WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-823✕
Overview 113 matches · 0 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
113matches 0in Waratek scope0.0% 0protected0.0% 1exploited0.9% 1CISA KEV0.9% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 0.9% Not applicable 112 99.1% Withdrawn CVE 0 0.0%
Critical 10 8.8% High 76 67.3% Medium 24 21.2% Low 3 2.7% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 113 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 0.9% Working exploit published 0 0.0% Proof of concept only 8 7.1% Forecast only 0 0.0% No public exploit 104 92.0%
split by peak 30 / year
Not applicable: 112Outside Waratek scope: 1 Low: 3Medium: 24High: 76Critical: 10 not blocked: 113 No public exploit: 104Proof of concept only: 8Exploited: 1
20171 Not applicable1 High1 not blocked1 No public exploit1 20180 20190 20202 Not applicable2 Critical1 High1 not blocked2 No public exploit2 20218 Not applicable8 High8 not blocked8 No public exploit8 20228 Not applicable8 High5 Medium3 not blocked8 Proof of concept only1 No public exploit7 202317 Not applicable17 Critical2 High12 Medium3 not blocked17 Exploited1 Proof of concept only4 No public exploit12 202422 Not applicable22 Critical4 High11 Medium7 not blocked22 No public exploit22 202525 Not applicable25 High18 Medium6 Low1 not blocked25 No public exploit25 202630 Outside Waratek scope1 Not applicable29 Critical3 High20 Medium5 Low2 not blocked30 Proof of concept only3 No public exploit27
2017201820192020202120222023202420252026
113 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2022-0614 Medium 2022-02-16 Not applicable No public exploit Use of Out-of-range Pointer Offset in Homebrew mruby prior to 3.2.
CVE-2022-0554 High 2022-02-10 Not applicable No public exploit Use of Out-of-range Pointer Offset in GitHub repository vim/vim prior to 8.2.
CVE-2021-34595 High 2021-10-26 Not applicable No public exploit A crafted request with invalid offsets may cause an out-of-bounds read or write access in CODESYS V2 Runtime Toolkit 32 Bit full and PLCWinNT prior to versions V2.4.7.56, resulting in a denial-of-service condition or local memory overwrite.
CVE-2021-3889 High 2021-10-19 Not applicable No public exploit libmobi is vulnerable to Use of Out-of-range Pointer Offset
CVE-2021-3888 High 2021-10-19 Not applicable No public exploit libmobi is vulnerable to Use of Out-of-range Pointer Offset
CVE-2021-22550 High 2021-06-08 Not applicable No public exploit An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c
CVE-2021-22549 High 2021-06-08 Not applicable No public exploit An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c
CVE-2020-27009 High 2021-04-22 Not applicable No public exploit A vulnerability has been identified in APOGEE PXC Compact (BACnet) (All versions < V3.5.5), APOGEE PXC Compact (P2 Ethernet) (All versions < V2.8.20), APOGEE PXC Modular (BACnet) (All versions < V3.5.5), APOGEE PXC Modular (P2 Ethernet) (All versions < V2.8.20), Nucleus NET (All versions < V5.2), Nucleus Source Code (Versions including affected DNS modules), TALON TC Compact (BACnet) (All versions < V3.5.5), TALON TC Modular (BACnet) (All versions < V3.5.5). The DNS domain name record decompression functionality does not properly validate the pointer offset values. The parsing of malformed responses could result in a write past the end of an allocated structure. An attacker with a privileged position in the network could leverage this vulnerability to execute code in the context of the current process or cause a denial-of-service condition.
CVE-2021-1352 High 2021-03-24 Not applicable No public exploit A vulnerability in the DECnet Phase IV and DECnet/OSI protocol processing of Cisco IOS XE Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to insufficient input validation of DECnet traffic that is received by an affected device. An attacker could exploit this vulnerability by sending DECnet traffic to an affected device. A successful exploit could allow the attacker to cause the affected device to reload, resulting in a DoS condition.
CVE-2020-13573 High 2021-01-07 Not applicable No public exploit A denial-of-service vulnerability exists in the Ethernet/IP server functionality of Rockwell Automation RSLinx Classic 2.57.00.14 CPR 9 SR 3. A specially crafted network request can lead to a denial of service. An attacker can send a sequence of malicious packets to trigger this vulnerability.
CVE-2020-6112 High 2020-09-17 Not applicable No public exploit An exploitable code execution vulnerability exists in the JPEG2000 Stripe Decoding functionality of Nitro Software, Inc.’s Nitro Pro 13.13.2.242 when decoding sub-samples. While initializing tiles with sub-sample data, the application can miscalculate a pointer for the stripes in the tile which allow for the decoder to write out of-bounds and cause memory corruption. This can result in code execution. A specially crafted image can be embedded inside a PDF and loaded by a victim in order to trigger this vulnerability.
CVE-2020-8904 Critical 2020-08-12 Not applicable No public exploit An arbitrary memory overwrite vulnerability in the trusted memory of Asylo exists in versions prior to 0.6.0. As the ecall_restore function fails to validate the range of the output_len pointer, an attacker can manipulate the tmp_output_len value and write to an arbitrary location in the trusted (enclave) memory. We recommend updating Asylo to version 0.6.0 or later.
CVE-2016-2161 High 2017-07-27 Not applicable No public exploit In Apache HTTP Server versions 2.4.0 to 2.4.23, malicious input to mod_auth_digest can cause the server to crash, and each instance continues to crash even for subsequently valid requests.
‹ prev page 2 of 2 next ›