WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-326✕
Overview 6 matches · 1 in Waratek scope · 1 protected · 4 CISA KEV · 5 public PoC · 5 EPSS ≥ 0.5
6matches 1in Waratek scope16.7% 1protected16.7% 4CISA KEV66.7% 5public PoC83.3% 5EPSS ≥ 0.583.3%
Protected by Waratek 1 16.7% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 16.7% Not applicable 4 66.7% Withdrawn CVE 0 0.0%
Critical 3 50.0% High 3 50.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 16.7% partly blocked 0 0.0% not blocked 5 83.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 6 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / year
Not applicable: 4Outside Waratek scope: 1Protected by Waratek: 1 High: 3Critical: 3 not blocked: 5blocked by ARMR today: 1 Exploited: 6
20141 Outside Waratek scope1 High1 not blocked1 Exploited1 20150 20160 20171 Not applicable1 Critical1 not blocked1 Exploited1 20181 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 20192 Not applicable2 High2 not blocked2 Exploited2 20200 20210 20220 20230 20241 Not applicable1 Critical1 not blocked1 Exploited1
20142015201620172018201920202021202220232024
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-50550 Critical 2024-10-29 Not applicable Exploited Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through <= 6.5.1.
CVE-2018-18325 High 2019-07-03 Not applicable Exploited DNN (aka DotNetNuke) 9.2 through 9.2.2 uses a weak encryption algorithm to protect input parameters. NOTE: this issue exists because of an incomplete fix for CVE-2018-15811.
CVE-2018-15811 High 2019-07-03 Not applicable Exploited DNN (aka DotNetNuke) 9.2 through 9.2.1 uses a weak encryption algorithm to protect input parameters.
CVE-2017-1000486 Critical 2018-01-03 Protected by Waratek Exploited Primetek Primefaces 5.x is vulnerable to a weak encryption flaw resulting in remote code execution
CVE-2017-11317 Critical 2017-08-23 Not applicable Exploited Telerik.Web.UI in Progress Telerik UI for ASP.NET AJAX before R1 2017 and R2 before R2 2017 SP2 uses weak RadAsyncUpload encryption, which allows remote attackers to perform arbitrary file uploads or execute arbitrary code.
CVE-2014-0224 High 2014-06-05 Outside Waratek scope Exploited OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, which allows man-in-the-middle attackers to trigger use of a zero-length master key in certain OpenSSL-to-OpenSSL communications, and consequently hijack sessions or obtain sensitive information, via a crafted TLS handshake, aka the "CCS Injection" vulnerability.