CWE-273 CVEs · Working exploit published

VRT Sign in

Look up CVE IDs Status Exploitation Severity

Reset

Overview 3 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 EPSS ≥ 0.5

3matches 1in Waratek scope33.3% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 1EPSS ≥ 0.533.3%

Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 33.3% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 2 66.7% Withdrawn CVE 0 0.0%

Critical 2 66.7% High 1 33.3% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 3 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 3 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%

split by StatusSeverityProtectionExploit maturity peak 1 / year

20171 Not applicable1 Critical1 not blocked1 Working exploit published1 20180 20191 Not applicable1 Critical1 not blocked1 Working exploit published1 20200 20210 20220 20230 20241 Mitigation candidate1 High1 not blocked1 Working exploit published1

20172018201920202021202220232024

3 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2024-25420	High	2024-03-26	Mitigation candidate	Working exploit published	An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.
CVE-2011-2921	Critical	2019-11-19	Not applicable	Working exploit published	ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.
CVE-2017-6972	Critical	2017-03-22	Not applicable	Working exploit published	AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2024-25420

High

2024-03-26

Mitigation candidate

Working exploit published

An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.

CVE-2011-2921

Critical

2019-11-19

Not applicable

Working exploit published

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privileges.

CVE-2017-6972

Critical

2017-03-22

Not applicable

Working exploit published

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945, a different vulnerability than CVE-2017-6970 and CVE-2017-6971.