WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕CWE CWE-754✕Has a public PoC✕
Overview 9 matches · 1 in Waratek scope · 1 protected · 4 exploited · 4 CISA KEV · 1 EPSS ≥ 0.5
9matches 1in Waratek scope11.1% 1protected11.1% 4exploited44.4% 4CISA KEV44.4% 1EPSS ≥ 0.511.1%
Protected by Waratek 1 11.1% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 3 33.3% Not applicable 5 55.6% Withdrawn CVE 0 0.0%
Critical 2 22.2% High 6 66.7% Medium 0 0.0% Low 1 11.1% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 11.1% partly blocked 0 0.0% not blocked 8 88.9% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 44.4% Working exploit published 2 22.2% Proof of concept only 3 33.3% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / year
Not applicable: 5Outside Waratek scope: 3Protected by Waratek: 1 Low: 1High: 6Critical: 2 not blocked: 8blocked by ARMR today: 1 Proof of concept only: 3Working exploit published: 2Exploited: 4
20171 Not applicable1 High1 not blocked1 Working exploit published1 20180 20191 Outside Waratek scope1 Critical1 not blocked1 Proof of concept only1 20200 20210 20221 Not applicable1 High1 not blocked1 Exploited1 20232 Outside Waratek scope1 Not applicable1 High2 not blocked2 Exploited2 20242 Protected by Waratek1 Outside Waratek scope1 High2 blocked by ARMR today1 not blocked1 Working exploit published1 Proof of concept only1 20252 Not applicable2 Critical1 Low1 not blocked2 Exploited1 Proof of concept only1
201720182019202020212022202320242025
9 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2025-39682 Critical 2025-09-05 Not applicable Exploited In the Linux kernel, the following vulnerability has been resolved: tls: fix handling of zero-length records on the rx_list Each recvmsg() call must process either - only contiguous DATA records (any number of them) - one non-DATA record If the next record has different type than what has already been processed we break out of the main processing loop. If the record has already been decrypted (which may be the case for TLS 1.3 where we don't know type until decryption) we queue the pending record to the rx_list. Next recvmsg() will pick it up from there. Queuing the skb to rx_list after zero-copy decrypt is not possible, since in that case we decrypted directly to the user space buffer, and we don't have an skb to queue (darg.skb points to the ciphertext skb for access to metadata like length). Only data records are allowed zero-copy, and we break the processing loop after each non-data record. So we should never zero-copy and then find out that the record type has changed. The corner case we missed is when the initial record comes from rx_list, and it's zero length.
CVE-2025-52136 Low 2025-08-10 Not applicable Proof of concept only In EMQX before 5.8.6, administrators can install arbitrary novel plugins via the Dashboard web interface. NOTE: the Supplier's position is that this is the intended behavior; however, 5.8.6 adds a defense-in-depth feature in which a plugin's acceptability (for later Dashboard installation) is set by the "emqx ctl plugins allow" CLI command.
CVE-2024-43044 High 2024-08-07 Protected by Waratek Proof of concept only Jenkins 2.470 and earlier, LTS 2.452.3 and earlier allows agent processes to read arbitrary files from the Jenkins controller file system by using the `ClassLoaderProxy#fetchJar` method in the Remoting library.
CVE-2024-4367 High 2024-05-14 Outside Waratek scope Working exploit published A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
CVE-2023-41993 High 2023-09-21 Outside Waratek scope Exploited The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
CVE-2023-41992 High 2023-09-21 Not applicable Exploited The issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.7, iOS 16.7 and iPadOS 16.7, macOS Ventura 13.6. A local attacker may be able to elevate their privileges. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.
CVE-2021-3560 High 2022-02-16 Not applicable Exploited It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
CVE-2019-17195 Critical 2019-10-15 Outside Waratek scope Proof of concept only Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.
CVE-2017-17085 High 2017-12-01 Not applicable Working exploit published In Wireshark 2.4.0 to 2.4.2 and 2.2.0 to 2.2.10, the CIP Safety dissector could crash. This was addressed in epan/dissectors/packet-cipsafety.c by validating the packet length.