Overview 44 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
44matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
44
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
44
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
44
100.0%
split by
peak 10 / quarter
Q3 002
Not applicable2
Low2
not blocked2
No public exploit2
Q4 003
Not applicable3
High1
Medium1
Low1
not blocked3
No public exploit3
Q1 012
Not applicable2
High1
Low1
not blocked2
No public exploit2
Q2 011
Not applicable1
High1
not blocked1
No public exploit1
Q3 013
Not applicable3
High2
Medium1
not blocked3
No public exploit3
Q4 011
Not applicable1
Medium1
not blocked1
No public exploit1
Q1 020
Q2 020
Q3 020
Q4 020
Q1 030
Q2 030
Q3 031
Not applicable1
Medium1
not blocked1
No public exploit1
Q4 030
Q1 040
Q2 040
Q3 046
Not applicable6
High3
Medium2
Low1
not blocked6
No public exploit6
Q4 0410
Not applicable10
High5
Medium5
not blocked10
No public exploit10
Q1 059
Not applicable9
High8
Medium1
not blocked9
No public exploit9
Q2 053
Not applicable3
High1
Medium1
Low1
not blocked3
No public exploit3
Q3 050
Q4 053
Not applicable3
High1
Medium2
not blocked3
No public exploit3
Q4 00Q2 01Q4 01Q2 02Q4 02Q2 03Q4 03Q2 04Q4 04Q2 05Q4 05
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2005-3626 | Medium | 2005-12-31 | Not applicable | No public exploit | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (crash) via a crafted FlateDecode stream that triggers a null dereference. |
| CVE-2005-3625 | High | 2005-12-31 | Not applicable | No public exploit | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins." |
| CVE-2005-3624 | Medium | 2005-12-31 | Not applicable | No public exploit | The CCITTFaxStream::CCITTFaxStream function in Stream.cc for xpdf, gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others allows attackers to corrupt the heap via negative or large integers in a CCITTFaxDecode stream, which lead to integer overflows and integer underflows. |
| CVE-2005-0207 | Low | 2005-05-02 | Not applicable | No public exploit | Unknown vulnerability in Linux kernel 2.4.x, 2.5.x, and 2.6.x allows NFS clients to cause a denial of service via O_DIRECT. |
| CVE-2005-0754 | High | 2005-04-22 | Not applicable | No public exploit | Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code. |
| CVE-2005-1043 | Medium | 2005-04-14 | Not applicable | No public exploit | exif.c in PHP before 4.3.11 allows remote attackers to cause a denial of service (memory consumption and crash) via an EXIF header with a large IFD nesting level, which causes significant stack recursion. |
| CVE-2005-0699 | High | 2005-03-08 | Not applicable | No public exploit | Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values. |
| CVE-2004-0930 | Medium | 2005-01-27 | Not applicable | No public exploit | The ms_fnmatch function in Samba 3.0.4 and 3.0.7 and possibly other versions allows remote authenticated users to cause a denial of service (CPU consumption) via a SAMBA request that contains multiple * (wildcard) characters. |
| CVE-2004-0903 | High | 2005-01-27 | Not applicable | No public exploit | Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message. |
| CVE-2004-0902 | High | 2005-01-27 | Not applicable | No public exploit | Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname. |
| CVE-2004-0884 | High | 2005-01-27 | Not applicable | No public exploit | The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs. |
| CVE-2004-0882 | High | 2005-01-27 | Not applicable | No public exploit | Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value. |
| CVE-2004-1013 | High | 2005-01-10 | Not applicable | No public exploit | The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption. |
| CVE-2004-1012 | High | 2005-01-10 | Not applicable | No public exploit | The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption. |
| CVE-2004-1011 | High | 2005-01-10 | Not applicable | No public exploit | Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015. |
| CVE-2004-0904 | High | 2004-12-31 | Not applicable | No public exploit | Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows. |
| CVE-2004-0817 | High | 2004-12-31 | Not applicable | No public exploit | Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file. |
| CVE-2004-0802 | Medium | 2004-12-31 | Not applicable | No public exploit | Buffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute arbitrary code via a specially-crafted BMP image, a different vulnerability than CVE-2004-0817. |
| CVE-2004-1337 | High | 2004-12-23 | Not applicable | No public exploit | The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges. |
| CVE-2004-1307 | High | 2004-12-21 | Not applicable | No public exploit | Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow. |
| CVE-2004-1145 | Medium | 2004-12-15 | Not applicable | No public exploit | Multiple vulnerabilities in Konqueror in KDE 3.3.1 and earlier (1) allow access to restricted Java classes via JavaScript and (2) do not properly restrict access to certain Java classes from the Java applet, which allows remote attackers to bypass sandbox restrictions and read or write arbitrary files. |
