Overview 70 matches · 1 in Waratek scope · 0 protected · 3 exploited · 1 CISA KEV · 4 public PoC · 1 EPSS ≥ 0.5
70matches
1in Waratek scope1.4%
0protected0.0%
3exploited4.3%
1CISA KEV1.4%
4public PoC5.7%
1EPSS ≥ 0.51.4%
Protected by Waratek
1
1.4%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
69
98.6%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
1
1.4%
not blocked
69
98.6%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 30 / year
20072
Not applicable2
High2
not blocked2
Exploited1
No public exploit1
20080
20091
Not applicable1
High1
not blocked1
Working exploit published1
20100
20110
20120
20130
20140
20150
20161
Protected by Waratek1
Critical1
partly blocked1
Exploited1
20171
Not applicable1
Medium1
not blocked1
No public exploit1
20180
20192
Not applicable2
Medium2
not blocked2
No public exploit2
20200
20219
Not applicable9
Critical2
High5
Medium2
not blocked9
Exploited1
No public exploit8
202215
Not applicable15
High13
Medium2
not blocked15
No public exploit15
202330
Not applicable30
High2
Medium28
not blocked30
Proof of concept only1
No public exploit29
20247
Not applicable7
Critical1
High5
Medium1
not blocked7
No public exploit7
20251
Not applicable1
Medium1
not blocked1
No public exploit1
20261
Not applicable1
Medium1
not blocked1
No public exploit1
2008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-3494 | Medium | 2026-03-03 | Not applicable | No public exploit | In MariaDB server version through 11.8.5, when server audit plugin is enabled with server_audit_events variable configured with QUERY_DCL, QUERY_DDL, or QUERY_DML filtering, if an authenticated database user invokes a SQL statement prefixed with double-hyphen (—) or hash (#) style comments, the statement is not logged. |
| CVE-2025-29988 | Medium | 2025-04-09 | Not applicable | No public exploit | Dell Client Platform BIOS contains a Stack-based Buffer Overflow Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution. |
| CVE-2024-39584 | High | 2024-08-28 | Not applicable | No public exploit | Dell Client Platform BIOS contains a Use of Default Cryptographic Key Vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Secure Boot bypass and arbitrary code execution. |
| CVE-2024-32860 | High | 2024-06-13 | Not applicable | No public exploit | Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. |
| CVE-2024-32859 | High | 2024-06-13 | Not applicable | No public exploit | Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. |
| CVE-2024-32858 | High | 2024-06-13 | Not applicable | No public exploit | Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution. |
| CVE-2024-32856 | Medium | 2024-06-13 | Not applicable | No public exploit | Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. |
| CVE-2023-32475 | High | 2024-06-07 | Not applicable | No public exploit | Dell BIOS contains a missing support for integrity check vulnerability. An attacker with physical access to the system could potentially bypass security mechanisms to run arbitrary code on the system. |
| CVE-2024-27905 | Critical | 2024-02-27 | Not applicable | No public exploit | ** UNSUPPORTED WHEN ASSIGNED ** Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Aurora. An endpoint exposing internals to unauthenticated users can be used as a "padding oracle" allowing an anonymous attacker to construct a valid authentication cookie. Potentially this could be combined with vulnerabilities in other components to achieve remote code execution. As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users. NOTE: This vulnerability only affects products that are no longer supported by the maintainer. |
| CVE-2023-43176 | High | 2023-10-03 | Not applicable | Proof of concept only | A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabredav file. |
| CVE-2023-28061 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28060 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28059 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28058 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28056 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28054 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28052 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28050 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28044 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28042 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28041 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28040 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28039 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28036 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28035 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28034 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28033 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28032 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28031 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28030 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28029 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable |
| CVE-2023-28028 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28027 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-28026 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-25938 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-25937 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2023-25936 | Medium | 2023-06-23 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with administrator privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2022-24410 | Medium | 2023-02-10 | Not applicable | No public exploit | Dell BIOS contains an information exposure vulnerability. An unauthenticated local attacker with physical access to the system and knowledge of the system configuration could potentially exploit this vulnerability to read system information via debug interfaces. |
| CVE-2022-34398 | High | 2023-02-01 | Not applicable | No public exploit | Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could\u00a0potentially exploit this vulnerability by using a specifically timed DMA transaction during an SMI to gain arbitrary code execution on the system. |
| CVE-2022-32493 | High | 2022-10-12 | Not applicable | No public exploit | Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| CVE-2022-32491 | High | 2022-10-12 | Not applicable | No public exploit | Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM. |
