WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product wire✕
Overview 15 matches · 1 in Waratek scope · 1 protected · 5 CISA KEV · 13 public PoC · 5 EPSS ≥ 0.5
15matches 1in Waratek scope6.7% 1protected6.7% 5CISA KEV33.3% 13public PoC86.7% 5EPSS ≥ 0.533.3%
Protected by Waratek 1 6.7% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 14 93.3% Withdrawn CVE 0 0.0%
Critical 8 53.3% High 6 40.0% Medium 1 6.7% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 6.7% partly blocked 0 0.0% not blocked 14 93.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 15 100.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 6 / year
Not applicable: 14Protected by Waratek: 1 Medium: 1High: 6Critical: 8 not blocked: 14blocked by ARMR today: 1 Exploited: 15
20141 Not applicable1 High1 not blocked1 Exploited1 20150 20160 20176 Not applicable6 Critical2 High4 not blocked6 Exploited6 20181 Not applicable1 Medium1 not blocked1 Exploited1 20192 Not applicable2 Critical2 not blocked2 Exploited2 20200 20211 Not applicable1 Critical1 not blocked1 Exploited1 20220 20232 Protected by Waratek1 Not applicable1 Critical2 blocked by ARMR today1 not blocked1 Exploited2 20240 20251 Not applicable1 Critical1 not blocked1 Exploited1 20261 Not applicable1 High1 not blocked1 Exploited1
2014201620182020202220242026
15 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-21385 High 2026-03-02 Not applicable Exploited Memory corruption while using alignments for memory allocation.
CVE-2025-54068 Critical 2025-07-17 Not applicable Exploited Livewire is a full-stack framework for Laravel. In Livewire v3 up to and including v3.6.3, a vulnerability allows unauthenticated attackers to achieve remote command execution in specific scenarios. The issue stems from how certain component property updates are hydrated. This vulnerability is unique to Livewire v3 and does not affect prior major versions. Exploitation requires a component to be mounted and configured in a particular way, but does not require authentication or user interaction. This issue has been patched in Livewire v3.6.4. All users are strongly encouraged to upgrade to this version or later as soon as possible. No known workarounds are available.
CVE-2023-46604 Critical 2023-10-27 Protected by Waratek Exploited The Java OpenWire protocol marshaller is vulnerable to Remote Code Execution. This vulnerability may allow a remote attacker with network access to either a Java-based OpenWire broker or client to run arbitrary shell commands by manipulating serialized class types in the OpenWire protocol to cause either the client or the broker (respectively) to instantiate any class on the classpath. Users are recommended to upgrade both brokers and clients to version 5.15.16, 5.16.7, 5.17.6, or 5.18.3 which fixes this issue.
CVE-2023-25717 Critical 2023-02-13 Not applicable Exploited Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
CVE-2021-34730 Critical 2021-08-18 Not applicable Exploited A vulnerability in the Universal Plug-and-Play (UPnP) service of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an unauthenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly, resulting in a denial of service (DoS) condition. This vulnerability is due to improper validation of incoming UPnP traffic. An attacker could exploit this vulnerability by sending a crafted UPnP request to an affected device. A successful exploit could allow the attacker to execute arbitrary code as the root user on the underlying operating system or cause the device to reload, resulting in a DoS condition. Cisco has not released software updates that address this vulnerability.
CVE-2017-18377 Critical 2019-06-11 Not applicable Exploited An issue was discovered on Wireless IP Camera (P2P) WIFICAM cameras. There is Command Injection in the set_ftp.cgi script via shell metacharacters in the pwd variable, as demonstrated by a set_ftp.cgi?svr=192.168.1.1&port=21&user=ftp URI.
CVE-2019-3929 Critical 2019-04-30 Not applicable Exploited The Crestron AM-100 firmware 1.6.0.2, Crestron AM-101 firmware 2.7.0.1, Barco wePresent WiPG-1000P firmware 2.3.0.10, Barco wePresent WiPG-1600W before firmware 2.4.1.19, Extron ShareLink 200/250 firmware 2.0.3.4, Teq AV IT WIPS710 firmware 1.1.0.7, SHARP PN-L703WA firmware 1.4.2.3, Optoma WPS-Pro firmware 1.0.0.5, Blackbox HD WPS firmware 1.0.0.5, InFocus LiteShow3 firmware 1.0.16, and InFocus LiteShow4 2.0.0.7 are vulnerable to command injection via the file_transfer.cgi HTTP endpoint. A remote, unauthenticated attacker can use this vulnerability to execute operating system commands as root.
CVE-2018-16059 Medium 2018-09-07 Not applicable Exploited Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter.
CVE-2015-2280 High 2017-07-25 Not applicable Exploited snwrite.cgi in AirLink101 SkyIPCam1620W Wireless N MPEG4 3GPP network camera with firmware FW_AIC1620W_1.1.0-12_20120709_r1192.pck allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the mac parameter.
CVE-2017-8225 Critical 2017-04-25 Not applicable Exploited On Wireless IP Camera (P2P) WIFICAM devices, access to .ini files (containing credentials) is not correctly checked. An attacker can bypass authentication by providing an empty loginuse parameter and an empty loginpas parameter in the URI.
CVE-2017-8224 Critical 2017-04-25 Not applicable Exploited Wireless IP Camera (P2P) WIFICAM devices have a backdoor root account that can be accessed with TELNET.
CVE-2017-8223 High 2017-04-25 Not applicable Exploited On Wireless IP Camera (P2P) WIFICAM devices, an attacker can use the RTSP server on port 10554/tcp to watch the streaming without authentication via tcp/av0_1 or tcp/av0_0.
CVE-2017-8222 High 2017-04-25 Not applicable Exploited Wireless IP Camera (P2P) WIFICAM devices have an "Apple Production IOS Push Services" private RSA key and certificate stored in /system/www/pem/ck.pem inside the firmware, which allows attackers to obtain sensitive information.
CVE-2017-8221 High 2017-04-25 Not applicable Exploited Wireless IP Camera (P2P) WIFICAM devices rely on a cleartext UDP tunnel protocol (aka the Cloud feature) for communication between an Android application and a camera device, which allows remote attackers to obtain sensitive information by sniffing the network.
CVE-2014-1635 High 2014-11-12 Not applicable Exploited Buffer overflow in login.cgi in MiniHttpd in Belkin N750 Router with firmware before F9K1103_WW_1.10.17m allows remote attackers to execute arbitrary code via a long string in the jump parameter.