Overview 164 matches · 15 in Waratek scope · 4 protected · 5 exploited · 3 CISA KEV · 11 public PoC · 3 EPSS ≥ 0.5
164matches
15in Waratek scope9.1%
4protected2.4%
5exploited3.0%
3CISA KEV1.8%
11public PoC6.7%
3EPSS ≥ 0.51.8%
Protected by Waratek
4
2.4%
Rule in development
0
0.0%
Mitigation candidate
1
0.6%
No exploit published
10
6.1%
Outside Waratek scope
0
0.0%
Not applicable
149
90.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
4
2.4%
partly blocked
0
0.0%
not blocked
160
97.6%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 30 / year
19991
Not applicable1
Medium1
not blocked1
Working exploit published1
20001
Not applicable1
Medium1
not blocked1
No public exploit1
20011
Not applicable1
High1
not blocked1
Working exploit published1
20021
Not applicable1
Medium1
not blocked1
Working exploit published1
20030
20040
20053
Not applicable3
Medium2
Low1
not blocked3
No public exploit3
20061
Not applicable1
Medium1
not blocked1
No public exploit1
20078
Not applicable8
High2
Medium6
not blocked8
No public exploit8
20081
Not applicable1
Medium1
not blocked1
Working exploit published1
20093
Not applicable3
High1
Medium1
Low1
not blocked3
Working exploit published1
No public exploit2
20102
Not applicable2
Medium2
not blocked2
Working exploit published1
No public exploit1
20111
Not applicable1
Medium1
not blocked1
No public exploit1
20120
20135
Protected by Waratek1
Not applicable4
High3
Medium2
blocked by ARMR today1
not blocked4
Exploited1
No public exploit4
201410
Not applicable10
Medium10
not blocked10
No public exploit10
20155
Not applicable5
High1
Medium1
Low3
not blocked5
No public exploit5
20166
Not applicable6
High3
Medium3
not blocked6
No public exploit6
20175
Not applicable5
High2
Medium3
not blocked5
Working exploit published1
No public exploit4
20189
Not applicable9
Critical1
High6
Medium1
Low1
not blocked9
No public exploit9
20193
Protected by Waratek1
Not applicable2
Critical1
Medium2
blocked by ARMR today1
not blocked2
No public exploit3
20201
No exploit published1
Medium1
not blocked1
No public exploit1
202118
Mitigation candidate1
No exploit published5
Not applicable12
High11
Medium7
not blocked18
Exploited1
Working exploit published1
No public exploit16
202211
Protected by Waratek2
No exploit published2
Not applicable7
Critical4
High4
Medium3
blocked by ARMR today2
not blocked9
Exploited2
No public exploit9
202319
Not applicable19
Critical4
High3
Medium12
not blocked19
Proof of concept only2
No public exploit17
202430
Not applicable30
Critical3
High5
Medium21
Low1
not blocked30
Proof of concept only18
No public exploit12
20254
Not applicable4
High1
Medium3
not blocked4
Proof of concept only1
No public exploit3
202615
No exploit published2
Not applicable13
Critical4
High4
Medium7
not blocked15
Exploited1
Proof of concept only2
No public exploit12
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2019-4059 | Critical | 2019-02-15 | Not applicable | No public exploit | IBM Rational ClearCase 1.0.0.0 GIT connector does not sufficiently protect the document database password. An attacker could obtain the password and gain unauthorized access to the document database. IBM X-Force ID: 156583. |
| CVE-2018-1884 | High | 2018-11-12 | Not applicable | No public exploit | IBM Case Manager 5.2.0.0, 5.2.0.4, 5.2.1.0, 5.2.1.7, 5.3.0.0, and 5.3.3.0 is vulnerable to a "zip slip" vulnerability which could allow a remote attacker to execute code using directory traversal techniques. IBM X-Force ID: 151970. |
| CVE-2018-17912 | High | 2018-11-02 | Not applicable | No public exploit | An XXE vulnerability exists in CASE Suite Versions 3.10 and prior when processing parameter entities, which may allow remote file disclosure. |
| CVE-2018-0660 | Low | 2018-09-07 | Not applicable | No public exploit | Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create arbitrary files via specially crafted ATC file. |
| CVE-2018-0659 | Medium | 2018-09-07 | Not applicable | No public exploit | Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create or overwrite existing files via specially crafted ATC file. |
| CVE-2018-0675 | High | 2018-09-04 | Not applicable | No public exploit | AttacheCase ver.3.3.0.0 and earlier allows an arbitrary script execution via unspecified vectors. |
| CVE-2018-0674 | High | 2018-09-04 | Not applicable | No public exploit | AttacheCase ver.2.8.4.0 and earlier allows an arbitrary script execution via unspecified vectors. |
| CVE-2017-16099 | High | 2018-06-07 | Not applicable | No public exploit | The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition. |
| CVE-2014-0931 | Critical | 2018-04-20 | Not applicable | No public exploit | Multiple XML external entity (XXE) vulnerabilities in the (1) CCRC WAN Server / CM Server, (2) Perl CC/CQ integration trigger scripts, (3) CMAPI Java interface, (4) ClearCase remote client, and (5) CMI and OSLC-based ClearQuest integrations components in IBM Rational ClearCase 7.1.0.x, 7.1.1.x, 7.1.2 through 7.1.2.13, 8.0 through 8.0.0.10, and 8.0.1 through 8.0.1.3 allow remote attackers to cause a denial of service or access other servers via crafted XML data. IBM X-Force ID: 92263. |
