WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕EPSS ≥ 0.5✕CWE CWE-697✕
Overview 4 matches · 0 in Waratek scope · 0 protected · 3 exploited · 2 CISA KEV · 3 public PoC
4matches 0in Waratek scope0.0% 0protected0.0% 3exploited75.0% 2CISA KEV50.0% 3public PoC75.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 4 100.0% Withdrawn CVE 0 0.0%
Critical 1 25.0% High 3 75.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 75.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 1 25.0% No public exploit 0 0.0%
split by peak 2 / quarter
Not applicable: 4 High: 3Critical: 1 not blocked: 4 Forecast only: 1Exploited: 3
Q1 202 Not applicable2 High2 not blocked2 Exploited1 Forecast only1 Q2 200 Q3 200 Q4 200 Q1 210 Q2 210 Q3 210 Q4 210 Q1 220 Q2 220 Q3 220 Q4 220 Q1 230 Q2 230 Q3 230 Q4 230 Q1 240 Q2 240 Q3 241 Not applicable1 Critical1 not blocked1 Exploited1 Q4 240 Q1 250 Q2 251 Not applicable1 High1 not blocked1 Exploited1
Q2 20Q4 20Q2 21Q4 21Q2 22Q4 22Q2 23Q4 23Q2 24Q4 24Q2 25
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2025-3102 High 2025-04-10 Not applicable Exploited The SureTriggers: All-in-One Automation Platform plugin for WordPress is vulnerable to an authentication bypass leading to administrative account creation due to a missing empty value check on the 'secret_key' value in the 'autheticate_user' function in all versions up to, and including, 1.0.78. This makes it possible for unauthenticated attackers to create administrator accounts on the target website when the plugin is installed and activated but not configured with an API key.
CVE-2024-5217 Critical 2024-07-10 Not applicable Exploited ServiceNow has addressed an input validation vulnerability that was identified in the Washington DC, Vancouver, and earlier Now Platform releases. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. The vulnerability is addressed in the listed patches and hot fixes below, which were released during the June 2024 patching cycle. If you have not done so already, we recommend applying security patches relevant to your instance as soon as possible.
CVE-2020-8864 High 2020-03-23 Not applicable Forecast only This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of D-Link DIR-867, DIR-878, and DIR-882 routers with firmware 1.10B04. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of HNAP login requests. The issue results from the lack of proper handling of empty passwords. An attacker can leverage this vulnerability to execute arbitrary code on the router. Was ZDI-CAN-9471.
CVE-2020-5849 High 2020-03-16 Not applicable Exploited Unraid 6.8.0 allows authentication bypass.