WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product avs✕
Overview 16 matches · 1 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
16matches 1in Waratek scope6.2% 0protected0.0% 1exploited6.2% 1CISA KEV6.2% 2public PoC12.5% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 6.2% Outside Waratek scope 0 0.0% Not applicable 15 93.8% Withdrawn CVE 0 0.0%
Critical 2 12.5% High 6 37.5% Medium 8 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 16 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 6.2% Working exploit published 2 12.5% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 13 81.2%
split by peak 4 / year
Not applicable: 15No exploit published: 1 Medium: 8High: 6Critical: 2 not blocked: 16 No public exploit: 13Working exploit published: 2Exploited: 1
20051 Not applicable1 Medium1 not blocked1 No public exploit1 20060 20071 Not applicable1 High1 not blocked1 Working exploit published1 20080 20090 20100 20110 20120 20130 20140 20151 Not applicable1 Medium1 not blocked1 No public exploit1 20160 20170 20184 Not applicable4 High4 not blocked4 No public exploit4 20190 20203 Not applicable3 Medium3 not blocked3 Working exploit published1 No public exploit2 20210 20223 No exploit published1 Not applicable2 Critical2 Medium1 not blocked3 No public exploit3 20230 20243 Not applicable3 High1 Medium2 not blocked3 Exploited1 No public exploit2
2006200820102012201420162018202020222024
16 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-4978 High 2024-05-23 Not applicable Exploited Justice AV Solutions Viewer Setup 8.3.7.250-1 contains a malicious binary when executed and is signed with an unexpected authenticode signature. A remote, privileged threat actor may exploit this vulnerability to execute of unauthorized PowerShell commands.
CVE-2024-34401 Medium 2024-05-03 Not applicable No public exploit Savsoft Quiz 6.0 allows stored XSS via the index.php/quiz/insert_quiz/ quiz_name parameter.
CVE-2024-4256 Medium 2024-04-27 Not applicable No public exploit A vulnerability was found in Techkshetra Info Solutions Savsoft Quiz 6.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /public/index.php/Qbank/editCategory of the component Category Page. The manipulation of the argument category_name with the input ><script>alert('XSS')</script> leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-262148. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2022-44283 Critical 2022-11-28 Not applicable No public exploit AVS Audio Converter 10.3 is vulnerable to Buffer Overflow.
CVE-2022-36647 Medium 2022-09-02 Not applicable No public exploit PKUVCL davs2 v1.6.205 was discovered to contain a global buffer overflow via the function parse_sequence_header() at source/common/header.cc:269.
CVE-2021-41193 Critical 2022-03-01 No exploit published No public exploit wire-avs is the audio visual signaling (AVS) component of Wire, an open-source messenger. A remote format string vulnerability in versions prior to 7.1.12 allows an attacker to cause a denial of service or possibly execute arbitrary code. The issue has been fixed in wire-avs 7.1.12. There are currently no known workarounds.
CVE-2020-35349 Medium 2020-12-26 Not applicable No public exploit Savsoft Quiz 5 is affected by: Cross Site Scripting (XSS) via field_title (aka a title on the custom fields page).
CVE-2020-27515 Medium 2020-12-26 Not applicable No public exploit A Cross Site Scripting (XSS) vulnerability in Savsoft Quiz v5.0 allows remote attackers to inject arbitrary web script or HTML via the Skype ID field.
CVE-2020-24609 Medium 2020-08-25 Not applicable Working exploit published TechKshetra Info Solutions Pvt. Ltd Savsoft Quiz 5.5 and earlier has XSS which can result in an attacker injecting the XSS payload in the User Registration section and each time the admin visits the manage user section from the admin panel, the XSS triggers and the attacker can steal the cookie via crafted payload.
CVE-2018-6525 High 2018-02-02 Not applicable No public exploit In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220458.
CVE-2018-6524 High 2018-02-02 Not applicable No public exploit In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220c20.
CVE-2018-6523 High 2018-02-02 Not applicable No public exploit In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKFsAv.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x22045c.
CVE-2018-6522 High 2018-02-02 Not applicable No public exploit In nProtect AVS V4.0 before 4.0.0.39, the driver file (TKRgFtXp.SYS) allows local users to cause a denial of service (BSOD) or possibly have unspecified other impact because of not validating input values from IOCtl 0x220408.
CVE-2014-100025 Medium 2015-01-13 Not applicable No public exploit Cross-site request forgery (CSRF) vulnerability in index.php/user_data/insert_user in Savsoft Quiz allows remote attackers to hijack the authentication of administrators for requests that create an administrator account via a crafted request.
CVE-2007-6327 High 2007-12-13 Not applicable Working exploit published Buffer overflow in a certain ActiveX control in Online Media Technologies AVSMJPEGFILE.DLL 1.1.1.102 allows remote attackers to execute arbitrary code via a long first argument to the CreateStill method.
CVE-2005-2139 Medium 2005-07-05 Not applicable No public exploit PHP remote file inclusion vulnerability in user_check.php for Pavsta Auto Site allows remote attackers to execute arbitrary PHP code via the sitepath parameter.