Overview 43 matches · 3 in Waratek scope · 2 protected · 0 exploited · 0 CISA KEV · 9 EPSS ≥ 0.5
Protected by Waratek
2
4.7%
Rule in development
0
0.0%
Mitigation candidate
1
2.3%
No exploit published
0
0.0%
Outside Waratek scope
1
2.3%
Not applicable
39
90.7%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
4.7%
partly blocked
0
0.0%
not blocked
41
95.3%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
43
100.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 6 / year
19991
Not applicable1
Medium1
not blocked1
Working exploit published1
20002
Not applicable2
High2
not blocked2
Working exploit published2
20010
20020
20030
20040
20050
20061
Not applicable1
High1
not blocked1
Working exploit published1
20071
Not applicable1
Medium1
not blocked1
Working exploit published1
20083
Not applicable3
High3
not blocked3
Working exploit published3
20091
Not applicable1
High1
not blocked1
Working exploit published1
20105
Not applicable5
Medium5
not blocked5
Working exploit published5
20110
20121
Not applicable1
High1
not blocked1
Working exploit published1
20132
Not applicable2
High1
Medium1
not blocked2
Working exploit published2
20142
Not applicable2
High2
not blocked2
Working exploit published2
20153
Protected by Waratek1
Not applicable2
High1
Medium2
blocked by ARMR today1
not blocked2
Working exploit published3
20160
20173
Protected by Waratek1
Not applicable2
Critical1
High1
Medium1
blocked by ARMR today1
not blocked2
Working exploit published3
20184
Outside Waratek scope1
Not applicable3
High3
Medium1
not blocked4
Working exploit published4
20192
Not applicable2
High1
Medium1
not blocked2
Working exploit published2
20200
20213
Mitigation candidate1
Not applicable2
High2
Medium1
not blocked3
Working exploit published3
20226
Not applicable6
Critical4
High1
Medium1
not blocked6
Working exploit published6
20232
Not applicable2
High2
not blocked2
Working exploit published2
20240
20251
Not applicable1
Medium1
not blocked1
Working exploit published1
200120042007201020132016201920222025
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2024-13221 | Medium | 2025-01-31 | Not applicable | Working exploit published | The Fantastic ElasticSearch WordPress plugin through 4.1.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin. |
| CVE-2023-34127 | High | 2023-07-13 | Not applicable | Working exploit published | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in SonicWall GMS, SonicWall Analytics enables an authenticated attacker to execute arbitrary code with root privileges. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. |
| CVE-2023-0630 | High | 2023-03-20 | Not applicable | Working exploit published | The Slimstat Analytics WordPress plugin before 4.9.3.3 does not prevent subscribers from rendering shortcodes that concatenates attributes directly into an SQL query. |
| CVE-2022-41622 | High | 2022-12-07 | Not applicable | Working exploit published | In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2022-33965 | Critical | 2022-07-25 | Not applicable | Working exploit published | Multiple Unauthenticated SQL Injection (SQLi) vulnerabilities in Osamaesh WP Visitor Statistics plugin <= 5.7 at WordPress. |
| CVE-2022-29548 | Medium | 2022-04-21 | Not applicable | Working exploit published | A reflected XSS issue exists in the Management Console of several WSO2 products. This affects API Manager 2.2.0, 2.5.0, 2.6.0, 3.0.0, 3.1.0, 3.2.0, and 4.0.0; API Manager Analytics 2.2.0, 2.5.0, and 2.6.0; API Microgateway 2.2.0; Data Analytics Server 3.2.0; Enterprise Integrator 6.2.0, 6.3.0, 6.4.0, 6.5.0, and 6.6.0; IS as Key Manager 5.5.0, 5.6.0, 5.7.0, 5.9.0, and 5.10.0; Identity Server 5.5.0, 5.6.0, 5.7.0, 5.9.0, 5.10.0, and 5.11.0; Identity Server Analytics 5.5.0 and 5.6.0; and WSO2 Micro Integrator 1.0.0. |
| CVE-2022-25149 | Critical | 2022-02-24 | Not applicable | Working exploit published | The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the IP parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5. |
| CVE-2022-25148 | Critical | 2022-02-24 | Not applicable | Working exploit published | The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_id parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5. |
| CVE-2022-0651 | Critical | 2022-02-24 | Not applicable | Working exploit published | The WP Statistics WordPress plugin is vulnerable to SQL Injection due to insufficient escaping and parameterization of the current_page_type parameter found in the ~/includes/class-wp-statistics-hits.php file which allows attackers without authentication to inject arbitrary SQL queries to obtain sensitive information, in versions up to and including 13.1.5. |