| CVE-2015-5039 | High | 2018-03-26 | Not applicable | No public exploit | The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1.x before 8.0.1.11 do not properly validate hostnames in X.509 certificates from SSL servers, which allows remote attackers to spoof servers and obtain sensitive information or modify network traffic via a crafted certificate. IBM X-Force ID: 106715. |
| CVE-2017-2272 | High | 2017-07-17 | Not applicable | No public exploit | Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.3.2.2.6 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
| CVE-2017-2271 | High | 2017-07-17 | Not applicable | No public exploit | Untrusted search path vulnerability in Self-extracting encrypted files created by AttacheCase ver.2.8.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory. |
| CVE-2017-5631 | Medium | 2017-05-01 | Not applicable | Working exploit published | An issue was discovered in KMCIS CaseAware. Reflected cross site scripting is present in the user parameter (i.e., "usr") that is transmitted in the login.php query string. |
| CVE-2016-7843 | Medium | 2017-04-28 | Not applicable | No public exploit | Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file. |
| CVE-2016-7842 | Medium | 2017-04-28 | Not applicable | No public exploit | Directory traversal vulnerability in AttacheCase 2.8.2.8 and earlier and 3.2.0.4 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file. |
| CVE-2016-1174 | High | 2016-04-06 | Not applicable | No public exploit | Cross-site request forgery (CSRF) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators. |
| CVE-2016-1173 | Medium | 2016-04-06 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the Menubook plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2016-1172 | High | 2016-04-06 | Not applicable | No public exploit | Cross-site request forgery (CSRF) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to hijack the authentication of administrators. |
| CVE-2016-1171 | Medium | 2016-04-06 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the Recruit plugin before 0.9.3 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2016-1170 | High | 2016-04-06 | Not applicable | No public exploit | Cross-site request forgery (CSRF) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to hijack the authentication of administrators. |
| CVE-2016-1169 | Medium | 2016-04-06 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the Casebook plugin before 0.9.4 for baserCMS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2015-1979 | Low | 2015-07-20 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input to the (1) addressability or (2) comments component. |
| CVE-2015-4380 | Low | 2015-06-15 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the Linear Case module 6.x-1.x before 6.x-1.3 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2014-6221 | High | 2015-04-06 | Not applicable | No public exploit | The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x before 8.0.1.7 does not properly generate random numbers, which makes it easier for remote attackers to defeat cryptographic protection mechanisms via unspecified vectors. |
| CVE-2014-6134 | Low | 2015-03-25 | Not applicable | No public exploit | IBM Rational ClearCase 8.0.0 before 8.0.0.14 and 8.0.1 before 8.0.1.7, when Installation Manager before 1.8.2 is used, retains cleartext server passwords in process memory throughout the installation procedure, which might allow local users to obtain sensitive information by leveraging access to the installation account. |
| CVE-2014-9523 | Medium | 2015-01-05 | Not applicable | No public exploit | Multiple cross-site request forgery (CSRF) vulnerabilities in the Our Team Showcase (our-team-enhanced) plugin before 1.3 for WordPress allow remote attackers to hijack the authentication of administrators for requests that (1) change plugin settings via unspecified vectors or (2) conduct cross-site scripting (XSS) attacks via the sc_our_team_member_count parameter in the sc_team_settings page to wp-admin/edit.php. |
| CVE-2014-8671 | Medium | 2014-11-07 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the GWT Mobile PhoneGap Showcase application for Android allows remote attackers to inject arbitrary web script or HTML via a crafted Bluetooth Device Name field. |
| CVE-2014-3106 | Medium | 2014-09-23 | Not applicable | No public exploit | IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not properly implement the Local Access Only protection mechanism, which allows remote attackers to bypass authentication and read files via the Help Server Administration feature. |
| CVE-2014-3105 | Medium | 2014-09-23 | Not applicable | No public exploit | The OSLC integration feature in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names via a series of requests. |
| CVE-2014-3104 | Medium | 2014-09-23 | Not applicable | No public exploit | IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. |
