WaratekVRT Sign in

Critical CWE-78 CVEs

17 CVEs, 2 exploited, 16 protected by Waratek

Reset
More filters (1)
Columns
CWE CWE-78✕
Overview 17 matches · 16 protected · 2 exploited · 0 CISA KEV · 6 public PoC · 5 EPSS ≥ 0.5
17matches 16protected94.1% 2exploited11.8% 0CISA KEV0.0% 6public PoC35.3% 5EPSS ≥ 0.529.4%
Protected by Waratek 16 94.1% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 5.9%
Critical 17 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 16 94.1% partly blocked 0 0.0% not blocked 1 5.9% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 11.8% Working exploit published 4 23.5% Proof of concept only 3 17.6% Forecast only 1 5.9% No public exploit 7 41.2%
split by peak 3 / year
No exploit published: 1Protected by Waratek: 16 Critical: 17 not blocked: 1blocked by ARMR today: 16 No public exploit: 7Forecast only: 1Proof of concept only: 3Working exploit published: 4Exploited: 2
20183 Protected by Waratek3 Critical3 blocked by ARMR today3 No public exploit3 20191 Protected by Waratek1 Critical1 blocked by ARMR today1 Working exploit published1 20202 Protected by Waratek2 Critical2 blocked by ARMR today2 Exploited2 20213 Protected by Waratek3 Critical3 blocked by ARMR today3 Working exploit published2 No public exploit1 20223 Protected by Waratek3 Critical3 blocked by ARMR today3 Proof of concept only2 Forecast only1 20231 Protected by Waratek1 Critical1 blocked by ARMR today1 Working exploit published1 20241 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 20252 Protected by Waratek1 No exploit published1 Critical2 blocked by ARMR today1 not blocked1 Proof of concept only1 No public exploit1 20261 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1
201820192020202120222023202420252026
17 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-4457 Critical 2026-10-18 Protected by Waratek No public exploit The Management Console fails to properly validate input related to the configuration of JDBC user stores. This weakness allows an attacker to supply specially crafted input that can lead to the execution of arbitrary code on the affected server. Successful exploitation of this vulnerability enables an attacker to execute arbitrary code on the server with the privileges of the WSO2 product. This could lead to a full compromise of the system.
CVE-2025-58059 Critical 2025-08-28 Protected by Waratek No public exploit Valtimo is a platform for Business Process Automation. In versions before 12.16.0.RELEASE, and from 13.0.0.RELEASE to before 13.1.2.RELEASE, any admin that can create or modify and execute process-definitions could gain access to sensitive data or resources. This includes but is not limited to: running executables on the application host, inspecting and extracting data from the host environment or application properties, spring beans (application context, database pooling). The following conditions have to be met in order to perform this attack: the user must be logged in, have the admin role, and must have some knowledge about running scripts via a the Camunda/Operator engine. Version 12.16.0 and 13.1.2 have been patched. It is strongly advised to upgrade. If no scripting is needed in any of the processes, it could be possible to disable it altogether via the ProcessEngineConfiguration. However, this workaround could lead to unexpected side-effects.
CVE-2025-26074 Critical 2025-06-30 No exploit published Proof of concept only Orkes Conductor v3.21.11 allows remote attackers to execute arbitrary OS commands through unrestricted access to Java classes.
CVE-2024-28125 Critical 2024-03-18 Protected by Waratek No public exploit FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed that this is not a vulnerability but a product specification and this is currently under further investigation.
CVE-2023-25826 Critical 2023-05-03 Protected by Waratek Working exploit published Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted OS commands into multiple parameters and execute malicious code on the OpenTSDB host system. This exploit exists due to an incomplete fix that was made when this vulnerability was previously disclosed as CVE-2020-35476. Regex validation that was implemented to restrict allowed input to the query API does not work as intended, allowing crafted commands to bypass validation.