| CVE-2021-22146 | High | 2021-07-21 | Not applicable | Working exploit published | All versions of Elastic Cloud Enterprise has the Elasticsearch “anonymous” user enabled by default in deployed clusters. While in the default setting the anonymous user has no permissions and is unable to successfully query any Elasticsearch APIs, an attacker could leverage the anonymous user to gain insight into certain details of a deployed cluster. |
| CVE-2021-22145 | Medium | 2021-07-21 | Mitigation candidate | Working exploit published | A memory disclosure vulnerability was identified in Elasticsearch 7.10.0 to 7.13.3 error reporting. A user with the ability to submit arbitrary queries to Elasticsearch could submit a malformed query that would result in an error message returned containing previously used portions of a data buffer. This buffer could contain sensitive information such as Elasticsearch documents or authentication details. |
| CVE-2021-24340 | High | 2021-06-07 | Not applicable | Working exploit published | The WP Statistics WordPress plugin before 13.0.8 relied on using the WordPress esc_sql() function on a field not delimited by quotes and did not first prepare the query. Additionally, the page, which should have been accessible to administrator only, was also available to any visitor, including unauthenticated ones. |
| CVE-2017-18556 | Medium | 2019-08-21 | Not applicable | Working exploit published | The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues. |
| CVE-2019-6974 | High | 2019-02-15 | Not applicable | Working exploit published | In the Linux kernel before 4.20.8, kvm_ioctl_create_device in virt/kvm/kvm_main.c mishandles reference counting because of a race condition, leading to a use-after-free. |
| CVE-2018-17182 | High | 2018-09-19 | Outside Waratek scope | Working exploit published | An issue was discovered in the Linux kernel through 4.18.8. The vmacache_flush_all function in mm/vmacache.c mishandles sequence number overflows. An attacker can trigger a use-after-free (and possibly gain privileges) via certain thread creation, map, unmap, invalidation, and dereference operations. |
| CVE-2018-13405 | High | 2018-07-06 | Not applicable | Working exploit published | The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID. |
| CVE-2018-11532 | Medium | 2018-05-29 | Not applicable | Working exploit published | An issue was discovered in the ChangUonDyU Advanced Statistics plugin 1.0.2 for MyBB. changstats.php has XSS, as demonstrated by a subject field. |
| CVE-2018-5511 | High | 2018-04-13 | Not applicable | Working exploit published | On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. |
| CVE-2017-14651 | Medium | 2017-09-21 | Not applicable | Working exploit published | WSO2 Data Analytics Server 3.1.0 has XSS in carbon/resources/add_collection_ajaxprocessor.jsp via the collectionName or parentPath parameter. |
| CVE-2017-5645 | Critical | 2017-04-17 | Protected by Waratek | Working exploit published | In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code. |
| CVE-2016-9244 | High | 2017-02-09 | Not applicable | Working exploit published | A BIG-IP virtual server configured with a Client SSL profile that has the non-default Session Tickets option enabled may leak up to 31 bytes of uninitialized memory. A remote attacker may exploit this vulnerability to obtain Secure Sockets Layer (SSL) session IDs from other sessions. It is possible that other data from uninitialized memory may be returned as well. |
| CVE-2015-3628 | High | 2015-12-07 | Not applicable | Working exploit published | The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP AAM 11.4.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.3.0, BIG-IP GTM 11.3.0 before 11.6.0 HF6, BIG-IP PSM 11.3.0 through 11.4.1, Enterprise Manager 3.1.0 through 3.1.1, BIG-IQ Cloud and Security 4.0.0 through 4.5.0, BIG-IQ Device 4.2.0 through 4.5.0, and BIG-IQ ADC 4.5.0 allows remote authenticated users with the "Resource Administrator" role to gain privileges via an iCall (1) script or (2) handler in a SOAP request to iControl/iControlPortal.cgi. |
| CVE-2015-4040 | Medium | 2015-09-17 | Not applicable | Working exploit published | Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows remote authenticated users to access arbitrary files in the web root via unspecified vectors. |
| CVE-2015-3337 | Medium | 2015-05-01 | Protected by Waratek | Working exploit published | Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors. |