| CVE-2014-3103 | Medium | 2014-09-23 | Not applicable | No public exploit | The Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not set the secure flag for the session cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session. |
| CVE-2014-3101 | Medium | 2014-09-23 | Not applicable | No public exploit | The login form in the Web component in IBM Rational ClearQuest 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 does not insert a delay after a failed authentication attempt, which makes it easier for remote attackers to obtain access via a brute-force attack. |
| CVE-2014-3090 | Medium | 2014-09-23 | Not applicable | No public exploit | IBM Rational ClearCase 7.1 before 7.1.2.15, 8.0.0 before 8.0.0.12, and 8.0.1 before 8.0.1.5 allows remote attackers to cause a denial of service (memory consumption) via a crafted XML document containing a large number of nested entity references, a similar issue to CVE-2003-1564. |
| CVE-2014-5179 | Medium | 2014-08-06 | Not applicable | No public exploit | The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain sensitive information via a crafted link. |
| CVE-2014-0829 | Medium | 2014-03-21 | Not applicable | No public exploit | Multiple buffer overflows in IBM Rational ClearCase 7.x before 7.1.2.13, 8.0.0.x before 8.0.0.10, and 8.0.1.x before 8.0.1.3 allow remote authenticated users to obtain privileged access via unspecified vectors. |
| CVE-2013-6746 | Medium | 2014-01-22 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in FileNet P8 Platform Documentation Installable Info Center 4.5.1 through 5.2.0 in IBM FileNet Business Process Manager 4.5.1 through 5.1.0, FileNet Content Manager 4.5.1 through 5.2.0, and Case Foundation 5.2.0 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2013-5422 | Medium | 2013-12-19 | Not applicable | No public exploit | The Web Client in IBM Rational ClearQuest 7.1 through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2, when a multi-database dataset exists, allows remote attackers to read database names via unspecified vectors. |
| CVE-2013-5416 | High | 2013-12-18 | Not applicable | No public exploit | Unspecified vulnerability in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unknown vectors. |
| CVE-2013-5415 | High | 2013-12-18 | Not applicable | No public exploit | Buffer overflow in IBM Rational ClearCase through 7.1.2.12, 8.0.0.x before 8.0.0.9, and 8.0.1.x before 8.0.1.2 allows local users to gain privileges via unspecified vectors. |
| CVE-2013-5373 | Medium | 2013-09-25 | Not applicable | No public exploit | The RemoteClient component in IBM Rational ClearCase 8.0.0.03 through 8.0.0.07, and 8.0.1, uses world-writable permissions for the rcleartool script, which allows local users to gain privileges by appending commands. |
| CVE-2013-1965 | High | 2013-07-10 | Protected by Waratek | Exploited | Apache Struts Showcase App 2.0.0 through 2.3.13, as used in Struts 2 before 2.3.14.3, allows remote attackers to execute arbitrary OGNL code via a crafted parameter name that is not properly handled when invoking a redirect. |
| CVE-2011-1205 | Medium | 2011-03-29 | Not applicable | No public exploit | Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local users to gain privileges via a Trojan horse HTML document in the My Computer zone. |
| CVE-2010-3923 | Medium | 2010-12-30 | Not applicable | No public exploit | Untrusted search path vulnerability in AttacheCase before 2.70 allows local users to gain privileges via a Trojan horse executable file in the current working directory. |
| CVE-2010-0943 | Medium | 2010-03-08 | Not applicable | Working exploit published | Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a jashowcase action to index.php. |
| CVE-2009-4357 | Medium | 2009-12-18 | Not applicable | No public exploit | CQWeb (aka the web interface) in IBM Rational ClearQuest before 7.1.1 does not properly handle use of legacy URLs for automatic login, which might allow attackers to discover the passwords for user accounts via unspecified vectors. |
| CVE-2009-3499 | High | 2009-09-30 | Not applicable | Working exploit published | SQL injection vulnerability in employee.aspx in BPowerHouse BPLawyerCaseDocuments 1.0 allows remote attackers to execute arbitrary SQL commands via the cat parameter. |
| CVE-2009-1292 | Low | 2009-04-14 | Not applicable | No public exploit | UCM-CQ in IBM Rational ClearCase 7.0.0.x before 7.0.0.5, 7.0.1.x before 7.0.1.4, and 7.1.x before 7.1.0.1 on Linux and AIX places a username and password on the command line, which allows local users to obtain credentials by listing the process. |
| CVE-2008-3390 | Medium | 2008-07-31 | Not applicable | Working exploit published | Directory traversal vulnerability in libraries/general.init.php in Minishowcase Image Gallery 09b136, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the lang parameter. |
