WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕EPSS ≥ 0.5✕Vendor netbsd✕
Overview 11 matches · 0 in Waratek scope · 0 protected · 2 exploited · 0 CISA KEV · 10 public PoC
11matches 0in Waratek scope0.0% 0protected0.0% 2exploited18.2% 0CISA KEV0.0% 10public PoC90.9%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 9.1% Not applicable 10 90.9% Withdrawn CVE 0 0.0%
Critical 1 9.1% High 5 45.5% Medium 4 36.4% Low 1 9.1% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 11 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 18.2% Working exploit published 8 72.7% Proof of concept only 1 9.1% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 4 / year
Not applicable: 10Outside Waratek scope: 1 Low: 1Medium: 4High: 5Critical: 1 not blocked: 11 Proof of concept only: 1Working exploit published: 8Exploited: 2
19972 Not applicable2 High1 Medium1 not blocked2 Working exploit published2 19981 Not applicable1 Medium1 not blocked1 Working exploit published1 19990 20000 20010 20020 20034 Not applicable4 Critical1 High2 Medium1 not blocked4 Exploited1 Working exploit published3 20041 Not applicable1 Medium1 not blocked1 Working exploit published1 20050 20060 20070 20080 20090 20100 20110 20120 20130 20142 Outside Waratek scope1 Not applicable1 High1 Low1 not blocked2 Working exploit published1 Proof of concept only1 20150 20160 20170 20180 20190 20200 20210 20220 20230 20241 Not applicable1 High1 not blocked1 Exploited1
1997200020032006200920122015201820212024
11 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-6387 High 2024-07-01 Not applicable Exploited A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.
CVE-2014-8517 High 2014-11-17 Not applicable Working exploit published The fetch_url function in usr.bin/ftp/fetch.c in tnftp, as used in NetBSD 5.1 through 5.1.4, 5.2 through 5.2.2, 6.0 through 6.0.6, and 6.1 through 6.1.5 allows remote attackers to execute arbitrary commands via a | (pipe) character at the end of an HTTP redirect.
CVE-2014-3566 Low 2014-10-15 Outside Waratek scope Proof of concept only The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, aka the "POODLE" issue.
CVE-2004-0230 Medium 2004-08-18 Not applicable Working exploit published TCP, when using a large Window Size, makes it easier for remote attackers to guess sequence numbers and cause a denial of service (connection loss) to persistent TCP connections by repeatedly injecting a TCP RST packet, especially in protocols that use long-lived connections, such as BGP.
CVE-2003-0694 High 2003-10-06 Not applicable Exploited The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.
CVE-2003-0466 Critical 2003-08-27 Not applicable Working exploit published Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
CVE-2002-1337 High 2003-03-07 Not applicable Working exploit published Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.
CVE-2003-0001 Medium 2003-01-17 Not applicable Working exploit published Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak.
CVE-1999-0513 Medium 1998-01-05 Not applicable Working exploit published ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.
CVE-1999-0016 Medium 1997-12-01 Not applicable Working exploit published Land IP denial of service.
CVE-1999-0046 High 1997-02-06 Not applicable Working exploit published Buffer overflow of rlogin program using TERM environmental variable.