WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-476✕
Overview 12 matches · 0 in Waratek scope · 0 protected · 1 CISA KEV · 6 public PoC · 3 EPSS ≥ 0.5
12matches 0in Waratek scope0.0% 0protected0.0% 1CISA KEV8.3% 6public PoC50.0% 3EPSS ≥ 0.525.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 2 16.7% Not applicable 10 83.3% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 6 50.0% Medium 6 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 12 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 12 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / year
Not applicable: 10Outside Waratek scope: 2 Medium: 6High: 6 not blocked: 12 Exploited: 12
20092 Not applicable2 High2 not blocked2 Exploited2 20102 Not applicable2 Medium2 not blocked2 Exploited2 20111 Not applicable1 Medium1 not blocked1 Exploited1 20120 20130 20140 20151 Not applicable1 Medium1 not blocked1 Exploited1 20160 20171 Not applicable1 High1 not blocked1 Exploited1 20181 Outside Waratek scope1 High1 not blocked1 Exploited1 20191 Outside Waratek scope1 High1 not blocked1 Exploited1 20200 20210 20220 20230 20240 20252 Not applicable2 High1 Medium1 not blocked2 Exploited2 20261 Not applicable1 Medium1 not blocked1 Exploited1
201020122014201620182020202220242026
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-21525 Medium 2026-02-10 Not applicable Exploited Null pointer dereference in Windows Remote Access Connection Manager allows an unauthorized attacker to deny service locally.
CVE-2025-32818 High 2025-04-23 Not applicable Exploited A Null Pointer Dereference vulnerability in the SonicOS SSLVPN Virtual office interface allows a remote, unauthenticated attacker to crash the firewall, potentially leading to a Denial-of-Service (DoS) condition.
CVE-2025-0287 Medium 2025-03-03 Not applicable Exploited Various Paragon Software products contain a null pointer dereference vulnerability within biontdrv.sys that is caused by a lack of a valid MasterLrp structure in the input buffer, allowing an attacker to execute arbitrary code in the kernel, facilitating privilege escalation.
CVE-2019-10097 High 2019-09-26 Outside Waratek scope Exploited In Apache HTTP Server 2.4.32-2.4.39, when mod_remoteip was configured to use a trusted intermediary proxy server using the "PROXY" protocol, a specially crafted PROXY header could trigger a stack buffer overflow or NULL pointer deference. This vulnerability could only be triggered by a trusted proxy and not by untrusted HTTP clients.
CVE-2018-8011 High 2018-07-18 Outside Waratek scope Exploited By specially crafting HTTP requests, the mod_md challenge handler would dereference a NULL pointer and cause the child process to segfault. This could be used to DoS the server. Fixed in Apache HTTP Server 2.4.34 (Affected 2.4.33).
CVE-2017-7659 High 2017-07-26 Not applicable Exploited A maliciously constructed HTTP/2 request could cause mod_http2 in Apache HTTP Server 2.4.24, 2.4.25 to dereference a NULL pointer and crash the server process.
CVE-2015-0003 Medium 2015-02-11 Not applicable Exploited win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial of service (NULL pointer dereference) via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVE-2011-1752 Medium 2011-06-06 Not applicable Exploited The mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.17, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a request for a baselined WebDAV resource, as exploited in the wild in May 2011.
CVE-2010-3849 Medium 2010-12-30 Not applicable Exploited The econet_sendmsg function in net/econet/af_econet.c in the Linux kernel before 2.6.36.2, when an econet address is configured, allows local users to cause a denial of service (NULL pointer dereference and OOPS) via a sendmsg call that specifies a NULL value for the remote address field.
CVE-2010-3437 Medium 2010-10-04 Not applicable Exploited Integer signedness error in the pkt_find_dev_from_minor function in drivers/block/pktcdvd.c in the Linux kernel before 2.6.36-rc6 allows local users to obtain sensitive information from kernel memory or cause a denial of service (invalid pointer dereference and system crash) via a crafted index value in a PKT_CTRL_CMD_STATUS ioctl call.
CVE-2009-3547 High 2009-11-04 Not applicable Exploited Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.
CVE-2009-2698 High 2009-08-27 Not applicable Exploited The udp_sendmsg function in the UDP implementation in (1) net/ipv4/udp.c and (2) net/ipv6/udp.c in the Linux kernel before 2.6.19 allows local users to gain privileges or cause a denial of service (NULL pointer dereference and system crash) via vectors involving the MSG_MORE flag and a UDP socket.