Overview 129 matches · 2 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 20 public PoC · 0 EPSS ≥ 0.5
129matches
2in Waratek scope1.6%
0protected0.0%
1exploited0.8%
0CISA KEV0.0%
20public PoC15.5%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
0.8%
No exploit published
1
0.8%
Outside Waratek scope
0
0.0%
Not applicable
127
98.4%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
129
100.0%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 18 / year
19994
Not applicable4
High3
Low1
not blocked4
Working exploit published2
No public exploit2
20002
Not applicable2
High1
Medium1
not blocked2
No public exploit2
20012
Not applicable2
High1
Medium1
not blocked2
No public exploit2
20022
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20031
Not applicable1
High1
not blocked1
Working exploit published1
20040
20052
Not applicable2
High1
Medium1
not blocked2
No public exploit2
20061
Not applicable1
High1
not blocked1
No public exploit1
20078
Not applicable8
High2
Medium6
not blocked8
Working exploit published2
No public exploit6
20088
Mitigation candidate1
Not applicable7
High2
Medium5
Low1
not blocked8
Working exploit published5
No public exploit3
20096
Not applicable6
High4
Medium2
not blocked6
Working exploit published2
No public exploit4
20100
20111
Not applicable1
Medium1
not blocked1
No public exploit1
20121
Not applicable1
High1
not blocked1
Working exploit published1
20130
20146
Not applicable6
High2
Medium4
not blocked6
Working exploit published2
No public exploit4
20155
Not applicable5
High1
Medium4
not blocked5
Working exploit published2
No public exploit3
20161
Not applicable1
Critical1
not blocked1
No public exploit1
20173
Not applicable3
Critical1
Medium2
not blocked3
No public exploit3
20182
Not applicable2
High2
not blocked2
No public exploit2
20198
Not applicable8
High7
Medium1
not blocked8
No public exploit8
20207
Not applicable7
Critical2
High3
Medium2
not blocked7
No public exploit7
202118
Not applicable18
Critical3
High10
Medium5
not blocked18
Exploited1
No public exploit17
202214
Not applicable14
Critical7
High4
Medium3
not blocked14
Proof of concept only1
No public exploit13
202313
Not applicable13
High8
Medium5
not blocked13
Proof of concept only12
No public exploit1
20244
Not applicable4
Critical1
High2
Medium1
not blocked4
No public exploit4
20256
Not applicable6
High5
Medium1
not blocked6
Proof of concept only1
No public exploit5
20264
No exploit published1
Not applicable3
High3
Medium1
not blocked4
Proof of concept only1
No public exploit3
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2008-4579 | Low | 2008-10-15 | Not applicable | No public exploit | The (1) fence_apc and (2) fence_apc_snmp programs, as used in (a) fence 2.02.00-r1 and possibly (b) cman, when running in verbose mode, allows local users to append to arbitrary files via a symlink attack on the apclog temporary file. |
| CVE-2008-4192 | Medium | 2008-09-29 | Not applicable | Working exploit published | The pserver_shutdown function in fence_egenera in cman 2.20080629 and 2.20080801 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file. |
| CVE-2008-2788 | Medium | 2008-06-20 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in index.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the redirection parameter. |
| CVE-2008-2787 | Medium | 2008-06-20 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in out.php in OpenDocMan 1.2.5 allows remote attackers to inject arbitrary web script or HTML via the last_message parameter. |
| CVE-2008-1904 | High | 2008-04-22 | Not applicable | Working exploit published | Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified this_cookie cookie. |
| CVE-2008-1855 | Medium | 2008-04-16 | Not applicable | Working exploit published | FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier, as used by ePolicy Orchestrator (ePO) and ProtectionPilot (PrP), allows remote attackers to corrupt memory and cause a denial of service (CMA Framework service crash) via a long invalid method in requests for the /spin//AVClient//AVClient.csp URI, a different vulnerability than CVE-2006-5274. |
| CVE-2008-1357 | Medium | 2008-03-17 | Mitigation candidate | Working exploit published | Format string vulnerability in the logDetail function of applib.dll in McAfee Common Management Agent (CMA) 3.6.0.574 (Patch 3) and earlier, as used in ePolicy Orchestrator 4.0.0 build 1015, allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in a sender field in an AgentWakeup request to UDP port 8082. NOTE: this issue only exists when the debug level is 8. |
| CVE-2007-4959 | Medium | 2007-09-18 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in catalog_products_with_images.php in osCMax 2.0.0-RC3-0-1 allows remote attackers to inject arbitrary web script or HTML via the URI. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2007-1991 | Medium | 2007-04-12 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in mail/signup.asp in CmailServer WebMail 5.4.3, and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the Comment parameter, a different vector than CVE-2007-1927. |
