Overview 119 matches · 14 in Waratek scope · 4 protected · 6 exploited · 1 CISA KEV · 10 public PoC · 4 EPSS ≥ 0.5
119matches
14in Waratek scope11.8%
4protected3.4%
6exploited5.0%
1CISA KEV0.8%
10public PoC8.4%
4EPSS ≥ 0.53.4%
Protected by Waratek
4
3.4%
Rule in development
0
0.0%
Mitigation candidate
1
0.8%
No exploit published
9
7.6%
Outside Waratek scope
1
0.8%
Not applicable
104
87.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
4
3.4%
partly blocked
0
0.0%
not blocked
115
96.6%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 45 / year
20071
Not applicable1
Critical1
not blocked1
Working exploit published1
20080
20090
20100
20110
20121
Not applicable1
High1
not blocked1
No public exploit1
20130
20140
20150
20160
20171
Not applicable1
Critical1
not blocked1
No public exploit1
20183
Protected by Waratek2
Not applicable1
Critical1
High1
Medium1
blocked by ARMR today2
not blocked1
No public exploit3
20193
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20206
No exploit published3
Outside Waratek scope1
Not applicable2
Critical1
High3
Medium2
not blocked6
No public exploit6
202110
Not applicable10
Critical4
High5
Medium1
not blocked10
Exploited1
No public exploit9
202210
Protected by Waratek2
No exploit published1
Not applicable7
Critical3
High6
Medium1
blocked by ARMR today2
not blocked8
Proof of concept only3
No public exploit7
202312
No exploit published1
Not applicable11
Critical9
High1
Medium2
not blocked12
Exploited1
Proof of concept only1
No public exploit10
20247
Mitigation candidate1
No exploit published1
Not applicable5
Critical3
High4
not blocked7
Exploited2
Proof of concept only2
No public exploit3
202520
No exploit published1
Not applicable19
Critical4
High9
Medium3
Low4
not blocked20
Exploited1
Proof of concept only7
No public exploit12
202645
No exploit published2
Not applicable43
Critical23
High10
Medium6
Low6
not blocked45
Exploited1
Working exploit published1
Proof of concept only18
No public exploit25
2008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2021-32563 | Critical | 2021-05-11 | Not applicable | No public exploit | An issue was discovered in Thunar before 4.16.7 and 4.17.x before 4.17.2. When called with a regular file as a command-line argument, it delegates to a different program (based on the file type) without user confirmation. This could be used to achieve code execution. |
| CVE-2021-21413 | Critical | 2021-03-30 | Not applicable | No public exploit | isolated-vm is a library for nodejs which gives you access to v8's Isolate interface. Versions of isolated-vm before v4.0.0 have API pitfalls which may make it easy for implementers to expose supposed secure isolates to the permissions of the main nodejs isolate. Reference objects allow access to the underlying reference's full prototype chain. In an environment where the implementer has exposed a Reference instance to an attacker they would be able to use it to acquire a Reference to the nodejs context's Function object. Similar application-specific attacks could be possible by modifying the local prototype of other API objects. Access to NativeModule objects could allow an attacker to load and run native code from anywhere on the filesystem. If combined with, for example, a file upload API this would allow for arbitrary code execution. This is addressed in v4.0.0 through a series of related changes. |
| CVE-2020-15568 | Critical | 2021-01-30 | Not applicable | Exploited | TerraMaster TOS before 4.1.29 has Invalid Parameter Checking that leads to code injection as root. This is a dynamic class method invocation vulnerability in include/exportUser.php, in which an attacker can trigger a call to the exec method with (for example) OS commands in the opt parameter. |
| CVE-2021-26276 | Medium | 2021-01-27 | Not applicable | No public exploit | scripts/cli.js in the GoDaddy node-config-shield (aka Config Shield) package before 0.2.2 for Node.js calls eval when processing a set command. NOTE: the vendor reportedly states that this is not a vulnerability. The set command was not intended for use with untrusted data |
| CVE-2020-35491 | High | 2020-12-17 | No exploit published | No public exploit | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.SharedPoolDataSource. |
| CVE-2020-3419 | Critical | 2020-11-18 | Outside Waratek scope | No public exploit | A vulnerability in Cisco Webex Meetings and Cisco Webex Meetings Server could allow an unauthenticated, remote attacker to join a Webex session without appearing on the participant list. This vulnerability is due to improper handling of authentication tokens by a vulnerable Webex site. An attacker could exploit this vulnerability by sending crafted requests to a vulnerable Cisco Webex Meetings or Cisco Webex Meetings Server site. A successful exploit requires the attacker to have access to join a Webex meeting, including applicable meeting join links and passwords. The attacker could then exploit this vulnerability to join meetings, without appearing in the participant list, while having full access to audio, video, chat, and screen sharing capabilities. |
| CVE-2020-25803 | High | 2020-10-06 | No exploit published | No public exploit | Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via FreeMarker template exposed objects. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7. |
| CVE-2020-25802 | High | 2020-10-06 | No exploit published | No public exploit | Improper Control of Dynamically-Managed Code Resources vulnerability in Crafter Studio of Crafter CMS allows authenticated developers to execute OS commands via Groovy scripting. This issue affects: Crafter Software Crafter CMS 3.0 versions prior to 3.0.27; 3.1 versions prior to 3.1.7. |
| CVE-2020-15372 | Medium | 2020-09-25 | Not applicable | No public exploit | A vulnerability in the command-line interface in Brocade Fabric OS before Brocade Fabric OS v8.2.2a1, 8.2.2c, v7.4.2g, v8.2.0_CBN3, v8.2.1e, v8.1.2k, v9.0.0, could allow a local authenticated attacker to modify shell variables, which may lead to an escalation of privileges or bypassing the logging. |
