WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product ninja✕
Overview 112 matches · 3 in Waratek scope · 0 protected · 4 exploited · 0 CISA KEV · 12 public PoC · 1 EPSS ≥ 0.5
112matches 3in Waratek scope2.7% 0protected0.0% 4exploited3.6% 0CISA KEV0.0% 12public PoC10.7% 1EPSS ≥ 0.50.9%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 3 2.7% Outside Waratek scope 0 0.0% Not applicable 109 97.3% Withdrawn CVE 0 0.0%
Critical 11 9.8% High 30 26.8% Medium 70 62.5% Low 1 0.9% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 112 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 3.6% Working exploit published 11 9.8% Proof of concept only 15 13.4% Forecast only 0 0.0% No public exploit 82 73.2%
split by peak 27 / year
Not applicable: 109No exploit published: 3 Low: 1Medium: 70High: 30Critical: 11 not blocked: 112 No public exploit: 82Proof of concept only: 15Working exploit published: 11Exploited: 4
20051 Not applicable1 Low1 not blocked1 No public exploit1 20060 20070 20080 20092 Not applicable2 High1 Medium1 not blocked2 Working exploit published2 20100 20111 Not applicable1 High1 not blocked1 Working exploit published1 20120 20131 Not applicable1 High1 not blocked1 No public exploit1 20145 Not applicable5 Medium5 not blocked5 No public exploit5 20152 Not applicable2 High1 Medium1 not blocked2 No public exploit2 20161 Not applicable1 Critical1 not blocked1 Working exploit published1 20170 20185 Not applicable5 High1 Medium4 not blocked5 Working exploit published1 No public exploit4 20199 Not applicable9 Critical3 High2 Medium4 not blocked9 Working exploit published1 Proof of concept only1 No public exploit7 20202 Not applicable2 Medium2 not blocked2 No public exploit2 202116 Not applicable16 High7 Medium9 not blocked16 Exploited3 Working exploit published1 No public exploit12 20228 Not applicable8 Critical1 High3 Medium4 not blocked8 Working exploit published1 Proof of concept only1 No public exploit6 202313 Not applicable13 Critical2 High2 Medium9 not blocked13 Working exploit published2 Proof of concept only3 No public exploit8 202427 No exploit published1 Not applicable26 Critical3 High8 Medium16 not blocked27 Working exploit published1 Proof of concept only1 No public exploit25 202513 Not applicable13 Critical1 High2 Medium10 not blocked13 Exploited1 Proof of concept only6 No public exploit6 20266 No exploit published2 Not applicable4 High1 Medium5 not blocked6 Proof of concept only3 No public exploit3
20062008201020122014201620182020202220242026
112 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2015-2220 Medium 2015-03-05 Not applicable No public exploit Multiple cross-site scripting (XSS) vulnerabilities in the Ninja Forms plugin before 2.8.9 for WordPress allow (1) remote attackers to inject arbitrary web script or HTML via the ninja_forms_field_1 parameter in a ninja_forms_ajax_submit action to wp-admin/admin-ajax.php or (2) remote administrators to inject arbitrary web script or HTML via the fields[1] parameter to wp-admin/post.php.
CVE-2014-9688 High 2015-03-05 Not applicable No public exploit Unspecified vulnerability in the Ninja Forms plugin before 2.8.10 for WordPress has unknown impact and remote attack vectors related to admin users.
CVE-2014-7757 Medium 2014-10-21 Not applicable No public exploit The Awful Ninja Game (aka com.absolutelyawfulapplications.awfulninjagame) application 1.0.23 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5789 Medium 2014-09-09 Not applicable No public exploit The Ninja Chicken Ooga Booga (aka mominis.Generic_Android.Ninja_Chicken_Ooga_Booga) application 1.4.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5788 Medium 2014-09-09 Not applicable No public exploit The Ninja Chicken Adventure Island (aka mominis.Generic_Android.Ninja_Chicken_Adventure_Island) application 1.1.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-5787 Medium 2014-09-09 Not applicable No public exploit The Ninja Chicken (aka mominis.Generic_Android.Ninja_Chicken) application 1.7.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVE-2014-4017 Medium 2014-06-10 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in the Conversion Ninja plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter to lp/index.php.
CVE-2012-6503 High 2013-01-24 Not applicable No public exploit Unspecified vulnerability in the NinjaXplorer component before 1.0.7 for Joomla! has unknown impact and attack vectors.
CVE-2010-4991 High 2011-11-01 Not applicable Working exploit published SQL injection vulnerability in the NinjaMonials (com_ninjamonials) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter in a display action to index.php.
CVE-2009-3964 High 2009-11-18 Not applicable Working exploit published SQL injection vulnerability in the NinjaMonials (com_ninjacentral) component 1.1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the testimID parameter in a display action to index.php.
CVE-2009-0325 Medium 2009-01-29 Not applicable Working exploit published Directory traversal vulnerability in entries/index.php in Ninja Blog 4.8, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the cat parameter.
CVE-2005-3111 Low 2005-09-30 Not applicable No public exploit The handler code for backupninja 0.8 and earlier creates temporary files with predictable filenames, which allows local users to modify arbitrary files via a symlink attack.
‹ prev page 2 of 2 next ›