to 16.1R4-S13, 16.1R7-S6; 16.2 versions prior to 16.2R2-S10; 17.1 versions prior to 17.1R2-S11, 17.1R3-S1; 17.2 versions prior to 17.2R1-S9, 17.2R3-S3; 17.3 versions prior to 17.3R3-S6; 17.4 versions prior to 17.4R2-S6, 17.4R3; 18.1 versions prior to 18.1R3-S7; 18.2 versions prior to 18.2R2-S5, 18.2R3-S1; 18.2 versions prior to 18.2X75-D12, 18.2X75-D33, 18.2X75-D420, 18.2X75-D60, 18.2X75-D411; 18.3 versions prior to 18.3R1-S5, 18.3R2-S1, 18.3R3; 18.4 versions prior to 18.4R1-S4, 18.4R2-S1, 18.4R3; 19.1 versions prior to 19.1R1-S2, 19.1R2; 19.2 versions prior to 19.2R1-S1, 19.2R2. |
| CVE-2020-1619 | Medium | 2020-04-08 | Not applicable | No public exploit | A privilege escalation vulnerability in Juniper Networks QFX10K Series, EX9200 Series, MX Series, and PTX Series with Next-Generation Routing Engine (NG-RE), allows a local authenticated high privileged user to access the underlying WRL host. This issue only affects QFX10K Series with NG-RE, EX9200 Series with NG-RE, MX Series with NG-RE and PTX Series with NG-RE; which uses vmhost. This issue affects Juniper Networks Junos OS: 16.1 versions prior to 16.1R7-S6; 16.2 versions prior to 16.2R2-S11; 17.1 versions prior to 17.1R2-S11, 17.1R3; 17.2 versions prior to 17.2R1-S9, 17.2R3-S3; 17.3 versions prior to 17.3R2-S5, 17.3R3-S7; 17.4 versions prior to 17.4R2-S7, 17.4R3; 18.1 versions prior to 18.1R3-S4; 18.2 versions prior to 18.2R3; 18.2X75 versions prior to 18.2X75-D50; 18.3 versions prior to 18.3R2; 18.4 versions prior to 18.4R2. To identify whether the device has NG-RE with vmhost, customer can run the following command: > show vmhost status Compute cluster: rainier-re-cc Compute Node: rainier-re-cn, Online If the "show vmhost status" is not supported, then the device does not have NG-RE with vmhost. |
| CVE-2020-7263 | Medium | 2020-04-01 | Not applicable | No public exploit | Improper access control vulnerability in ESconfigTool.exe in McAfee Endpoint Security (ENS) for Windows all current versions allows local administrator to alter ENS configuration up to and including disabling all protection offered by ENS via insecurely implemented encryption of configuration for export and import. |
| CVE-2019-6195 | Medium | 2020-02-14 | Not applicable | No public exploit | An authorization bypass exists in Lenovo XClarity Controller (XCC) versions prior to 3.08 CDI340V, 3.01 TEI392O, 1.71 PSI328N where a valid authenticated user with lesser privileges may be granted read-only access to higher-privileged information if 1) “LDAP Authentication Only with Local Authorization” mode is configured and used by XCC, and 2) a lesser privileged user logs into XCC within 1 minute of a higher privileged user logging out. The authorization bypass does not exist when “Local Authentication and Authorization” or “LDAP Authentication and Authorization” modes are configured and used by XCC. |
| CVE-2020-8092 | Medium | 2020-01-30 | Not applicable | No public exploit | A privilege escalation vulnerability in BDLDaemon as used in Bitdefender Antivirus for Mac allows a local attacker to obtain authentication tokens for requests submitted to the Bitdefender Cloud. This issue affects: Bitdefender Bitdefender Antivirus for Mac versions prior to 8.0.0. |
| CVE-2019-14879 | Medium | 2020-01-07 | Not applicable | No public exploit | A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked (where applicable). |
| CVE-2019-15996 | Medium | 2019-11-26 | Outside Waratek scope | No public exploit | A vulnerability in Cisco DNA Spaces: Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. The vulnerability is due to insufficient restrictions during the execution of an affected CLI command. An attacker could exploit this vulnerability by leveraging the insufficient restrictions to modify sensitive files. A successful exploit could allow the attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. |
| CVE-2019-15960 | Medium | 2019-11-26 | Not applicable | No public exploit | A vulnerability in the Webex Network Recording Admin page of Cisco Webex Meetings could allow an authenticated, remote attacker to elevate privileges in the context of the affected page. To exploit this vulnerability, the attacker must be logged in as a low-level administrator. The vulnerability is due to insufficient access control validation. An attacker could exploit this vulnerability by submitting a crafted URL request to gain privileged access in the context of the affected page. A successful exploit could allow the attacker to elevate privileges in the Webex Recording Admin page, which could allow them to view or delete recordings that they would not normally be able to access. |
| CVE-2019-1982 | Medium | 2019-11-05 | Outside Waratek scope | No public exploit | A vulnerability in the HTTP traffic filtering component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper handling of HTTP requests, including those communicated over a secure HTTPS connection, that contain maliciously crafted headers. An attacker could exploit this vulnerability by sending malicious requests to an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems, allowing attackers to deliver malicious content that would otherwise be blocked. |
| CVE-2019-1981 | Medium | 2019-11-05 | Outside Waratek scope | No public exploit | A vulnerability in the normalization functionality of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to insufficient normalization of a text-based payload. An attacker could exploit this vulnerability by sending traffic that contains specifically obfuscated payloads through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious payloads to protected systems that would otherwise be blocked. |
| CVE-2019-1980 | Medium | 2019-11-05 | Outside Waratek scope | No public exploit | A vulnerability in the protocol detection component of Cisco Firepower Threat Defense Software, Cisco FirePOWER Services Software for ASA, and Cisco Firepower Management Center Software could allow an unauthenticated, remote attacker to bypass filtering protections. The vulnerability is due to improper detection of the initial use of a protocol on a nonstandard port. An attacker could exploit this vulnerability by sending traffic on a nonstandard port for the protocol in use through an affected device. An exploit could allow the attacker to bypass filtering and deliver malicious requests to protected systems that would otherwise be blocked. Once the initial protocol flow on the nonstandard port is detected, future flows on the nonstandard port will be successfully detected and handled as configured by the applied policy. |