WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕EPSS ≥ 0.5✕Vendor embedthis✕
Overview 4 matches · 0 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 2 public PoC
4matches 0in Waratek scope0.0% 0protected0.0% 1exploited25.0% 1CISA KEV25.0% 2public PoC50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 25.0% Not applicable 3 75.0% Withdrawn CVE 0 0.0%
Critical 2 50.0% High 1 25.0% Medium 1 25.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 25.0% Working exploit published 0 0.0% Proof of concept only 1 25.0% Forecast only 2 50.0% No public exploit 0 0.0%
split by peak 1 / year
Not applicable: 3Outside Waratek scope: 1 Medium: 1High: 1Critical: 2 not blocked: 4 Forecast only: 2Proof of concept only: 1Exploited: 1
20151 Outside Waratek scope1 Medium1 not blocked1 Forecast only1 20160 20171 Not applicable1 High1 not blocked1 Exploited1 20180 20191 Not applicable1 Critical1 not blocked1 Forecast only1 20200 20211 Not applicable1 Critical1 not blocked1 Proof of concept only1
2015201620172018201920202021
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2021-42342 Critical 2021-10-14 Not applicable Proof of concept only An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts without being prefixed with the CGI prefix. This permits tunneling untrusted environment variables into vulnerable CGI scripts.
CVE-2019-5096 Critical 2019-12-03 Not applicable Forecast only An exploitable code execution vulnerability exists in the processing of multi-part/form-data requests within the base GoAhead web server application in versions v5.0.1, v.4.1.1 and v3.6.5. A specially crafted HTTP request can lead to a use-after-free condition during the processing of this request that can be used to corrupt heap structures that could lead to full code execution. The request can be unauthenticated in the form of GET or POST requests, and does not require the requested resource to exist on the server.
CVE-2017-17562 High 2017-12-12 Not applicable Exploited Embedthis GoAhead before 3.6.5 allows remote code execution if CGI is enabled and a CGI program is dynamically linked. This is a result of initializing the environment of forked CGI scripts using untrusted HTTP request parameters in the cgiHandler function in cgi.c. When combined with the glibc dynamic linker, this behaviour can be abused for remote code execution using special parameter names such as LD_PRELOAD. An attacker can POST their shared object payload in the body of the request, and reference it using /proc/self/fd/0.
CVE-2014-9708 Medium 2015-03-31 Outside Waratek scope Forecast only Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Range header with an empty value, as demonstrated by "Range: x=,".