WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕EPSS ≥ 0.5✕
Overview 23 matches · 2 in Waratek scope · 0 protected · 5 exploited · 2 CISA KEV · 14 public PoC
23matches 2in Waratek scope8.7% 0protected0.0% 5exploited21.7% 2CISA KEV8.7% 14public PoC60.9%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 4.3% No exploit published 1 4.3% Outside Waratek scope 6 26.1% Not applicable 15 65.2% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 0 0.0% Low 23 100.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 23 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 5 21.7% Working exploit published 9 39.1% Proof of concept only 2 8.7% Forecast only 7 30.4% No public exploit 0 0.0%
split by peak 3 / year
Not applicable: 15Outside Waratek scope: 6No exploit published: 1Mitigation candidate: 1 Low: 23 not blocked: 23 Forecast only: 7Proof of concept only: 2Working exploit published: 9Exploited: 5
19972 Not applicable2 Low2 not blocked2 Forecast only2 19980 19990 20002 Not applicable2 Low2 not blocked2 Working exploit published2 20010 20022 No exploit published1 Not applicable1 Low2 not blocked2 Forecast only2 20031 Outside Waratek scope1 Low1 not blocked1 Working exploit published1 20041 Not applicable1 Low1 not blocked1 Working exploit published1 20051 Not applicable1 Low1 not blocked1 Exploited1 20062 Not applicable2 Low2 not blocked2 Working exploit published2 20070 20080 20091 Not applicable1 Low1 not blocked1 Exploited1 20101 Mitigation candidate1 Low1 not blocked1 Working exploit published1 20110 20120 20132 Outside Waratek scope2 Low2 not blocked2 Exploited2 20141 Outside Waratek scope1 Low1 not blocked1 Proof of concept only1 20152 Outside Waratek scope2 Low2 not blocked2 Proof of concept only1 Forecast only1 20163 Not applicable3 Low3 not blocked3 Working exploit published1 Forecast only2 20170 20180 20190 20200 20210 20220 20231 Not applicable1 Low1 not blocked1 Working exploit published1 20240 20251 Not applicable1 Low1 not blocked1 Exploited1
1998200120042007201020132016201920222025
23 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2025-9528 Low 2025-08-27 Not applicable Exploited A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command can lead to os command injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2023-4547 Low 2023-08-26 Not applicable Working exploit published A flaw has been found in SPA-Cart eCommerce CMS 1.9.0.3. The affected element is an unknown function of the file /search. This manipulation of the argument filter[brandid]/filter[price] causes cross site scripting. The attack is possible to be carried out remotely. The exploit has been published and may be used. Upgrading to version 1.9.1.4 is sufficient to fix this issue. It is advisable to upgrade the affected component.
CVE-2016-3325 Low 2016-09-14 Not applicable Working exploit published Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to obtain sensitive information via a crafted web site, aka "Microsoft Browser Information Disclosure Vulnerability."
CVE-2016-3251 Low 2016-07-13 Not applicable Forecast only The GDI component in the kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows local users to obtain sensitive kernel-address information via a crafted application, aka "Win32k Information Disclosure Vulnerability."
CVE-2016-0701 Low 2016-02-15 Not applicable Forecast only The DH_check_pub_key function in crypto/dh/dh_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for Diffie-Hellman (DH) key exchange, which makes it easier for remote attackers to discover a private DH exponent by making multiple handshakes with a peer that chose an inappropriate number, as demonstrated by a number in an X9.42 file.
CVE-2015-4000 Low 2015-05-21 Outside Waratek scope Proof of concept only The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_EXPORT choice, which allows man-in-the-middle attackers to conduct cipher-downgrade attacks by rewriting a ClientHello with DHE replaced by DHE_EXPORT and then rewriting a ServerHello with DHE_EXPORT replaced by DHE, aka the "Logjam" issue.
CVE-2015-2808 Low 2015-04-01 Outside Waratek scope Forecast only The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the initial bytes of a stream by sniffing network traffic that occasionally relies on keys affected by the Invariance Weakness, and then using a brute-force approach involving LSB values, aka the "Bar Mitzvah" issue.
