CWE-825 CVEs | Waratek

VRT Sign in

Look up CVE IDs Status Exploitation Severity

Reset

Overview 101 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 1 EPSS ≥ 0.5

101matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 1EPSS ≥ 0.51.0%

Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 1.0% Not applicable 100 99.0% Withdrawn CVE 0 0.0%

Critical 24 23.8% High 52 51.5% Medium 24 23.8% Low 1 1.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 101 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 9 8.9% Forecast only 0 0.0% No public exploit 92 91.1%

split by StatusSeverityProtectionExploit maturity peak 75 / year

20191 Not applicable1 High1 not blocked1 No public exploit1 20200 20212 Not applicable2 Critical1 Medium1 not blocked2 No public exploit2 20220 20238 Not applicable8 Critical7 High1 not blocked8 No public exploit8 20246 Not applicable6 Critical1 High2 Medium3 not blocked6 Proof of concept only2 No public exploit4 20259 Outside Waratek scope1 Not applicable8 Critical1 High1 Medium7 not blocked9 No public exploit9 202675 Not applicable75 Critical14 High47 Medium13 Low1 not blocked75 Proof of concept only7 No public exploit68

20192020202120222023202420252026

101 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2019-15691	High	2019-12-26	Not applicable	No public exploit	TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack unwinding. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2019-15691

High

2019-12-26

Not applicable

No public exploit

TigerVNC version prior to 1.10.1 is vulnerable to stack use-after-return, which occurs due to incorrect usage of stack memory in ZRLEDecoder. If decoding routine would throw an exception, ZRLEDecoder may try to access stack variable, which has been already freed during the process of stack unwinding. Exploitation of this vulnerability could potentially result into remote code execution. This attack appear to be exploitable via network connectivity.