WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕CWE CWE-908✕
Overview 11 matches · 0 in Waratek scope · 0 protected · 4 CISA KEV · 6 public PoC · 2 EPSS ≥ 0.5
11matches 0in Waratek scope0.0% 0protected0.0% 4CISA KEV36.4% 6public PoC54.5% 2EPSS ≥ 0.518.2%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 11 100.0% Withdrawn CVE 0 0.0%
Critical 2 18.2% High 5 45.5% Medium 4 36.4% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 11 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 11 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / year
Not applicable: 11 Medium: 4High: 5Critical: 2 not blocked: 11 Exploited: 11
20081 Not applicable1 Critical1 not blocked1 Exploited1 20091 Not applicable1 High1 not blocked1 Exploited1 20100 20111 Not applicable1 High1 not blocked1 Exploited1 20120 20130 20140 20150 20160 20170 20182 Not applicable2 High1 Medium1 not blocked2 Exploited2 20190 20201 Not applicable1 High1 not blocked1 Exploited1 20210 20220 20231 Not applicable1 Medium1 not blocked1 Exploited1 20242 Not applicable2 Medium2 not blocked2 Exploited2 20251 Not applicable1 Critical1 not blocked1 Exploited1 20261 Not applicable1 High1 not blocked1 Exploited1
2008201020122014201620182020202220242026
11 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-85880 High 2026-09-08 Not applicable Exploited Heap-based buffer overflow in Windows ALPC allows an authorized attacker to elevate privileges locally.
CVE-2025-5777 Critical 2025-06-17 Not applicable Exploited Insufficient input validation leading to memory overread when the NetScaler is configured as a Gateway (VPN virtual server, ICA Proxy, CVPN, RDP Proxy) OR AAA virtual server
CVE-2024-50302 Medium 2024-11-19 Not applicable Exploited In the Linux kernel, the following vulnerability has been resolved: HID: core: zero-initialize the report buffer Since the report buffer is used by all kinds of drivers in various ways, let's zero-initialize it during allocation to make sure that it can't be ever used to leak kernel memory via specially-crafted report.
CVE-2024-29745 Medium 2024-04-05 Not applicable Exploited there is a possible Information Disclosure due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
CVE-2023-22897 Medium 2023-04-12 Not applicable Exploited An issue was discovered in SecurePoint UTM before 12.2.5.1. The firewall's endpoint at /spcgi.cgi allows information disclosure of memory contents to be achieved by an authenticated user. Essentially, uninitialized data can be retrieved via an approach in which a sessionid is obtained but not used.
CVE-2020-1206 High 2020-06-09 Not applicable Exploited An information disclosure vulnerability exists in the way that the Microsoft Server Message Block 3.1.1 (SMBv3) protocol handles certain requests, aka 'Windows SMBv3 Client/Server Information Disclosure Vulnerability'.
CVE-2018-8627 Medium 2018-12-12 Not applicable Exploited An information disclosure vulnerability exists when Microsoft Excel software reads out of bound memory due to an uninitialized variable, which could disclose the contents of memory, aka "Microsoft Excel Information Disclosure Vulnerability." This affects Microsoft Office, Office 365 ProPlus, Microsoft Excel, Microsoft Excel Viewer, Excel. This CVE ID is unique from CVE-2018-8598.
CVE-2018-10115 High 2018-05-02 Not applicable Exploited Incorrect initialization logic of RAR decoder objects in 7-Zip 18.03 and before can lead to usage of uninitialized memory, allowing remote attackers to cause a denial of service (segmentation fault) or execute arbitrary code via a crafted RAR archive.
CVE-2011-1255 High 2011-06-16 Not applicable Exploited The Timed Interactive Multimedia Extensions (aka HTML+TIME) implementation in Microsoft Internet Explorer 6 through 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Time Element Memory Corruption Vulnerability."
CVE-2009-2692 High 2009-08-14 Not applicable Exploited The Linux kernel 2.6.0 through 2.6.30.4, and 2.4.4 through 2.4.37.4, does not initialize all function pointers for socket operations in proto_ops structures, which allows local users to trigger a NULL pointer dereference and gain privileges by using mmap to map page zero, placing arbitrary code on this page, and then invoking an unavailable operation, as demonstrated by the sendpage operation (sock_sendpage function) on a PF_PPPOX socket.
CVE-2008-0081 Critical 2008-01-16 Not applicable Exploited Unspecified vulnerability in Microsoft Excel 2000 SP3 through 2003 SP2, Viewer 2003, and Office 2004 for Mac allows user-assisted remote attackers to execute arbitrary code via crafted macros, aka "Macro Validation Vulnerability," a different vulnerability than CVE-2007-3490.