| CVE-2004-1142 | Medium | 2004-12-15 | Not applicable | No public exploit | Ethereal 0.9.0 through 0.10.7 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed SMB packet. |
| CVE-2004-1139 | Medium | 2004-12-15 | Not applicable | No public exploit | Unknown vulnerability in the DICOM dissector in Ethereal 0.10.4 through 0.10.7 allows remote attackers to cause a denial of service (application crash). |
| CVE-2004-0626 | Medium | 2004-12-06 | Not applicable | No public exploit | The tcp_find_option function of the netfilter subsystem in Linux kernel 2.6, when using iptables and TCP options rules, allows remote attackers to cause a denial of service (CPU consumption by infinite loop) via a large option length that produces a negative integer after a casting operation to the char type. |
| CVE-2005-0373 | High | 2004-10-07 | Not applicable | No public exploit | Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code. |
| CVE-2004-0827 | High | 2004-09-16 | Not applicable | No public exploit | Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files. |
| CVE-2004-0801 | High | 2004-09-16 | Not applicable | No public exploit | Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands. |
| CVE-2004-0905 | Medium | 2004-09-14 | Not applicable | No public exploit | Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to perform cross-domain scripting and possibly execute arbitrary code by convincing a user to drag and drop javascript: links to a frame or page in another domain. |
| CVE-2004-0807 | Medium | 2004-09-13 | Not applicable | No public exploit | Samba 3.0.6 and earlier allows remote attackers to cause a denial of service (infinite loop and memory exhaustion) via certain malformed requests that cause new processes to be spawned and enter an infinite loop. |
| CVE-2004-0535 | Low | 2004-08-06 | Not applicable | No public exploit | The e1000 driver for Linux kernel 2.4.26 and earlier does not properly initialize memory before using it, which allows local users to read portions of kernel memory. NOTE: this issue was originally incorrectly reported as a "buffer overflow" by some sources. |
| CVE-2004-0495 | High | 2004-08-06 | Not applicable | No public exploit | Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool. |
| CVE-2003-0468 | Medium | 2003-08-27 | Not applicable | No public exploit | Postfix 1.1.11 and earlier allows remote attackers to use Postfix to conduct "bounce scans" or DDos attacks of other hosts via an email address to the local host containing the target IP address and service name followed by a "!" string, which causes Postfix to attempt to use SMTP to communicate with the target on the associated port. |
| CVE-2001-0834 | Medium | 2001-12-06 | Not applicable | No public exploit | htsearch CGI program in htdig (ht://Dig) 3.1.5 and earlier allows remote attackers to use the -c option to specify an alternate configuration file, which could be used to (1) cause a denial of service (CPU consumption) by specifying a large file such as /dev/zero, or (2) read arbitrary files by uploading an alternate configuration file that specifies the target file. |
| CVE-2001-1375 | Medium | 2001-07-19 | Not applicable | No public exploit | tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory. |
| CVE-2001-1374 | High | 2001-07-19 | Not applicable | No public exploit | expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd. |
| CVE-2001-0439 | High | 2001-07-02 | Not applicable | No public exploit | licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. |
| CVE-2001-0473 | High | 2001-06-27 | Not applicable | No public exploit | Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands. |
| CVE-2001-0178 | Low | 2001-03-26 | Not applicable | No public exploit | kdesu program in KDE2 (KDE before 2.2.0-6) does not properly verify the owner of a UNIX socket that is used to send a password, which allows local users to steal passwords and gain privileges. |
| CVE-2001-0128 | High | 2001-03-12 | Not applicable | No public exploit | Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges. |
| CVE-2000-0747 | High | 2000-10-20 | Not applicable | No public exploit | The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it. |
| CVE-2000-0715 | Low | 2000-10-20 | Not applicable | No public exploit | DiskCheck script diskcheck.pl in Red Hat Linux 6.2 allows local users to create or overwrite arbitrary files via a symlink attack on a temporary file. |
| CVE-2000-0701 | Medium | 2000-10-20 | Not applicable | No public exploit | The wrapper program in mailman 2.0beta3 and 2.0beta4 does not properly cleanse untrusted format strings, which allows local users to gain privileges. |
| CVE-2000-0667 | Low | 2000-07-27 | Not applicable | No public exploit | Vulnerability in gpm in Caldera Linux allows local users to delete arbitrary files or conduct a denial of service. |
| CVE-2000-0633 | Low | 2000-07-18 | Not applicable | No public exploit | Vulnerability in Mandrake Linux usermode package allows local users to to reboot or halt the system. |