WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product extensions✕
Overview 4 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 EPSS ≥ 0.5
4matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 1EPSS ≥ 0.525.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 4 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 2 50.0% Medium 2 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 4 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / quarter
Not applicable: 4 Medium: 2High: 2 not blocked: 4 Working exploit published: 4
Q3 011 Not applicable1 High1 not blocked1 Working exploit published1 Q4 010 Q1 020 Q2 020 Q3 020 Q4 020 Q1 030 Q2 030 Q3 030 Q4 031 Not applicable1 High1 not blocked1 Working exploit published1 Q1 040 Q2 040 Q3 040 Q4 040 Q1 050 Q2 050 Q3 050 Q4 050 Q1 060 Q2 061 Not applicable1 Medium1 not blocked1 Working exploit published1 Q3 060 Q4 060 Q1 071 Not applicable1 Medium1 not blocked1 Working exploit published1
Q3 01Q1 02Q3 02Q1 03Q3 03Q1 04Q3 04Q1 05Q3 05Q1 06Q3 06Q1 07
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2007-1382 Medium 2007-03-10 Not applicable Working exploit published The PHP COM extensions for PHP on Windows systems allow context-dependent attackers to execute arbitrary code via a WScript.Shell COM object, as demonstrated by using the Run method of this object to execute cmd.exe, which bypasses PHP's safe mode.
CVE-2006-0015 Medium 2006-04-11 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in _vti_bin/_vti_adm/fpadmdll.dll in Microsoft FrontPage Server Extensions 2002 and SharePoint Team Services allows remote attackers to inject arbitrary web script or HTML, then leverage the attack to execute arbitrary programs or create new accounts, via the (1) operation, (2) command, and (3) name parameters.
CVE-2003-0822 High 2003-12-15 Not applicable Working exploit published Buffer overflow in the debug functionality in fp30reg.dll of Microsoft FrontPage Server Extensions (FPSE) 2000 and 2002 allows remote attackers to execute arbitrary code via a crafted chunked encoded request.
CVE-2001-0341 High 2001-07-21 Not applicable Working exploit published Buffer overflow in Microsoft Visual Studio RAD Support sub-component of FrontPage Server Extensions allows remote attackers to execute arbitrary commands via a long registration request (URL) to fp30reg.dll.