WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-345✕
Overview 6 matches · 0 in Waratek scope · 0 protected · 2 CISA KEV · 2 public PoC · 1 EPSS ≥ 0.5
6matches 0in Waratek scope0.0% 0protected0.0% 2CISA KEV33.3% 2public PoC33.3% 1EPSS ≥ 0.516.7%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 6 100.0% Withdrawn CVE 0 0.0%
Critical 3 50.0% High 1 16.7% Medium 2 33.3% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 6 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 6 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / year
Not applicable: 6 Medium: 2High: 1Critical: 3 not blocked: 6 Exploited: 6
20181 Not applicable1 Critical1 not blocked1 Exploited1 20190 20201 Not applicable1 Medium1 not blocked1 Exploited1 20210 20222 Not applicable2 Critical1 Medium1 not blocked2 Exploited2 20231 Not applicable1 High1 not blocked1 Exploited1 20240 20250 20261 Not applicable1 Critical1 not blocked1 Exploited1
201820192020202120222023202420252026
6 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-28185 Critical 2026-08-13 Not applicable Exploited Unauthenticated Broken Authentication in Log in with Google <= 1.4.2 versions.
CVE-2023-38831 High 2023-08-23 Not applicable Exploited RARLAB WinRAR before 6.23 allows attackers to execute arbitrary code when a user attempts to view a benign file within a ZIP archive. The issue occurs because a ZIP archive may include a benign file (such as an ordinary .JPG file) and also a folder that has the same name as the benign file, and the contents of the folder (which may include executable content) are processed during an attempt to access only the benign file. This was exploited in the wild in April through October 2023.
CVE-2022-46692 Medium 2022-12-15 Not applicable Exploited A logic issue was addressed with improved state management. This issue is fixed in Safari 16.2, tvOS 16.2, iCloud for Windows 14.1, iOS 15.7.2 and iPadOS 15.7.2, macOS Ventura 13.1, iOS 16.2 and iPadOS 16.2, watchOS 9.2. Processing maliciously crafted web content may bypass Same Origin Policy.
CVE-2022-26871 Critical 2022-03-29 Not applicable Exploited An arbitrary file upload vulnerability in Trend Micro Apex Central could allow an unauthenticated remote attacker to upload an arbitrary file which could lead to remote code execution.
CVE-2019-17228 Medium 2020-02-24 Not applicable Exploited includes/options.php in the motors-car-dealership-classified-listings (aka Motors - Car Dealer & Classified Ads) plugin through 1.4.0 for WordPress allows unauthenticated options changes.
CVE-2017-3198 Critical 2018-07-09 Not applicable Exploited GIGABYTE BRIX UEFI firmware does not cryptographically validate images prior to updating the system firmware. Additionally, the firmware updates are served over HTTP. An attacker can make arbitrary modifications to firmware images without being detected.