WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product smtp✕
Overview 117 matches · 2 in Waratek scope · 1 protected · 5 exploited · 1 CISA KEV · 18 public PoC · 4 EPSS ≥ 0.5
117matches 2in Waratek scope1.7% 1protected0.9% 5exploited4.3% 1CISA KEV0.9% 18public PoC15.4% 4EPSS ≥ 0.53.4%
Protected by Waratek 1 0.9% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 0.9% Outside Waratek scope 0 0.0% Not applicable 115 98.3% Withdrawn CVE 0 0.0%
Critical 9 7.7% High 52 44.4% Medium 51 43.6% Low 5 4.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 0.9% partly blocked 0 0.0% not blocked 116 99.1% not established 0 0.0% unrecorded 0 0.0%
Exploited 5 4.3% Working exploit published 14 12.0% Proof of concept only 11 9.4% Forecast only 0 0.0% No public exploit 87 74.4%
split by peak 17 / year
Not applicable: 115No exploit published: 1Protected by Waratek: 1 Low: 5Medium: 51High: 52Critical: 9 not blocked: 116blocked by ARMR today: 1 No public exploit: 87Proof of concept only: 11Working exploit published: 14Exploited: 5
19981 Not applicable1 Medium1 not blocked1 No public exploit1 19991 Not applicable1 High1 not blocked1 No public exploit1 20003 Not applicable3 High1 Medium2 not blocked3 Working exploit published1 No public exploit2 20014 Not applicable4 High3 Medium1 not blocked4 Working exploit published1 No public exploit3 20023 Not applicable3 High2 Medium1 not blocked3 No public exploit3 20031 Not applicable1 High1 not blocked1 No public exploit1 20045 Not applicable5 High2 Medium2 Low1 not blocked5 Working exploit published1 No public exploit4 20057 Not applicable7 High6 Medium1 not blocked7 Working exploit published4 No public exploit3 20068 Not applicable8 High6 Medium2 not blocked8 Working exploit published2 No public exploit6 20072 Not applicable2 High2 not blocked2 No public exploit2 20085 Not applicable5 High1 Medium2 Low2 not blocked5 Working exploit published1 No public exploit4 20091 Not applicable1 Medium1 not blocked1 No public exploit1 20103 Not applicable3 Medium2 Low1 not blocked3 Working exploit published1 No public exploit2 20110 20120 20130 20141 Not applicable1 Medium1 not blocked1 No public exploit1 20150 20160 20174 Not applicable4 Critical1 High1 Medium2 not blocked4 No public exploit4 20180 20194 Not applicable4 Critical1 Medium3 not blocked4 Working exploit published1 No public exploit3 20206 Not applicable6 Critical2 High3 Medium1 not blocked6 Exploited2 Working exploit published2 No public exploit2 20212 Not applicable2 Medium2 not blocked2 No public exploit2 202213 Not applicable13 Critical1 High3 Medium9 not blocked13 Exploited1 Proof of concept only2 No public exploit10 202316 Not applicable16 Critical1 High6 Medium9 not blocked16 Exploited1 Proof of concept only4 No public exploit11 202417 Not applicable17 Critical3 High8 Medium5 Low1 not blocked17 Exploited1 Proof of concept only3 No public exploit13 202510 Protected by Waratek1 No exploit published1 Not applicable8 High6 Medium4 blocked by ARMR today1 not blocked9 Proof of concept only2 No public exploit8
1998200120042007201020132016201920222025
117 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2004-2677 High 2004-12-31 Not applicable Working exploit published Format string vulnerability in qwik-smtpd.c in QwikMail SMTP (qwik-smtpd) 0.3 and earlier allows remote attackers to execute arbitrary code via format specifiers in the (1) clientRcptTo array, and the (2) Received and (3) messageID variables, possibly involving HELO and hostname arguments.
CVE-2004-2417 High 2004-12-31 Not applicable No public exploit Format string vulnerability in smtp.c for smtp.proxy 1.1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the (1) client hostname or (2) message-id, which are injected into a syslog message.
CVE-2004-0423 Low 2004-07-07 Not applicable No public exploit The log_event function in ssmtp 2.50.6 and earlier allows local users to overwrite arbitrary files via a symlink attack on the ssmtp.log temporary log file.
CVE-2004-0156 Medium 2004-06-01 Not applicable No public exploit Format string vulnerabilities in the (1) die or (2) log_event functions for ssmtp before 2.50.6 allow remote mail relays to cause a denial of service and possibly execute arbitrary code.
CVE-2003-1477 High 2003-12-31 Not applicable No public exploit MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service (CPU consumption) via a PowerPoint attachment that either (1) is corrupt or (2) contains "embedded objects."
CVE-2002-1985 Medium 2002-12-31 Not applicable No public exploit iSMTP 5.0.1 allows remote attackers to cause a denial of service via a long "MAIL FROM" command, possibly triggering a buffer overflow.
CVE-2002-1090 High 2002-10-04 Not applicable No public exploit Buffer overflow in read_smtp_response of protocol.c in libesmtp before 0.8.11 allows a remote SMTP server to (1) execute arbitrary code via a certain response or (2) cause a denial of service via long server responses.
CVE-2002-1121 High 2002-09-24 Not applicable No public exploit SMTP content filter engines, including (1) GFI MailSecurity for Exchange/SMTP before 7.2, (2) InterScan VirusWall before 3.52 build 1494, (3) the default configuration of MIMEDefang before 2.21, and possibly other products, do not detect fragmented emails as defined in RFC2046 ("Message Fragmentation and Reassembly") and supported in such products as Outlook Express, which allows remote attackers to bypass content filtering, including virus checking, via fragmented emails of the message/partial content type.
CVE-2001-1542 High 2001-12-31 Not applicable No public exploit NAI WebShield SMTP 4.5 and possibly 4.5 MR1a does not filter improperly MIME encoded email attachments, which could allow remote attackers to bypass filtering and possibly execute arbitrary code in email clients that process the invalid attachments.
CVE-2001-1456 High 2001-09-04 Not applicable No public exploit Buffer overflow in the (1) smap/smapd and (2) CSMAP daemons for Gauntlet Firewall 5.0 through 6.0 allows remote attackers to execute arbitrary code via a crafted mail message.
CVE-2000-1130 High 2001-01-09 Not applicable No public exploit McAfee WebShield SMTP 4.5 allows remote attackers to bypass email content filtering rules by including Extended ASCII characters in name of the attachment.
CVE-2000-1129 Medium 2001-01-09 Not applicable Working exploit published McAfee WebShield SMTP 4.5 allows remote attackers to cause a denial of service via a malformed recipient field.
CVE-2000-0932 Medium 2000-12-19 Not applicable No public exploit MAILsweeper for SMTP 3.x does not properly handle corrupt CDA documents in a ZIP file and hangs, which allows remote attackers to cause a denial of service.
CVE-2000-0833 High 2000-11-14 Not applicable Working exploit published Buffer overflow in WinSMTP 1.06f and 2.X allows remote attackers to cause a denial of service via a long (1) USER or (2) HELO command.
CVE-2000-0738 Medium 2000-10-20 Not applicable No public exploit WebShield SMTP 4.5 allows remote attackers to cause a denial of service by sending e-mail with a From: address that has a . (period) at the end, which causes WebShield to continuously send itself copies of the e-mail.
CVE-1999-1516 High 1999-09-02 Not applicable No public exploit A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string.
CVE-1999-1200 Medium 1998-07-20 Not applicable No public exploit Vintra SMTP MailServer allows remote attackers to cause a denial of service via a malformed "EXPN *@" command.
‹ prev page 2 of 2 next ›