WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕CWE CWE-294✕Has a public PoC✕
Overview 7 matches · 0 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 1 EPSS ≥ 0.5
7matches 0in Waratek scope0.0% 0protected0.0% 1exploited14.3% 1CISA KEV14.3% 1EPSS ≥ 0.514.3%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 7 100.0% Withdrawn CVE 0 0.0%
Critical 1 14.3% High 2 28.6% Medium 4 57.1% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 7 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 14.3% Working exploit published 2 28.6% Proof of concept only 4 57.1% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 3 / year
Not applicable: 7 Medium: 4High: 2Critical: 1 not blocked: 7 Proof of concept only: 4Working exploit published: 2Exploited: 1
20171 Not applicable1 High1 not blocked1 Working exploit published1 20180 20190 20200 20210 20223 Not applicable3 Medium3 not blocked3 Working exploit published1 Proof of concept only2 20232 Not applicable2 Critical1 Medium1 not blocked2 Exploited1 Proof of concept only1 20240 20250 20261 Not applicable1 High1 not blocked1 Proof of concept only1
2017201820192020202120222023202420252026
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-62911 High 2026-08-11 Not applicable Proof of concept only Authentication bypass by capture-replay in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network.
CVE-2023-23397 Critical 2023-03-14 Not applicable Exploited Microsoft Outlook Elevation of Privilege Vulnerability
CVE-2022-43704 Medium 2023-01-20 Not applicable Proof of concept only The Sinilink XY-WFT1 WiFi Remote Thermostat, running firmware 1.3.6, allows an attacker to bypass the intended requirement to communicate using MQTT. It is possible to replay Sinilink aka SINILINK521 protocol (udp/1024) commands interfacing directly with the target device. This, in turn, allows for an attack to control the onboard relay without requiring authentication via the mobile application. This might result in an unacceptable temperature within the target device's physical environment.
CVE-2022-37418 Medium 2022-08-24 Not applicable Proof of concept only The Remote Keyless Entry (RKE) receiving unit on certain Nissan, Kia, and Hyundai vehicles through 2017 allows remote attackers to perform unlock operations and force a resynchronization after capturing two consecutive valid key fob signals over the radio, aka a RollBack attack. The attacker retains the ability to unlock indefinitely.
CVE-2022-29593 Medium 2022-07-14 Not applicable Working exploit published relay_cgi.cgi on Dingtian DT-R002 2CH relay devices with firmware 3.1.276A allows an attacker to replay HTTP post requests without the need for authentication or a valid signed/authorized request.
CVE-2022-27254 Medium 2022-03-23 Not applicable Proof of concept only The remote keyless system on Honda Civic 2018 vehicles sends the same RF signal for each door-open request, which allows for a replay attack, a related issue to CVE-2019-20626.
CVE-2017-6823 High 2017-03-12 Not applicable Working exploit published Fiyo CMS 2.0.6.1 allows remote authenticated users to gain privileges via a modified level parameter to dapur/ in an app=user&act=edit action.