WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product hive✕
Overview 7 matches · 1 in Waratek scope · 1 protected · 4 CISA KEV · 2 public PoC · 3 EPSS ≥ 0.5
7matches 1in Waratek scope14.3% 1protected14.3% 4CISA KEV57.1% 2public PoC28.6% 3EPSS ≥ 0.542.9%
Protected by Waratek 1 14.3% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 6 85.7% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 4 57.1% Medium 3 42.9% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 14.3% partly blocked 0 0.0% not blocked 6 85.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 7 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / year
Not applicable: 6Protected by Waratek: 1 Medium: 3High: 4 not blocked: 6blocked by ARMR today: 1 Exploited: 7
20071 Not applicable1 Medium1 not blocked1 Exploited1 20080 20090 20100 20110 20121 Not applicable1 Medium1 not blocked1 Exploited1 20130 20140 20150 20160 20170 20181 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 20190 20201 Not applicable1 High1 not blocked1 Exploited1 20211 Not applicable1 High1 not blocked1 Exploited1 20220 20230 20240 20251 Not applicable1 Medium1 not blocked1 Exploited1 20261 Not applicable1 High1 not blocked1 Exploited1
2008201020122014201620182020202220242026
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-111560 High 2026-11-02 Not applicable Exploited Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda code allows an authenticated administrator to inject OS commands that execute with root privileges when the crafted timezone value is subsequently processed.
CVE-2025-47729 Medium 2025-05-08 Not applicable Exploited The TeleMessage archiving backend through 2025-05-05 holds cleartext copies of messages from TM SGNL (aka Archive Signal) app users, which is different functionality than described in the TeleMessage "End-to-End encryption from the mobile phone through to the corporate archive" documentation, as exploited in the wild in May 2025.
CVE-2020-36193 High 2021-01-18 Not applicable Exploited Tar.php in Archive_Tar through 1.4.11 allows write operations with Directory Traversal due to inadequate checking of symbolic links, a related issue to CVE-2020-28948.
CVE-2020-28949 High 2020-11-19 Not applicable Exploited Archive_Tar through 1.4.10 has :// filename sanitization only to address phar attacks, and thus any other stream-wrapper attack (such as file:// to overwrite files) can still succeed.
CVE-2018-1000130 High 2018-03-14 Protected by Waratek Exploited A JNDI Injection vulnerability exists in Jolokia agent version 1.3.7 in the proxy mode that allows a remote attacker to run arbitrary Java code on the server.
CVE-2012-3347 Medium 2012-06-13 Not applicable Exploited AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828.
CVE-2007-3375 Medium 2007-06-25 Not applicable Exploited Stack-based buffer overflow in Lhaca File Archiver before 1.21 allows user-assisted remote attackers to execute arbitrary code via a crafted LZH archive, as exploited by malware such as Trojan.Lhdropper.