Overview 9 matches · 0 in Waratek scope · 0 protected · 2 CISA KEV · 6 public PoC · 3 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
9
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
9
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
9
100.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 2 / quarter
Q4 201
Not applicable1
High1
not blocked1
Exploited1
Q1 210
Q2 210
Q3 210
Q4 210
Q1 220
Q2 220
Q3 220
Q4 220
Q1 230
Q2 231
Not applicable1
Medium1
not blocked1
Exploited1
Q3 230
Q4 231
Not applicable1
High1
not blocked1
Exploited1
Q1 240
Q2 240
Q3 241
Not applicable1
High1
not blocked1
Exploited1
Q4 240
Q1 251
Not applicable1
Medium1
not blocked1
Exploited1
Q2 250
Q3 251
Not applicable1
Medium1
not blocked1
Exploited1
Q4 252
Not applicable2
High1
Low1
not blocked2
Exploited2
Q1 260
Q2 261
Not applicable1
High1
not blocked1
Exploited1
Q4 20Q2 21Q4 21Q2 22Q4 22Q2 23Q4 23Q2 24Q4 24Q2 25Q4 25Q2 26
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-32996 | High | 2026-05-28 | Not applicable | Exploited | This vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation. |
| CVE-2025-14437 | High | 2025-12-18 | Not applicable | Exploited | The Hummingbird Performance plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.18.0 via the 'request' function. This makes it possible for unauthenticated attackers to extract sensitive data including Cloudflare API credentials. |
| CVE-2025-43517 | Low | 2025-12-12 | Not applicable | Exploited | A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may be able to access protected user data. |
| CVE-2025-9985 | Medium | 2025-09-26 | Not applicable | Exploited | The Featured Image from URL (FIFU) plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.2.7 through publicly exposed log files. This makes it possible for unauthenticated attackers to view potentially sensitive information contained in the exposed log files. |
| CVE-2025-24984 | Medium | 2025-03-11 | Not applicable | Exploited | Insertion of sensitive information into log file in Windows NTFS allows an unauthorized attacker to disclose information with a physical attack. |
| CVE-2024-20440 | High | 2024-09-04 | Not applicable | Exploited | A vulnerability in Cisco Smart Licensing Utility could allow an unauthenticated, remote attacker to access sensitive information. This vulnerability is due to excessive verbosity in a debug log file. An attacker could exploit this vulnerability by sending a crafted HTTP request to an affected device. A successful exploit could allow the attacker to obtain log files that contain sensitive data, including credentials that can be used to access the API. |
| CVE-2023-43261 | High | 2023-10-04 | Not applicable | Exploited | An information disclosure in Milesight UR5X, UR32L, UR32, UR35, UR41 before v35.3.0.7 allows attackers to access sensitive router components. |
| CVE-2023-21492 | Medium | 2023-05-04 | Not applicable | Exploited | Kernel pointers are printed in the log file prior to SMR May-2023 Release 1 allows a privileged local attacker to bypass ASLR. |
| CVE-2020-35234 | High | 2020-12-14 | Not applicable | Exploited | The easy-wp-smtp plugin before 1.4.4 for WordPress allows Administrator account takeover, as exploited in the wild in December 2020. If an attacker can list the wp-content/plugins/easy-wp-smtp/ directory, then they can discover a log file (such as #############_debug_log.txt) that contains all password-reset links. The attacker can request a reset of the Administrator password and then use a link found there. |