Overview 110 matches · 20 in Waratek scope · 5 protected · 3 exploited · 3 CISA KEV · 9 public PoC · 3 EPSS ≥ 0.5
110matches
20in Waratek scope18.2%
5protected4.5%
3exploited2.7%
3CISA KEV2.7%
9public PoC8.2%
3EPSS ≥ 0.52.7%
Protected by Waratek
8
7.3%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
12
10.9%
Outside Waratek scope
3
2.7%
Not applicable
87
79.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
5
4.5%
partly blocked
3
2.7%
not blocked
102
92.7%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 16 / year
20002
Not applicable2
Medium1
Low1
not blocked2
No public exploit2
20010
20020
20030
20040
20050
20060
20071
Not applicable1
High1
not blocked1
Working exploit published1
20080
20090
20100
20112
Not applicable2
High1
Low1
not blocked2
No public exploit2
20123
Not applicable3
High1
Medium2
not blocked3
Working exploit published2
No public exploit1
20131
Not applicable1
Medium1
not blocked1
No public exploit1
20142
Not applicable2
Medium2
not blocked2
No public exploit2
20150
20162
Protected by Waratek1
Not applicable1
Critical1
High1
partly blocked1
not blocked1
Exploited1
No public exploit1
201715
Protected by Waratek2
No exploit published1
Outside Waratek scope1
Not applicable11
Critical2
High12
Medium1
partly blocked2
not blocked13
Exploited2
No public exploit13
20185
No exploit published1
Not applicable4
Critical1
High3
Medium1
not blocked5
No public exploit5
20199
Protected by Waratek1
Outside Waratek scope1
Not applicable7
Critical2
High4
Medium3
blocked by ARMR today1
not blocked8
Working exploit published1
Proof of concept only1
No public exploit7
202016
Protected by Waratek2
No exploit published4
Not applicable10
Critical1
High8
Medium7
blocked by ARMR today2
not blocked14
No public exploit16
20213
Not applicable3
High2
Medium1
not blocked3
No public exploit3
202210
Not applicable10
Critical1
High5
Medium4
not blocked10
No public exploit10
202315
Protected by Waratek1
No exploit published2
Not applicable12
High10
Medium5
blocked by ARMR today1
not blocked14
Working exploit published1
Proof of concept only4
No public exploit10
202410
Protected by Waratek1
Outside Waratek scope1
Not applicable8
Critical1
High5
Medium4
blocked by ARMR today1
not blocked9
Proof of concept only1
No public exploit9
20258
No exploit published1
Not applicable7
High5
Medium3
not blocked8
No public exploit8
20266
No exploit published3
Not applicable3
High3
Medium3
not blocked6
No public exploit6
200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2014-6866 | Medium | 2014-10-02 | Not applicable | No public exploit | The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |
| CVE-2012-4917 | Medium | 2013-01-26 | Not applicable | No public exploit | The TripAdvisor app 6.6 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network. |
| CVE-2012-4616 | Medium | 2012-12-26 | Not applicable | No public exploit | Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors. |
| CVE-2012-0407 | Medium | 2012-04-20 | Not applicable | Working exploit published | Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (infinite loop) via a negative 64-bit value in a certain size field. |
| CVE-2012-0406 | High | 2012-04-20 | Not applicable | Working exploit published | The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password. |
| CVE-2011-1742 | Low | 2011-08-01 | Not applicable | No public exploit | EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file. |
| CVE-2011-1420 | High | 2011-03-28 | Not applicable | No public exploit | EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors. |
| CVE-2007-3882 | High | 2007-07-18 | Not applicable | Working exploit published | SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter. |
| CVE-2000-0928 | Low | 2000-12-19 | Not applicable | No public exploit | WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares. |
| CVE-2000-0927 | Medium | 2000-12-19 | Not applicable | No public exploit | WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions. |