| CVE-2022-32489 | High | 2022-10-12 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| CVE-2022-32488 | High | 2022-10-12 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| CVE-2022-32487 | High | 2022-10-12 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| CVE-2022-32485 | High | 2022-10-12 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| CVE-2022-32484 | Medium | 2022-10-12 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2022-32483 | Medium | 2022-10-12 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable. |
| CVE-2022-24421 | High | 2022-03-11 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. |
| CVE-2022-24420 | High | 2022-03-11 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. |
| CVE-2022-24419 | High | 2022-03-11 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. |
| CVE-2022-24416 | High | 2022-03-11 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. |
| CVE-2022-24415 | High | 2022-03-11 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution during SMM. |
| CVE-2021-36343 | High | 2022-01-24 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| CVE-2021-36342 | High | 2022-01-24 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| CVE-2021-36325 | High | 2021-11-12 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| CVE-2021-36324 | High | 2021-11-12 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| CVE-2021-36323 | High | 2021-11-12 | Not applicable | No public exploit | Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM. |
| CVE-2021-33210 | Medium | 2021-11-03 | Not applicable | No public exploit | An issue was discovered in Fimer Aurora Vision before 2.97.10. An attacker can (in the WebUI) obtain plant information without authentication by reading the response of APIs from a kiosk view of a plant. |
| CVE-2021-33209 | Medium | 2021-11-03 | Not applicable | No public exploit | An issue was discovered in Fimer Aurora Vision before 2.97.10. The response to a failed login attempt discloses whether the username or password is wrong, helping an attacker to enumerate usernames. This can make a brute-force attack easier. |
| CVE-2021-41872 | High | 2021-10-27 | Not applicable | No public exploit | Skyworth Digital Technology Penguin Aurora Box 41502 has a denial of service vulnerability, which can be exploited by attackers to cause a denial of service. |
| CVE-2021-41873 | Critical | 2021-10-26 | Not applicable | No public exploit | Penguin Aurora TV Box 41502 is a high-end network HD set-top box produced by Tencent Video and Skyworth Digital. An unauthorized access vulnerability exists in the Penguin Aurora Box. An attacker can use the vulnerability to gain unauthorized access to a specific link to remotely control the TV. |
| CVE-2021-26294 | High | 2021-03-07 | Not applicable | Exploited | An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings/settings.xml file containing admin panel credentials), as demonstrated by dav/server.php/files/personal/%2e%2e when using the caldav_public_user account (with caldav_public_user as its password). |
| CVE-2021-26293 | Critical | 2021-03-04 | Not applicable | No public exploit | An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new files (such as an executable file under the web root). This is related to DAVServer.php in 8.x and DAV/Server.php in 7.x. |
| CVE-2019-19129 | Medium | 2019-11-26 | Not applicable | No public exploit | Afterlogic WebMail Pro 8.3.11, and WebMail in Afterlogic Aurora 8.3.11, allows Remote Stored XSS via an attachment name. |
| CVE-2019-16238 | Medium | 2019-09-12 | Not applicable | No public exploit | Afterlogic Aurora through 8.3.9-build-a3 has XSS that can be leveraged for session hijacking by retrieving the session cookie from the administrator login. |
| CVE-2017-14597 | Medium | 2017-09-19 | Not applicable | No public exploit | AdminPanel in AfterLogic WebMail 7.7 and Aurora 7.7.5 has XSS via the txtDomainName field to adminpanel/modules/pro/inc/ajax.php during addition of a domain. |
| CVE-2016-4437 | Critical | 2016-06-07 | Protected by Waratek | Exploited | Apache Shiro before 1.2.5, when a cipher key has not been configured for the "remember me" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter. |
| CVE-2009-3365 | High | 2009-09-24 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the AURORA_MODULES_FOLDER parameter. |
| CVE-2007-6345 | High | 2007-12-13 | Not applicable | No public exploit | SQL injection vulnerability in aurora framework before 20071208 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, possibly the value parameter to the pack_var function in module/db.lib/db_mysql.lib. NOTE: some of these details are obtained from third party information. |
| CVE-2007-0018 | High | 2007-01-24 | Not applicable | Exploited | Stack-based buffer overflow in the NCTAudioFile2.AudioFile ActiveX control (NCTAudioFile2.dll), as used by multiple products, allows remote attackers to execute arbitrary code via a long argument to the SetFormatLikeSample function. NOTE: the products include (1) NCTsoft NCTAudioStudio, NCTAudioEditor, and NCTDialogicVoice; (2) Magic Audio Recorder, Music Editor, and Audio Converter; (3) Aurora Media Workshop; DB Audio Mixer And Editor; (4) J. Hepple Products including Fx Audio Editor and others; (5) EXPStudio Audio Editor; (6) iMesh; (7) Quikscribe; (8) RMBSoft AudioConvert and SoundEdit Pro 2.1; (9) CDBurnerXP; (10) Code-it Software Wave MP3 Editor and aBasic Editor; (11) Movavi VideoMessage, DVD to iPod, and others; (12) SoftDiv Software Dexster, iVideoMAX, and others; (13) Sienzo Digital Music Mentor (DMM); (14) MP3 Normalizer; (15) Roemer Software FREE and Easy Hi-Q Recorder, and Easy Hi-Q Converter; (16) Audio Edit Magic; (17) Joshua Video and Audio Converter; (18) Virtual CD; (19) Cheetah CD and DVD Burner; (20) Mystik Media AudioEdit Deluxe, Blaze Media, and others; (21) Power Audio Editor; (22) DanDans Digital Media Full Audio Converter, Music Editing Master, and others; (23) Xrlly Software Text to Speech Makerand Arial Sound Recorder / Audio Converter; (24) Absolute Sound Recorder, Video to Audio Converter, and MP3 Splitter; (25) Easy Ringtone Maker; (26) RecordNRip; (27) McFunSoft iPod Audio Studio, Audio Recorder for Free, and others; (28) MP3 WAV Converter; (29) BearShare 6.0.2.26789; and (30) Oracle Siebel SimBuilder and CRM 7.x. |