WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product hama✕
Overview 12 matches · 1 in Waratek scope · 1 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 0 EPSS ≥ 0.5
12matches 1in Waratek scope8.3% 1protected8.3% 0exploited0.0% 0CISA KEV0.0% 3public PoC25.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 1 8.3% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 11 91.7% Withdrawn CVE 0 0.0%
Critical 2 16.7% High 3 25.0% Medium 6 50.0% Low 1 8.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 8.3% partly blocked 0 0.0% not blocked 11 91.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 25.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 9 75.0%
split by peak 3 / year
Not applicable: 11Protected by Waratek: 1 Low: 1Medium: 6High: 3Critical: 2 not blocked: 11blocked by ARMR today: 1 No public exploit: 9Working exploit published: 3
20041 Not applicable1 High1 not blocked1 No public exploit1 20051 Not applicable1 Medium1 not blocked1 No public exploit1 20062 Not applicable2 Medium1 Low1 not blocked2 No public exploit2 20070 20083 Not applicable3 Medium3 not blocked3 Working exploit published3 20090 20100 20110 20120 20131 Not applicable1 Medium1 not blocked1 No public exploit1 20140 20150 20160 20170 20182 Not applicable2 Critical2 not blocked2 No public exploit2 20190 20201 Not applicable1 High1 not blocked1 No public exploit1 20210 20221 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1
2004200620082010201220142016201820202022
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2022-45470 High 2022-11-21 Protected by Waratek No public exploit missing input validation in Apache Hama may cause information disclosure through path traversal and XSS. Since Apache Hama is EOL, we do not expect these issues to be fixed.
CVE-2011-4338 High 2020-02-12 Not applicable No public exploit Shaman 1.0.9: Users can add the line askforpwd=false to his shaman.conf file, without entering the root password in shaman. The next time shaman is run, root privileges are granted despite the fact that the user never entered the root password.
CVE-2018-7463 Critical 2018-02-26 Not applicable No public exploit SQL injection vulnerability in files.php in the "files" component in ASANHAMAYESH CMS 3.4.6 allows a remote attacker to execute arbitrary SQL commands via the "id" parameter.
CVE-2017-18194 Critical 2018-02-22 Not applicable No public exploit SQL injection vulnerability in users/signup.php in the "signup" component in HamayeshNegar CMS allows a remote attacker to execute arbitrary SQL commands via the "utype" parameter.
CVE-2013-4704 Medium 2013-09-16 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in ChamaNet ChamaCargo 7.0000 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-2907 Medium 2008-06-30 Not applicable Working exploit published SQL injection vulnerability in admin/index.php in WebChamado 1.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the eml parameter.
CVE-2008-2906 Medium 2008-06-30 Not applicable Working exploit published SQL injection vulnerability in lista_anexos.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the tsk_id parameter.
CVE-2008-2858 Medium 2008-06-25 Not applicable Working exploit published SQL injection vulnerability in index.php in WebChamado 1.1 allows remote attackers to execute arbitrary SQL commands via the eml parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
CVE-2006-6249 Medium 2006-12-04 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in Chama Cargo 4.36 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2006-4787 Low 2006-09-14 Not applicable No public exploit AlphaMail before 1.0.16 allows local users to obtain sensitive information via the logging functionality, which displays unencrypted passwords in an error message. NOTE: some details are obtained from third party information.
CVE-2005-1120 Medium 2005-05-02 Not applicable No public exploit Multiple cross-site scripting (XSS) vulnerabilities in IlohaMail 0.8.14 and earlier allow remote attackers to inject arbitrary web script or HTML via the e-mail (1) body, (2) filename, or (3) MIME type.
CVE-2004-2500 High 2004-12-31 Not applicable No public exploit Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unknown impact and attack vectors.