WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕CWE CWE-693✕Has a public PoC✕
Overview 21 matches · 4 in Waratek scope · 2 protected · 12 exploited · 10 CISA KEV · 9 EPSS ≥ 0.5
21matches 4in Waratek scope19.0% 2protected9.5% 12exploited57.1% 10CISA KEV47.6% 9EPSS ≥ 0.542.9%
Protected by Waratek 2 9.5% Rule in development 0 0.0% Mitigation candidate 2 9.5% No exploit published 0 0.0% Outside Waratek scope 3 14.3% Not applicable 14 66.7% Withdrawn CVE 0 0.0%
Critical 5 23.8% High 7 33.3% Medium 7 33.3% Low 2 9.5% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 9.5% partly blocked 0 0.0% not blocked 19 90.5% not established 0 0.0% unrecorded 0 0.0%
Exploited 12 57.1% Working exploit published 3 14.3% Proof of concept only 6 28.6% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 6 / year
Not applicable: 14Outside Waratek scope: 3Mitigation candidate: 2Protected by Waratek: 2 Low: 2Medium: 7High: 7Critical: 5 not blocked: 19blocked by ARMR today: 2 Proof of concept only: 6Working exploit published: 3Exploited: 12
20132 Outside Waratek scope2 Critical1 Low1 not blocked2 Exploited2 20140 20150 20161 Not applicable1 Medium1 not blocked1 Working exploit published1 20170 20181 Not applicable1 Medium1 not blocked1 Working exploit published1 20194 Protected by Waratek2 Mitigation candidate2 Critical2 High2 blocked by ARMR today2 not blocked2 Exploited3 Working exploit published1 20201 Not applicable1 Medium1 not blocked1 Proof of concept only1 20210 20220 20230 20246 Not applicable6 High2 Medium3 Low1 not blocked6 Exploited3 Proof of concept only3 20252 Outside Waratek scope1 Not applicable1 Critical1 High1 not blocked2 Exploited1 Proof of concept only1 20264 Not applicable4 Critical1 High2 Medium1 not blocked4 Exploited3 Proof of concept only1
2014201620182020202220242026
21 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-49881 High 2026-09-08 Not applicable Proof of concept only In serviceClassExists of InCallController.java, there is a possible arbitrary code execution due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2026-32202 Medium 2026-04-14 Not applicable Exploited Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.
CVE-2026-21510 High 2026-02-10 Not applicable Exploited Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.
CVE-2025-40536 Critical 2026-01-28 Not applicable Exploited SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.
CVE-2025-65318 Critical 2025-12-16 Not applicable Proof of concept only When using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents to a file system without a Mark-of-the-Web tag, which allows attackers to bypass the built-in file protection mechanisms of both Windows OS and third-party software.
CVE-2025-0411 High 2025-01-25 Outside Waratek scope Exploited 7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of archived files. When extracting files from a crafted archive that bears the Mark-of-the-Web, 7-Zip does not propagate the Mark-of-the-Web to the extracted files. An attacker can leverage this vulnerability to execute arbitrary code in the context of the current user. Was ZDI-CAN-25456.
CVE-2024-29510 Medium 2024-07-03 Not applicable Exploited Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.
CVE-2024-30052 Medium 2024-06-11 Not applicable Proof of concept only Visual Studio Remote Code Execution Vulnerability
CVE-2024-33883 Medium 2024-04-28 Not applicable Proof of concept only The ejs (aka Embedded JavaScript templates) package before 3.1.10 for Node.js lacks certain pollution protection.
CVE-2024-29988 High 2024-04-09 Not applicable Exploited SmartScreen Prompt Security Feature Bypass Vulnerability
CVE-2024-21412 High 2024-02-13 Not applicable Exploited Internet Shortcut Files Security Feature Bypass Vulnerability
CVE-2023-20573 Low 2024-01-11 Not applicable Proof of concept only A privileged attacker can prevent delivery of debug exceptions to SEV-SNP guests potentially resulting in guests not receiving expected debug information.
CVE-2020-15215 Medium 2020-10-06 Not applicable Proof of concept only Electron before versions 11.0.0-beta.6, 10.1.2, 9.3.1 or 8.5.2 is vulnerable to a context isolation bypass. Apps using both `contextIsolation` and `sandbox: true` are affected. Apps using both `contextIsolation` and `nodeIntegrationInSubFrames: true` are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach into the isolated Electron context and perform privileged actions.
CVE-2019-1003030 Critical 2019-03-08 Protected by Waratek Exploited A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.
CVE-2019-1003029 Critical 2019-03-08 Protected by Waratek Exploited A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to execute arbitrary code on the Jenkins master JVM.
CVE-2019-1003005 High 2019-02-06 Mitigation candidate Working exploit published A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.50 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScript.java that allows attackers with Overall/Read permission to provide a Groovy script to an HTTP endpoint that can result in arbitrary code execution on the Jenkins master JVM.
CVE-2019-1003000 High 2019-01-22 Mitigation candidate Exploited A sandbox bypass vulnerability exists in Script Security Plugin 1.49 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java that allows attackers with the ability to provide sandboxed scripts to execute arbitrary code on the Jenkins master JVM.
CVE-2018-6794 Medium 2018-02-07 Not applicable Working exploit published Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-way handshake is complete, then the data sent by the malicious server will be accepted by web clients such as a web browser or Linux CLI utilities, but ignored by Suricata IDS signatures. This mostly affects IDS signatures for the HTTP protocol and TCP stream content; signatures for TCP packets will inspect such network traffic as usual.
CVE-2016-0772 Medium 2016-09-02 Not applicable Working exploit published The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-middle attackers to bypass the TLS protections by leveraging a network position between the client and the registry to block the StartTLS command, aka a "StartTLS stripping attack."
CVE-2013-2465 Critical 2013-06-18 Outside Waratek scope Exploited Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to bypass the Java sandbox via vectors related to "Incorrect image channel verification" in 2D.
CVE-2013-0431 Low 2013-01-31 Outside Waratek scope Exploited Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.