| CVE-2007-1927 | Medium | 2007-04-10 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in signup.asp in CmailServer WebMail 5.3.4 and earlier allows remote attackers to inject arbitrary web script or HTML via the POP3Mail parameter. |
| CVE-2007-1516 | Medium | 2007-03-20 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in functions/update.php in Cicoandcico CcMail 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the functions_dir parameter. |
| CVE-2007-1425 | High | 2007-03-13 | Not applicable | Working exploit published | SQL injection vulnerability in index.php in Triexa SonicMailer Pro 3.2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the list parameter in an archive action. |
| CVE-2007-0380 | Medium | 2007-01-19 | Not applicable | No public exploit | DocMan 1.3 RC2 allows remote attackers to obtain sensitive information (the full path) via unspecified vectors. |
| CVE-2007-0379 | Medium | 2007-01-19 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in DocMan 1.3 RC2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2007-0378 | High | 2007-01-19 | Not applicable | No public exploit | Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 allow attackers to execute arbitrary SQL commands via unspecified vectors. |
| CVE-2006-5655 | High | 2006-11-03 | Not applicable | No public exploit | SQL injection vulnerability in index.php in OpenDocMan 1.2p3 allows remote attackers to execute arbitrary SQL commands via the username parameter. |
| CVE-2004-1130 | Medium | 2005-01-10 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in admin.asp in CMailServer 5.2 allows remote attackers to execute arbitrary web script or HTML via personal information fields, such as (1) username, (2) name, or (3) comments. |
| CVE-2004-1129 | High | 2005-01-10 | Not applicable | No public exploit | SQL injection vulnerability in (1) fdelmail.asp, (2) addressc.asp, and possibly (3) postmail.asp and (4) fmvmail.asp in CMailServer 5.2 allow remote attackers to inject arbitrary SQL commands and delete mail metadata or e-mail addresses of contacts via the indexOfMail parameter. |
| CVE-2003-0280 | High | 2003-06-16 | Not applicable | Working exploit published | Multiple buffer overflows in the SMTP Service for ESMTP CMailServer 4.0.2003.03.27 allow remote attackers to execute arbitrary code via long (1) MAIL FROM or (2) RCPT TO commands. |
| CVE-2002-2034 | High | 2002-12-31 | Not applicable | No public exploit | The Email Sanitizer before 1.133 for Procmail allows remote attackers to bypass the mail filter and execute arbitrary code via crafted recursive multipart MIME attachments. |
| CVE-2002-0799 | High | 2002-08-12 | Not applicable | Working exploit published | Buffer overflow in YoungZSoft CMailServer 3.30 allows remote attackers to execute arbitrary code via a long USER argument. |
| CVE-2001-0905 | Medium | 2001-10-18 | Not applicable | No public exploit | Race condition in signal handling of procmail 3.20 and earlier, when running setuid, allows local users to cause a denial of service or gain root privileges by sending a signal while a signal handling routine is already running. |
| CVE-2001-0742 | High | 2001-10-18 | Not applicable | No public exploit | Buffer overflow in Computalynx CMail POP3 mail server 2.4.9 allows remote attackers to run arbitrary code via a long HELO command. |
| CVE-2000-0557 | High | 2000-06-05 | Not applicable | No public exploit | Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to execute arbitrary commands via a long GET request. |
| CVE-2000-0556 | Medium | 2000-06-05 | Not applicable | No public exploit | Buffer overflow in the web interface for Cmail 2.4.7 allows remote attackers to cause a denial of service by sending a large user name to the user dialog running on port 8002. |
| CVE-1999-1521 | High | 1999-09-12 | Not applicable | Working exploit published | Computalynx CMail 2.4 and CMail 2.3 SP2 SMTP servers are vulnerable to a buffer overflow attack in the MAIL FROM command that may allow a remote attacker to execute arbitrary code on the server. |
| CVE-1999-1553 | High | 1999-05-01 | Not applicable | Working exploit published | Buffer overflow in XCmail 0.99.6 with autoquote enabled allows remote attackers to execute arbitrary commands via a long subject line. |
| CVE-1999-0475 | Low | 1999-04-05 | Not applicable | No public exploit | A race condition in how procmail handles .procmailrc files allows a local user to read arbitrary files available to the user who is running procmail. |
| CVE-1999-0439 | High | 1999-04-05 | Not applicable | No public exploit | Buffer overflow in procmail before version 3.12 allows remote or local attackers to execute commands via expansions in the procmailrc configuration file. |