CVE-2014-3566 Low 2014-10-15 Outside Waratek scope Proof of concept only The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
CVE-2013-2423 Low 2013-04-17 Outside Waratek scope Exploited Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 7, allows remote attackers to affect integrity via unknown vectors related to HotSpot. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented on claims from the original researcher that this vulnerability allows remote attackers to bypass permission checks by the MethodHandles method and modify arbitrary public final fields using reflection and type confusion, as demonstrated using integer and double fields to disable the security manager.
CVE-2013-0431 Low 2013-01-31 Outside Waratek scope Exploited Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490.
CVE-2010-1157 Low 2010-04-23 Mitigation candidate Working exploit published Apache Tomcat 5.5.0 through 5.5.29 and 6.0.0 through 6.0.26 might allow remote attackers to discover the server's hostname or IP address by sending a request for a resource that requires (1) BASIC or (2) DIGEST authentication, and then reading the realm field in the WWW-Authenticate header in the reply.
CVE-2009-1536 Low 2009-08-12 Not applicable Exploited ASP.NET in Microsoft .NET Framework 2.0 SP1 and SP2 and 3.5 Gold and SP1, when ASP 2.0 is used in integrated mode on IIS 7.0, does not properly manage request scheduling, which allows remote attackers to cause a denial of service (daemon outage) via a series of crafted HTTP requests, aka "Remote Unauthenticated Denial of Service in ASP.NET Vulnerability."
CVE-2006-5614 Low 2006-10-31 Not applicable Working exploit published Microsoft Windows NAT Helper Components (ipnathlp.dll) on Windows XP SP2, when Internet Connection Sharing is enabled, allows remote attackers to cause a denial of service (svchost.exe crash) via a malformed DNS query, which results in a null pointer dereference.
CVE-2006-5229 Low 2006-10-10 Not applicable Working exploit published OpenSSH portable 4.1 on SUSE Linux, and possibly other platforms and versions, and possibly under limited configurations, allows remote attackers to determine valid usernames via timing discrepancies in which responses take longer for valid usernames than invalid ones, as demonstrated by sshtime. NOTE: as of 20061014, it appears that this issue is dependent on the use of manually-set passwords that causes delays when processing /etc/shadow due to an increased number of rounds.
CVE-2005-1790 Low 2005-06-01 Not applicable Exploited Microsoft Internet Explorer 6 SP2 6.0.2900.2180 and 6.0.2800.1106, and earlier versions, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a Javascript BODY onload event that calls the window function, aka "Mismatched Document Object Model Objects Memory Corruption Vulnerability."
CVE-2004-1857 Low 2004-03-24 Not applicable Working exploit published Directory traversal vulnerability in setinfo.hts in HP Web Jetadmin 7.5.2546 allows remote authenticated attackers to read arbitrary files via a .. (dot dot) in the setinclude parameter.
CVE-2003-0727 Low 2003-10-20 Outside Waratek scope Working exploit published Multiple buffer overflows in the XML Database (XDB) functionality for Oracle 9i Database Release 2 allow local users to cause a denial of service or hijack user sessions.
CVE-2002-0422 Low 2002-08-12 Not applicable Forecast only IIS 5 and 5.1 supporting WebDAV methods allows remote attackers to determine the internal IP address of the system (which may be obscured by NAT) via (1) a PROPFIND HTTP request with a blank Host header, which leaks the address in an HREF property in a 207 Multi-Status response, or (2) via the WRITE or MKCOL method, which leaks the IP in the Location server header.
CVE-2002-0568 Low 2002-07-03 No exploit published Forecast only Oracle 9i Application Server stores XSQL and SOAP configuration files insecurely, which allows local users to obtain sensitive information including usernames and passwords by requesting (1) XSQLConfig.xml or (2) soapConfig.xml through a virtual directory.
CVE-2000-0649 Low 2000-07-13 Not applicable Working exploit published IIS 4.0 allows remote attackers to obtain the internal IP address of the server via an HTTP 1.0 request for a web page which is protected by basic authentication and has no realm defined.
CVE-2000-0402 Low 2000-05-30 Not applicable Working exploit published The Mixed Mode authentication capability in Microsoft SQL Server 7.0 stores the System Administrator (sa) account in plaintext in a log file which is readable by any user, aka the "SQL Server 7.0 Service Pack Password" vulnerability.
CVE-1999-0532 Low 1997-07-01 Not applicable Forecast only A DNS server allows zone transfers.
CVE-1999-0612 Low 1997-03-01 Not applicable Forecast only A version of finger is running that exposes valid user information to any entity on the network.