Overview 15 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
1
6.7%
Outside Waratek scope
5
33.3%
Not applicable
9
60.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
15
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
15
100.0%
No public exploit
0
0.0%
split by
peak 5 / year
20141
Not applicable1
Medium1
not blocked1
Forecast only1
20151
Outside Waratek scope1
Medium1
not blocked1
Forecast only1
20161
Not applicable1
High1
not blocked1
Forecast only1
20170
20181
Not applicable1
High1
not blocked1
Forecast only1
20190
20201
No exploit published1
High1
not blocked1
Forecast only1
20215
Outside Waratek scope4
Not applicable1
High5
not blocked5
Forecast only5
20220
20233
Not applicable3
High3
not blocked3
Forecast only3
20240
20252
Not applicable2
High2
not blocked2
Forecast only2
201420152016201720182019202020212022202320242025
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2025-22037 | High | 2025-04-16 | Not applicable | Forecast only | In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix null pointer dereference in alloc_preauth_hash() The Client send malformed smb2 negotiate request. ksmbd return error response. Subsequently, the client can send smb2 session setup even thought conn->preauth_info is not allocated. This patch add KSMBD_SESS_NEED_SETUP status of connection to ignore session setup request if smb2 negotiate phase is not complete. |
| CVE-2025-21285 | High | 2025-01-14 | Not applicable | Forecast only | Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability |
| CVE-2023-38171 | High | 2023-10-10 | Not applicable | Forecast only | Microsoft QUIC Denial of Service Vulnerability |
| CVE-2023-21758 | High | 2023-01-10 | Not applicable | Forecast only | Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability |
| CVE-2023-21547 | High | 2023-01-10 | Not applicable | Forecast only | Internet Key Exchange (IKE) Protocol Denial of Service Vulnerability |
| CVE-2021-44224 | High | 2021-12-20 | Outside Waratek scope | Forecast only | A crafted URI sent to httpd configured as a forward proxy (ProxyRequests on) can cause a crash (NULL pointer dereference) or, for configurations mixing forward and reverse proxy declarations, can allow for requests to be directed to a declared Unix Domain Socket endpoint (Server Side Request Forgery). This issue affects Apache HTTP Server 2.4.7 up to 2.4.51 (included). |
| CVE-2021-34798 | High | 2021-09-16 | Outside Waratek scope | Forecast only | Malformed requests may cause the server to dereference a NULL pointer. This issue affects Apache HTTP Server 2.4.48 and earlier. |
| CVE-2021-31618 | High | 2021-06-15 | Not applicable | Forecast only | Apache HTTP Server protocol handler for the HTTP/2 protocol checks received request headers against the size limitations as configured for the server and used for the HTTP/1 protocol as well. On violation of these restrictions and HTTP response is sent to the client with a status code indicating why the request was rejected. This rejection response was not fully initialised in the HTTP/2 protocol handler if the offending header was the very first one received or appeared in a a footer. This led to a NULL pointer dereference on initialised memory, crashing reliably the child process. Since such a triggering HTTP/2 request is easy to craft and submit, this can be exploited to DoS the server. This issue affected mod_http2 1.15.17 and Apache HTTP Server version 2.4.47 only. Apache HTTP Server 2.4.47 was never released. |
| CVE-2021-26690 | High | 2021-06-10 | Outside Waratek scope | Forecast only | Apache HTTP Server versions 2.4.0 to 2.4.46 A specially crafted Cookie header handled by mod_session can cause a NULL pointer dereference and crash, leading to a possible Denial Of Service |
| CVE-2020-13950 | High | 2021-06-10 | Outside Waratek scope | Forecast only | Apache HTTP Server versions 2.4.41 to 2.4.46 mod_proxy_http can be made to crash (NULL pointer dereference) with specially crafted requests using both Content-Length and Transfer-Encoding headers, leading to a Denial of Service |
| CVE-2020-13934 | High | 2020-07-14 | No exploit published | Forecast only | An h2c direct connection to Apache Tomcat 10.0.0-M1 to 10.0.0-M6, 9.0.0.M5 to 9.0.36 and 8.5.1 to 8.5.56 did not release the HTTP/1.1 processor after the upgrade to HTTP/2. If a sufficient number of such requests were made, an OutOfMemoryException could occur leading to a denial of service. |
| CVE-2017-15120 | High | 2018-07-27 | Not applicable | Forecast only | An issue has been found in the parsing of authoritative answers in PowerDNS Recursor before 4.0.8, leading to a NULL pointer dereference when parsing a specially crafted answer containing a CNAME of a different class than IN. An unauthenticated remote attacker could cause a denial of service. |
| CVE-2016-0742 | High | 2016-02-15 | Not applicable | Forecast only | The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response. |
| CVE-2014-9708 | Medium | 2015-03-31 | Outside Waratek scope | Forecast only | Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,". |
| CVE-2014-3470 | Medium | 2014-06-05 | Not applicable | Forecast only | The ssl3_send_client_key_exchange function in s3_clnt.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h, when an anonymous ECDH cipher suite is used, allows remote attackers to cause a denial of service (NULL pointer dereference and client crash) by triggering a NULL certificate value. |