WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product element software management✕
Overview 12 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
12matches 1in Waratek scope8.3% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 8.3% Outside Waratek scope 3 25.0% Not applicable 8 66.7% Withdrawn CVE 0 0.0%
Critical 3 25.0% High 5 41.7% Medium 4 33.3% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 12 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 12 100.0%
split by peak 3 / month
Not applicable: 8Outside Waratek scope: 3No exploit published: 1 Medium: 4High: 5Critical: 3 not blocked: 12 No public exploit: 12
Feb 181 Outside Waratek scope1 Critical1 not blocked1 No public exploit1 Mar 180 Apr 180 May 182 Outside Waratek scope2 Critical1 High1 not blocked2 No public exploit2 Jun 181 No exploit published1 Critical1 not blocked1 No public exploit1 Jul 181 Not applicable1 High1 not blocked1 No public exploit1 Aug 180 Sep 180 Oct 180 Nov 180 Dec 180 Jan 191 Not applicable1 High1 not blocked1 No public exploit1 Feb 192 Not applicable2 High1 Medium1 not blocked2 No public exploit2 Mar 193 Not applicable3 High1 Medium2 not blocked3 No public exploit3 Apr 191 Not applicable1 Medium1 not blocked1 No public exploit1
Feb 18Apr 18Jun 18Aug 18Oct 18Dec 18Feb 19Apr 19
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2018-20449 Medium 2019-04-04 Not applicable No public exploit The hidma_chan_stats function in drivers/dma/qcom/hidma_dbg.c in the Linux kernel 4.14.90 allows local users to obtain sensitive address information by reading "callback=" lines in a debugfs file.
CVE-2019-7222 Medium 2019-03-21 Not applicable No public exploit The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak.
CVE-2019-7221 High 2019-03-21 Not applicable No public exploit The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free.
CVE-2018-19985 Medium 2019-03-21 Not applicable No public exploit The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space.
CVE-2019-9076 Medium 2019-02-24 Not applicable No public exploit An issue was discovered in the Binary File Descriptor (BFD) library (aka libbfd), as distributed in GNU Binutils 2.32. It is an attempted excessive memory allocation in elf_read_notes in elf.c.
CVE-2019-9070 High 2019-02-24 Not applicable No public exploit An issue was discovered in GNU libiberty, as distributed in GNU Binutils 2.32. It is a heap-based buffer over-read in d_expression_1 in cp-demangle.c after many recursive calls.
CVE-2017-3135 High 2019-01-16 Not applicable No public exploit Under some conditions when using both DNS64 and RPZ to rewrite query responses, query processing can resume in an inconsistent state leading to either an INSIST assertion failure or an attempt to read through a NULL pointer. Affects BIND 9.8.8, 9.9.3-S1 -> 9.9.9-S7, 9.9.3 -> 9.9.9-P5, 9.9.10b1, 9.10.0 -> 9.10.4-P5, 9.10.5b1, 9.11.0 -> 9.11.0-P2, 9.11.1b1.
CVE-2018-3627 High 2018-07-10 Not applicable No public exploit Logic bug in Intel Converged Security Management Engine 11.x may allow an attacker to execute arbitrary code via local privileged access.
CVE-2017-7657 Critical 2018-06-26 No exploit published No public exploit In Eclipse Jetty, versions 9.2.x and older, 9.3.x (all configurations), and 9.4.x (non-default configuration with RFC2616 compliance enabled), transfer-encoding chunks are handled poorly. The chunk length parsing was vulnerable to an integer overflow. Thus a large chunk size could be interpreted as a smaller chunk size and content sent as chunk body could be interpreted as a pipelined request. If Jetty was deployed behind an intermediary that imposed some authorization and that intermediary allowed arbitrarily large chunks to be passed on unchanged, then this flaw could be used to bypass the authorization imposed by the intermediary as the fake pipelined request would not be interpreted by the intermediary as a request.
CVE-2018-11237 High 2018-05-18 Outside Waratek scope No public exploit An AVX-512-optimized implementation of the mempcpy function in the GNU C Library (aka glibc or libc6) 2.27 and earlier may write data beyond the target buffer, leading to a buffer overflow in __mempcpy_avx512_no_vzeroupper.
CVE-2018-11236 Critical 2018-05-18 Outside Waratek scope No public exploit stdlib/canonicalize.c in the GNU C Library (aka glibc or libc6) 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution.
CVE-2018-6485 Critical 2018-02-01 Outside Waratek scope No public exploit An integer overflow in the implementation of the posix_memalign in memalign functions in the GNU C Library (aka glibc or libc6) 2.26 and earlier could cause these functions to return a pointer to a heap area that is too small, potentially leading to heap corruption.