Overview 104 matches · 31 in Waratek scope · 0 protected · 2 exploited · 0 CISA KEV · 23 public PoC · 3 EPSS ≥ 0.5
104matches
31in Waratek scope29.8%
0protected0.0%
2exploited1.9%
0CISA KEV0.0%
23public PoC22.1%
3EPSS ≥ 0.52.9%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
1
1.0%
No exploit published
30
28.8%
Outside Waratek scope
2
1.9%
Not applicable
71
68.3%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
104
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
2
1.9%
Working exploit published
21
20.2%
Proof of concept only
0
0.0%
Forecast only
1
1.0%
No public exploit
80
76.9%
split by
peak 13 / year
20031
Not applicable1
High1
not blocked1
Working exploit published1
20040
200510
Not applicable10
High8
Medium2
not blocked10
Working exploit published4
No public exploit6
200611
Not applicable11
High3
Medium8
not blocked11
Working exploit published3
No public exploit8
20074
Not applicable4
High3
Medium1
not blocked4
Working exploit published2
No public exploit2
200810
Not applicable10
High5
Medium5
not blocked10
Working exploit published7
No public exploit3
20093
Not applicable3
Medium3
not blocked3
Working exploit published1
No public exploit2
20100
20110
20121
Not applicable1
Medium1
not blocked1
Working exploit published1
20131
Not applicable1
Medium1
not blocked1
No public exploit1
20143
Not applicable3
High1
Medium1
Low1
not blocked3
No public exploit3
20150
20164
Mitigation candidate1
No exploit published3
Medium4
not blocked4
Working exploit published1
No public exploit3
201712
No exploit published9
Not applicable3
High10
Medium1
Low1
not blocked12
No public exploit12
20182
No exploit published1
Not applicable1
Medium2
not blocked2
No public exploit2
201910
No exploit published2
Outside Waratek scope2
Not applicable6
Critical4
High3
Medium3
not blocked10
Exploited1
Working exploit published1
No public exploit8
202013
No exploit published8
Not applicable5
Critical3
High2
Medium8
not blocked13
No public exploit13
20215
No exploit published1
Not applicable4
High2
Medium3
not blocked5
Exploited1
Forecast only1
No public exploit3
20220
20234
Not applicable4
Critical1
High2
Medium1
not blocked4
No public exploit4
20245
No exploit published3
Not applicable2
Medium5
not blocked5
No public exploit5
20252
No exploit published1
Not applicable1
Critical1
Low1
not blocked2
No public exploit2
20263
No exploit published2
Not applicable1
Medium3
not blocked3
No public exploit3
200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2005-3829 | High | 2005-11-26 | Not applicable | No public exploit | index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to cause a denial of service (CPU consumption) via an invalid category parameter, which causes a large number of SQL queries to be processed. |
| CVE-2005-3828 | High | 2005-11-26 | Not applicable | No public exploit | SQL injection vulnerability in index.php in ActiveCampaign KnowledgeBuilder 2.4 and earlier allows remote attackers to execute arbitrary SQL commands via the article parameter. |
| CVE-2005-3596 | High | 2005-11-16 | Not applicable | No public exploit | SQL injection vulnerability in ASPKnowledgebase allows remote attackers to execute arbitrary SQL commands and bypass authentication via the (1) username and (2) password fields in adminlogin.asp. |
| CVE-2003-1131 | High | 2003-12-31 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in index.php in KnowledgeBuilder, referred to as KnowledgeBase, allows remote attackers to execute arbitrary PHP code by modifying the page parameter to reference a URL on a remote web server that contains the code. |