CVE-2022-24697 Critical 2022-10-13 Protected by Waratek Forecast only Kylin's cube designer function has a command injection vulnerability when overwriting system parameters in the configuration overwrites menu. RCE can be implemented by closing the single quotation marks around the parameter value of “-- conf=” to inject any operating system command into the command line parameters. This vulnerability affects Kylin 2 version 2.6.5 and earlier, Kylin 3 version 3.1.2 and earlier, and Kylin 4 version 4.0.1 and earlier.
CVE-2022-40929 Critical 2022-09-28 Protected by Waratek Proof of concept only XXL-JOB 2.2.0 has a Command execution vulnerability in background tasks. NOTE: this is disputed because the issues/4929 report is about an intended and supported use case (running arbitrary Bash scripts on behalf of users).
CVE-2022-24881 Critical 2022-04-26 Protected by Waratek Proof of concept only Ballcat Codegen provides the function of online editing code to generate templates. In versions prior to 1.0.0.beta.2, attackers can implement remote code execution through malicious code injection of the template engine. This happens because Velocity and freemarker templates are introduced but input verification is not done. The fault is rectified in version 1.0.0.beta.2.
CVE-2021-38294 Critical 2021-10-25 Protected by Waratek Working exploit published A Command Injection vulnerability exists in the getTopologyHistory service of the Apache Storm 2.x prior to 2.2.1 and Apache Storm 1.x prior to 1.2.4. A specially crafted thrift request to the Nimbus server allows Remote Code Execution (RCE) prior to authentication.
CVE-2019-10095 Critical 2021-09-02 Protected by Waratek No public exploit bash command injection vulnerability in Apache Zeppelin allows an attacker to inject system commands into Spark interpreter settings. This issue affects Apache Zeppelin Apache Zeppelin version 0.9.0 and prior versions.
CVE-2021-21345 Critical 2021-03-23 Protected by Waratek Working exploit published XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker who has sufficient rights to execute commands of the host only by manipulating the processed input stream. No user is affected, who followed the recommendation to setup XStream's security framework with a whitelist limited to the minimal required types. If you rely on XStream's default blacklist of the Security Framework, you will have to use at least version 1.4.16.
CVE-2020-35476 Critical 2020-12-16 Protected by Waratek Exploited A remote code execution vulnerability occurs in OpenTSDB through 2.4.0 via command injection in the yrange parameter. The yrange value is written to a gnuplot file in the /tmp directory. This file is then executed via the mygnuplot.sh shell script. (tsd/GraphHandler.java attempted to prevent command injections by blocking backticks but this is insufficient.)
CVE-2020-13925 Critical 2020-07-14 Protected by Waratek Exploited Similar to CVE-2020-1956, Kylin has one more restful API which concatenates the API inputs into OS commands and then executes them on the server; while the reported API misses necessary input validation, which causes the hackers to have the possibility to execute OS command remotely. Users of all previous versions after 2.3 should upgrade to 3.1.0.
CVE-2013-7285 Critical 2019-05-15 Protected by Waratek Working exploit published Xstream API versions up to 1.4.6 and version 1.4.10, if the security framework has not been initialized, may allow a remote attacker to run arbitrary shell commands by manipulating the processed input stream when unmarshaling XML or any supported format. e.g. JSON.
CVE-2018-12972 Critical 2018-06-29 Protected by Waratek No public exploit An issue was discovered in OpenTSDB 2.3.0. Many parameters to the /q URI can execute commands, including o, key, style, and yrange and y2range and their JSON input.
CVE-2017-3936 Critical 2018-06-13 Protected by Waratek No public exploit OS Command Injection vulnerability in McAfee ePolicy Orchestrator (ePO) 5.9.0, 5.3.2, 5.3.1, 5.1.3, 5.1.2, 5.1.1, and 5.1.0 allows attackers to run arbitrary OS commands with limited privileges via not sanitizing the user input data before exporting it into a CSV format output.
CVE-2017-1000487 Critical 2018-01-03 Protected by Waratek No public exploit Plexus-utils before 3.0.16 is vulnerable to command injection because it does not correctly process the contents of double quoted strings.