WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product mcms✕
Overview 5 matches · 0 in Waratek scope · 0 protected · 0 CISA KEV · 2 EPSS ≥ 0.5
5matches 0in Waratek scope0.0% 0protected0.0% 0CISA KEV0.0% 2EPSS ≥ 0.540.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 20.0% Not applicable 4 80.0% Withdrawn CVE 0 0.0%
Critical 5 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 5 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 5 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 2 / month
Not applicable: 4Outside Waratek scope: 1 Critical: 5 not blocked: 5 Exploited: 5
Dec 201 Not applicable1 Critical1 not blocked1 Exploited1 Jan 210 Feb 210 Mar 210 Apr 210 May 210 Jun 210 Jul 210 Aug 210 Sep 210 Oct 210 Nov 210 Dec 210 Jan 220 Feb 221 Outside Waratek scope1 Critical1 not blocked1 Exploited1 Mar 222 Not applicable2 Critical2 not blocked2 Exploited2 Apr 220 May 221 Not applicable1 Critical1 not blocked1 Exploited1
Jan 21Mar 21May 21Jul 21Sep 21Nov 21Jan 22Mar 22May 22
5 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2022-30047 Critical 2022-05-11 Not applicable Exploited Mingsoft MCMS v5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/listExcludeApp URI via orderBy parameter.
CVE-2022-25488 Critical 2022-03-15 Not applicable Exploited Atom CMS v2.0 was discovered to contain a SQL injection vulnerability via the id parameter in /admin/ajax/avatar.php.
CVE-2022-25487 Critical 2022-03-15 Not applicable Exploited Atom CMS v2.0 was discovered to contain a remote code execution (RCE) vulnerability via /admin/uploads.php.
CVE-2021-44868 Critical 2022-02-17 Outside Waratek scope Exploited A problem was found in ming-soft MCMS v5.1. There is a sql injection vulnerability in /ms/cms/content/list.do
CVE-2020-29597 Critical 2020-12-07 Not applicable Exploited IncomCMS 2.0 has a modules/uploader/showcase/script.php insecure file upload vulnerability. This vulnerability allows unauthenticated attackers to upload files into the server.