| CVE-2014-2927 | High | 2014-10-15 | Not applicable | Working exploit published | The rsync daemon in F5 BIG-IP 11.6 before 11.6.0, 11.5.1 before HF3, 11.5.0 before HF4, 11.4.1 before HF4, 11.4.0 before HF7, 11.3.0 before HF9, and 11.2.1 before HF11 and Enterprise Manager 3.x before 3.1.1 HF2, when configured in failover mode, does not require authentication, which allows remote attackers to read or write to arbitrary files via a cmi request to the ConfigSync IP address. |
| CVE-2014-1206 | High | 2014-01-15 | Not applicable | Working exploit published | SQL injection vulnerability in the password reset page in Open Web Analytics (OWA) before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owa_email_address parameter in a base.passwordResetRequest action to index.php. |
| CVE-2013-3575 | Medium | 2013-06-14 | Not applicable | Working exploit published | hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter. |
| CVE-2013-3574 | High | 2013-06-14 | Not applicable | Working exploit published | Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath (aka mount) parameter. |
| CVE-2011-4789 | High | 2012-01-13 | Not applicable | Working exploit published | Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the vulnerable product is actually HP LoadRunner." |
| CVE-2010-4111 | Medium | 2010-12-22 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2010-3003 | Medium | 2010-09-10 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2010-2677 | Medium | 2010-07-08 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in mw_plugin.php in Open Web Analytics (OWA) 1.2.3, when magic_quotes_gpc is disabled and register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the IP parameter. NOTE: some of these details are obtained from third party information. |
| CVE-2010-2676 | Medium | 2010-07-08 | Not applicable | Working exploit published | Multiple directory traversal vulnerabilities in index.php in Open Web Analytics (OWA) 1.2.3 might allow remote attackers to read arbitrary files via directory traversal sequences in the (1) owa_action and (2) owa_do parameters. |
| CVE-2009-4905 | Medium | 2010-06-25 | Not applicable | Working exploit published | Multiple cross-site request forgery (CSRF) vulnerabilities in index.php in Acc Statistics 1.1 allow remote attackers to hijack the authentication of administrators for requests that change (1) passwords, (2) usernames, and (3) e-mail addresses. |
| CVE-2008-6294 | High | 2009-02-26 | Not applicable | Working exploit published | admin/Index.php in Acc Statistics 1.1 allows remote attackers to bypass authentication and gain administrative access by setting the username_cookie cookie to "admin." |
| CVE-2008-4466 | High | 2008-10-07 | Not applicable | Working exploit published | SQL injection vulnerability in view_products_cat.php in Vastal I-Tech Cosmetics Zone allows remote attackers to execute arbitrary SQL commands via the cat_id parameter. |
| CVE-2008-3024 | High | 2008-07-07 | Not applicable | Working exploit published | Stack-based buffer overflow in phgrafx in QNX Momentics (aka RTOS) 6.3.2 and earlier allows local users to gain privileges via a long .pal filename in palette/. |
| CVE-2008-1963 | High | 2008-04-25 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in includes/functions.php in Quate Grape Web Statistics 0.2a allows remote attackers to execute arbitrary PHP code via a URL in the location parameter. |
| CVE-2007-6513 | Medium | 2007-12-21 | Not applicable | Working exploit published | HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method. |
| CVE-2006-3959 | High | 2006-08-01 | Not applicable | Working exploit published | SQL injection vulnerability in protect.php in X-Scripts X-Protection 1.10, with magic_quotes_gpc disabled, allows remote attackers to execute arbitrary SQL commands via the (1) username and (2) password parameter. |
| CVE-2000-0776 | High | 2000-10-20 | Not applicable | Working exploit published | Mediahouse Statistics Server 5.02x allows remote attackers to execute arbitrary commands via a long HTTP GET request. |
| CVE-2000-0109 | High | 2000-01-31 | Not applicable | Working exploit published | The mcsp Client Site Processor system (MultiCSP) in Standard and Poor's ComStock is installed with several accounts that have no passwords or easily guessable default passwords. |
| CVE-1999-0931 | Medium | 1999-09-30 | Not applicable | Working exploit published | Buffer overflow in Mediahouse Statistics Server allows remote attackers to execute commands. |