Overview 20 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 3 EPSS ≥ 0.5
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
20
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
20
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
20
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 4 / year
20003
Not applicable3
High2
Low1
not blocked3
Working exploit published3
20010
20023
Not applicable3
High2
Medium1
not blocked3
Working exploit published3
20034
Not applicable4
High2
Medium2
not blocked4
Working exploit published4
20040
20051
Not applicable1
High1
not blocked1
Working exploit published1
20061
Not applicable1
Medium1
not blocked1
Working exploit published1
20070
20080
20091
Not applicable1
High1
not blocked1
Working exploit published1
20100
20112
Not applicable2
Medium2
not blocked2
Working exploit published2
20120
20130
20141
Not applicable1
High1
not blocked1
Working exploit published1
20150
20160
20171
Not applicable1
High1
not blocked1
Working exploit published1
20180
20190
20202
Not applicable2
Critical1
High1
not blocked2
Working exploit published2
20211
Not applicable1
High1
not blocked1
Working exploit published1
20012003200520072009201120132015201720192021
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2021-41291 | High | 2021-09-30 | Not applicable | Working exploit published | ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remotely disclose directory content on the affected device. |
| CVE-2020-35338 | Critical | 2020-12-14 | Not applicable | Working exploit published | The Web Administrative Interface in Mobile Viewpoint Wireless Multiplex Terminal (WMT) Playout Server 20.2.8 and earlier has a default account with a password of "pokon." |
| CVE-2020-14930 | High | 2020-06-19 | Not applicable | Working exploit published | An issue was discovered in BT CTROMS Terminal OS Port Portal CT-464. Account takeover can occur because the password-reset feature discloses the verification token. Upon a getverificationcode.jsp request, this token is transmitted not only to the registered phone number of the user account, but is also transmitted to the unauthenticated HTTP client. |
| CVE-2017-5329 | High | 2017-01-27 | Not applicable | Working exploit published | Palo Alto Networks Terminal Services Agent before 7.0.7 allows local users to gain privileges via vectors that trigger an out-of-bounds write operation. |
| CVE-2014-8997 | High | 2014-11-20 | Not applicable | Working exploit published | Unrestricted file upload vulnerability in the Photo functionality in DigitalVidhya Digi Online Examination System 2.0 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in assets/uploads/images/. |
| CVE-2011-0901 | Medium | 2011-02-07 | Not applicable | Working exploit published | Multiple stack-based buffer overflows in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allow user-assisted remote attackers to execute arbitrary code via a .RDP file with a long (1) username, (2) password, or (3) domain argument. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2011-0900 | Medium | 2011-02-07 | Not applicable | Working exploit published | Stack-based buffer overflow in the tsc_launch_remote function (src/support.c) in Terminal Server Client (tsclient) 0.150, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a .RDP file with a long hostname argument. |
| CVE-2009-4200 | High | 2009-12-04 | Not applicable | Working exploit published | SQL injection vulnerability in the Seminar (com_seminar) component 1.28 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a View_seminar action to index.php. |
| CVE-2006-4158 | Medium | 2006-08-16 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in Login.php in Spaminator 1.7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the page parameter. |
| CVE-2005-3589 | High | 2005-11-16 | Not applicable | Working exploit published | Buffer overflow in FileZilla Server Terminal 0.9.4d may allow remote attackers to cause a denial of service (terminal crash) via a long USER ftp command. |
| CVE-2003-0496 | High | 2003-08-18 | Not applicable | Working exploit published | Microsoft SQL Server before Windows 2000 SP4 allows local users to gain privileges as the SQL Server user by calling the xp_fileexist extended stored procedure with a named pipe as an argument instead of a normal file. |
| CVE-2002-1561 | Medium | 2003-04-02 | Not applicable | Working exploit published | The RPC component in Windows 2000, Windows NT 4.0, and Windows XP allows remote attackers to cause a denial of service (disabled RPC service) via a malformed packet to the RPC Endpoint Mapper at TCP port 135, which triggers a null pointer dereference. |
| CVE-2003-0003 | High | 2003-02-07 | Not applicable | Working exploit published | Buffer overflow in the RPC Locator service for Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code via an RPC call to the service containing certain parameter information. |
| CVE-2003-0001 | Medium | 2003-01-17 | Not applicable | Working exploit published | Multiple ethernet Network Interface Card (NIC) device drivers do not pad frames with null bytes, which allows remote attackers to obtain information from previous packets or kernel memory by using malformed packets, as demonstrated by Etherleak. |
| CVE-2002-1898 | High | 2002-12-31 | Not applicable | Working exploit published | Terminal 1.3 in Apple Mac OS X 10.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a telnet:// link, which is executed by Terminal.app window. |
| CVE-2002-1230 | Medium | 2002-11-04 | Not applicable | Working exploit published | NetDDE Agent on Windows NT 4.0, 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows local users to execute arbitrary code as LocalSystem via "shatter" style attack by sending a WM_COPYDATA message followed by a WM_TIMER message, as demonstrated by GetAd, aka "Flaw in Windows WM_TIMER Message Handling Could Enable Privilege Elevation." |
| CVE-2002-0693 | High | 2002-10-10 | Not applicable | Working exploit published | Buffer overflow in the HTML Help ActiveX Control (hhctrl.ocx) in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote attackers to execute code via (1) a long parameter to the Alink function, or (2) script containing a long argument to the showHelp function. |
| CVE-2000-0991 | High | 2000-12-19 | Not applicable | Working exploit published | Buffer overflow in Hilgraeve, Inc. HyperTerminal client on Windows 98, ME, and 2000 allows remote attackers to execute arbitrary commands via a long telnet URL, aka the "HyperTerminal Buffer Overflow" vulnerability. |
| CVE-2000-0305 | High | 2000-05-19 | Not applicable | Working exploit published | Windows 95, Windows 98, Windows 2000, Windows NT 4.0, and Terminal Server systems allow a remote attacker to cause a denial of service by sending a large number of identical fragmented IP packets, aka jolt2 or the "IP Fragment Reassembly" vulnerability. |
| CVE-2000-0232 | Low | 2000-03-30 | Not applicable | Working exploit published | Microsoft TCP/IP Printing Services, aka Print Services for Unix, allows an attacker to cause a denial of service via a malformed TCP/IP print request. |