| CVE-2007-6168 | High | 2007-11-29 | Not applicable | No public exploit | SQL injection vulnerability in default.asp in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the username parameter, a different vector than CVE-2007-6143. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2007-6143 | High | 2007-11-27 | Not applicable | No public exploit | SQL injection vulnerability in default.asp (aka the Login Page) in VU Case Manager allows remote attackers to execute arbitrary SQL commands via the password parameter. |
| CVE-2007-4202 | Medium | 2007-08-08 | Not applicable | No public exploit | Guidance Software EnCase Enterprise Edition (EEE) 6 does not properly verify the identity of the acquisition target during communication with the EnCase Servlet (EEE servlet), which might allow remote attackers to spoof the disk image. |
| CVE-2007-4201 | Medium | 2007-08-08 | Not applicable | No public exploit | Guidance Software EnCase 6.2 and 6.5 does not properly handle a volume with more than 25 partitions, which might allow remote attackers to prevent examination of certain data, a related issue to CVE-2007-4035. |
| CVE-2007-4194 | Medium | 2007-08-08 | Not applicable | No public exploit | Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service (stack memory consumption) and possibly have other unspecified impact via a malformed file, related to "EnCase's file system parsing." NOTE: this information is based upon a vague pre-advisory. It might overlap CVE-2007-4036. |
| CVE-2007-4037 | Medium | 2007-07-27 | Not applicable | No public exploit | Guidance Software EnCase allows user-assisted attackers to trigger a buffer over-read and application crash via a malformed NTFS filesystem containing a modified FILE record with a certain large offset. NOTE: the vendor disputes the significance of this issue, asserting that relevant attackers typically do not corrupt a filesystem, and indicating that the relevant read operation can be disabled |
| CVE-2007-4036 | Medium | 2007-07-27 | Not applicable | No public exploit | Guidance Software EnCase allows user-assisted remote attackers to cause a denial of service via (1) a corrupted Microsoft Exchange database, which triggers an application crash when many options are selected; (2) a corrupted NTFS filesystem, which causes the application to report "memory allocation errors;" or (3) deeply nested directories, which trigger an application crash during an Expand All action. NOTE: the vendor disputes the significance of these vectors because the user can select fewer options, there is no operational impact, or the user can do less expansion |
| CVE-2007-4035 | Medium | 2007-07-27 | Not applicable | No public exploit | Guidance Software EnCase does not properly handle (1) certain malformed MBR partition tables with many entries, which allows remote attackers to prevent logical collection of a disk image; (2) NTFS filesystems with directory loops, which allows remote attackers to prevent examination of certain directory contents; and (3) certain other malformed NTFS filesystems, which allows remote attackers to prevent examination of corrupted records. NOTE: the vendor disputes the significance of these issues, because physical collection can be used instead, because the vendor believes that relevant attackers typically do not corrupt an MBR or a filesystem, and because detection of a loop is valuable on its own |
| CVE-2006-6052 | Medium | 2006-11-22 | Not applicable | No public exploit | NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames. |
| CVE-2005-3480 | Medium | 2005-11-03 | Not applicable | No public exploit | login.asp in Ringtail CaseBook 6.1.0 displays different error messages depending on whether a user exists or not, which allows remote attackers to determine valid usernames. |
| CVE-2005-3479 | Medium | 2005-11-03 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in login.asp in Ringtail CaseBook 6.1.0 allows remote attackers to inject arbitrary web script or HTML via the users parameter. |
| CVE-2005-1578 | Low | 2005-05-13 | Not applicable | No public exploit | EnCase Forensic Edition 4.18a does not support Device Configuration Overlays (DCO), which allows attackers to hide information without detection. |
| CVE-2002-1322 | Medium | 2002-12-11 | Not applicable | Working exploit published | Rational ClearCase 4.1, 2002.05, and possibly other versions allows remote attackers to cause a denial of service (crash) via certain packets to port 371, e.g. via nmap. |
| CVE-2001-0855 | High | 2001-12-06 | Not applicable | Working exploit published | Buffer overflow in db_loader in ClearCase 4.2 and earlier allows local users to gain root privileges via a long TERM environment variable. |
| CVE-2000-0072 | Medium | 2000-01-17 | Not applicable | No public exploit | Visual Casel (Vcasel) does not properly prevent users from executing files, which allows local users to use a relative pathname to specify an alternate file which has an approved name and possibly gain privileges. |
| CVE-1999-0350 | Medium | 1999-02-08 | Not applicable | Working exploit published | Race condition in the db_loader program in ClearCase gives local users root access by setting SUID bits. |