| CVE-2020-4100 | Medium | 2020-07-15 | Not applicable | No public exploit | "HCL Verse for Android was found to employ dynamic code loading. This mechanism allows a developer to specify which components of the application should not be loaded by default when the application is started. Typically, core components and additional dependencies are loaded natively at runtime; however, dynamically loaded components are only loaded as they are specifically requested. While this can have a positive impact on performance, or grant additional functionality (for example, a non-invasive update feature), it can also open the application to loading unintended code if not implemented properly." |
| CVE-2019-15006 | Medium | 2019-12-19 | Not applicable | No public exploit | There was a man-in-the-middle (MITM) vulnerability present in the Confluence Previews plugin in Confluence Server and Confluence Data Center. This plugin was used to facilitate communication with the Atlassian Companion application. The Confluence Previews plugin in Confluence Server and Confluence Data Center communicated with the Companion application via the atlassian-domain-for-localhost-connections-only.com domain name, the DNS A record of which points at 127.0.0.1. Additionally, a signed certificate for the domain was publicly distributed with the Companion application. An attacker in the position to control DNS resolution of their victim could carry out a man-in-the-middle (MITM) attack between Confluence Server (or Confluence Data Center) and the atlassian-domain-for-localhost-connections-only.com domain intended to be used with the Companion application. This certificate has been revoked, however, usage of the atlassian-domain-for-localhost-connections-only.com domain name was still present in Confluence Server and Confluence Data Center. An attacker could perform the described attack by denying their victim access to certificate revocation information, and carry out a man-in-the-middle (MITM) attack to observe files being edited using the Companion application and/or modify them, and access some limited user information. |
| CVE-2019-1617 | High | 2019-03-11 | Not applicable | No public exploit | A vulnerability in the Fibre Channel over Ethernet (FCoE) N-port Virtualization (NPV) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition. The vulnerability is due to an incorrect processing of FCoE packets when the fcoe-npv feature is uninstalled. An attacker could exploit this vulnerability by sending a stream of FCoE frames from an adjacent host to an affected device. An exploit could allow the attacker to cause packet amplification to occur, resulting in the saturation of interfaces and a DoS condition. Nexus 9000 Series Switches in Standalone NX-OS Mode are affected running software versions prior to 7.0(3)I7(5) and 9.2(2). |
| CVE-2019-1595 | High | 2019-03-06 | Not applicable | No public exploit | A vulnerability in the Fibre Channel over Ethernet (FCoE) protocol implementation in Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected device. The vulnerability is due to an incorrect allocation of an internal interface index. An adjacent attacker with the ability to submit a crafted FCoE packet that crosses affected interfaces could trigger this vulnerability. A successful exploit could allow the attacker to cause a packet loop and high throughput on the affected interfaces, resulting in a DoS condition. This vulnerability has been fixed in version 7.3(5)N1(1). |
| CVE-2018-19836 | Medium | 2018-12-03 | Not applicable | No public exploit | In Metinfo 6.1.3, include/interface/applogin.php allows setting arbitrary HTTP headers (including the Cookie header), and common.inc.php allows registering variables from the $_COOKIE value. This issue can, for example, be exploited in conjunction with CVE-2018-19835 to bypass many XSS filters such as the Chrome XSS filter. |
| CVE-2017-3202 | Critical | 2018-06-11 | Protected by Waratek | No public exploit | The Java implementation of AMF3 deserializers used in Flamingo amf-serializer by Exadel, version 2.2.0, may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The ability to exploit this vulnerability depends on the availability of classes in the class path that make use of deserialization. A remote attacker with the ability to spoof or control information may be able to send serialized Java objects with pre-set properties that result in arbitrary code execution when deserialized. |
| CVE-2017-3200 | High | 2018-06-11 | Protected by Waratek | No public exploit | The Java implementation of AMF3 deserializers used in GraniteDS, version 3.1.1.G, may allow instantiation of arbitrary classes via their public parameter-less constructor and subsequently call arbitrary Java Beans setter methods. The ability to exploit this vulnerability depends on the availability of classes in the class path that make use of deserialization. A remote attacker with the ability to spoof or control information may be able to send serialized Java objects with pre-set properties that result in arbitrary code execution when deserialized. |
| CVE-2014-9852 | Critical | 2017-03-17 | Not applicable | No public exploit | distribute-cache.c in ImageMagick re-uses objects after they have been destroyed, which allows remote attackers to have unspecified impact via unspecified vectors. |
| CVE-2012-2055 | High | 2012-04-05 | Not applicable | No public exploit | GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the public_key[user_id] value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability. |
| CVE-2006-7079 | Critical | 2007-03-02 | Not applicable | Working exploit published | Variable extraction vulnerability in include/common.php in exV2 2.0.4.3 and earlier allows remote attackers to overwrite arbitrary program variables and conduct directory traversal attacks to execute arbitrary code by modifying the $xoopsOption['pagetype'] variable. |