WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product case✕
Overview 8 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 EPSS ≥ 0.5
8matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 8 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 2 25.0% Medium 6 75.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 8 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 8 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / year
Not applicable: 8 Medium: 6High: 2 not blocked: 8 Working exploit published: 8
19991 Not applicable1 Medium1 not blocked1 Working exploit published1 20000 20011 Not applicable1 High1 not blocked1 Working exploit published1 20021 Not applicable1 Medium1 not blocked1 Working exploit published1 20030 20040 20050 20060 20070 20081 Not applicable1 Medium1 not blocked1 Working exploit published1 20091 Not applicable1 High1 not blocked1 Working exploit published1 20101 Not applicable1 Medium1 not blocked1 Working exploit published1 20110 20120 20130 20140 20150 20160 20171 Not applicable1 Medium1 not blocked1 Working exploit published1 20180 20190 20200 20211 Not applicable1 Medium1 not blocked1 Working exploit published1
199920012003200520072009201120132015201720192021
8 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2021-38704 Medium 2021-09-07 Not applicable Working exploit published Multiple reflected cross-site scripting (XSS) vulnerabilities in ClinicCases 7.3.3 allow unauthenticated attackers to introduce arbitrary JavaScript by crafting a malicious URL. This can result in account takeover via session token theft.
CVE-2017-5631 Medium 2017-05-01 Not applicable Working exploit published An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr") that is transmitted in the login.php query string.
CVE-2010-0943 Medium 2010-03-08 Not applicable Working exploit published Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a jashowcase action to index.php.
CVE-2009-3499 High 2009-09-30 Not applicable Working exploit published SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter.
CVE-2008-3390 Medium 2008-07-31 Not applicable Working exploit published Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter.
CVE-2002-1322 Medium 2002-12-11 Not applicable Working exploit published Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371, e.g. via nmap.
CVE-2001-0855 High 2001-12-06 Not applicable Working exploit published Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable.
CVE-1999-0350 Medium 1999-02-08 Not applicable Working exploit published Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits.