WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product advisor✕
Overview 110 matches · 20 in Waratek scope · 5 protected · 3 exploited · 3 CISA KEV · 9 public PoC · 3 EPSS ≥ 0.5
split by peak 16 / year
Not applicable: 87Outside Waratek scope: 3No exploit published: 12Protected by Waratek: 8 Low: 2Medium: 38High: 61Critical: 9 not blocked: 102partly blocked: 3blocked by ARMR today: 5 No public exploit: 96Proof of concept only: 6Working exploit published: 5Exploited: 3
20002 Not applicable2 Medium1 Low1 not blocked2 No public exploit2 20010 20020 20030 20040 20050 20060 20071 Not applicable1 High1 not blocked1 Working exploit published1 20080 20090 20100 20112 Not applicable2 High1 Low1 not blocked2 No public exploit2 20123 Not applicable3 High1 Medium2 not blocked3 Working exploit published2 No public exploit1 20131 Not applicable1 Medium1 not blocked1 No public exploit1 20142 Not applicable2 Medium2 not blocked2 No public exploit2 20150 20162 Protected by Waratek1 Not applicable1 Critical1 High1 partly blocked1 not blocked1 Exploited1 No public exploit1 201715 Protected by Waratek2 No exploit published1 Outside Waratek scope1 Not applicable11 Critical2 High12 Medium1 partly blocked2 not blocked13 Exploited2 No public exploit13 20185 No exploit published1 Not applicable4 Critical1 High3 Medium1 not blocked5 No public exploit5 20199 Protected by Waratek1 Outside Waratek scope1 Not applicable7 Critical2 High4 Medium3 blocked by ARMR today1 not blocked8 Working exploit published1 Proof of concept only1 No public exploit7 202016 Protected by Waratek2 No exploit published4 Not applicable10 Critical1 High8 Medium7 blocked by ARMR today2 not blocked14 No public exploit16 20213 Not applicable3 High2 Medium1 not blocked3 No public exploit3 202210 Not applicable10 Critical1 High5 Medium4 not blocked10 No public exploit10 202315 Protected by Waratek1 No exploit published2 Not applicable12 High10 Medium5 blocked by ARMR today1 not blocked14 Working exploit published1 Proof of concept only4 No public exploit10 202410 Protected by Waratek1 Outside Waratek scope1 Not applicable8 Critical1 High5 Medium4 blocked by ARMR today1 not blocked9 Proof of concept only1 No public exploit9 20258 No exploit published1 Not applicable7 High5 Medium3 not blocked8 No public exploit8 20266 No exploit published3 Not applicable3 High3 Medium3 not blocked6 No public exploit6
200220052008201120142017202020232026
110 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2014-6866 Medium 2014-10-02 Not applicable No public exploit The HomeAdvisor Mobile (aka com.servicemagic.consumer) application 3.0.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2012-4917 Medium 2013-01-26 Not applicable No public exploit The TripAdvisor app 6.6 for iOS sends cleartext credentials, which allows remote attackers to obtain sensitive information by sniffing the network.
CVE-2012-4616 Medium 2012-12-26 Not applicable No public exploit Directory traversal vulnerability in the Web UI in EMC Data Protection Advisor (DPA) 5.6 through SP1, 5.7 through SP1, and 5.8 through SP4 allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2012-0407 Medium 2012-04-20 Not applicable Working exploit published Integer overflow in the DPA_Utilities library in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (infinite loop) via a negative 64-bit value in a certain size field.
CVE-2012-0406 High 2012-04-20 Not applicable Working exploit published The DPA_Utilities.cProcessAuthenticationData function in EMC Data Protection Advisor (DPA) 5.5 through 5.8 SP1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an AUTHENTICATECONNECTION command that (1) lacks a password field or (2) has an empty password.
CVE-2011-1742 Low 2011-08-01 Not applicable No public exploit EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file.
CVE-2011-1420 High 2011-03-28 Not applicable No public exploit EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
CVE-2007-3882 High 2007-07-18 Not applicable Working exploit published SQL injection vulnerability in index.php in Expert Advisor allows remote attackers to execute arbitrary SQL commands via the id parameter.
CVE-2000-0928 Low 2000-12-19 Not applicable No public exploit WQuinn QuotaAdvisor 4.1 allows users to list directories and files by running a report on the targeted shares.
CVE-2000-0927 Medium 2000-12-19 Not applicable No public exploit WQuinn QuotaAdvisor 4.1 does not properly record file sizes if they are stored in alternative data streams, which allows users to bypass quota restrictions.
‹ prev page 2 of 2 next ›