Overview 103 matches · 4 in Waratek scope · 3 protected · 2 exploited · 2 CISA KEV · 9 public PoC · 6 EPSS ≥ 0.5
103matches
4in Waratek scope3.9%
3protected2.9%
2exploited1.9%
2CISA KEV1.9%
9public PoC8.7%
6EPSS ≥ 0.55.8%
Protected by Waratek
3
2.9%
Rule in development
0
0.0%
Mitigation candidate
1
1.0%
No exploit published
0
0.0%
Outside Waratek scope
1
1.0%
Not applicable
98
95.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
3
2.9%
partly blocked
0
0.0%
not blocked
100
97.1%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 13 / year
20041
Not applicable1
High1
not blocked1
Working exploit published1
20050
20063
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20070
20081
Not applicable1
Medium1
not blocked1
No public exploit1
20090
20100
20110
20121
Not applicable1
Medium1
not blocked1
No public exploit1
20130
20145
Not applicable5
High1
Medium4
not blocked5
No public exploit5
201513
Not applicable13
High2
Medium10
Low1
not blocked13
No public exploit13
20166
Not applicable6
Critical1
High4
Medium1
not blocked6
Forecast only1
No public exploit5
20175
Not applicable5
High5
not blocked5
Proof of concept only1
No public exploit4
20185
Not applicable5
Critical1
High3
Medium1
not blocked5
No public exploit5
201911
Protected by Waratek1
Outside Waratek scope1
Not applicable9
Critical1
High10
blocked by ARMR today1
not blocked10
No public exploit11
20204
Mitigation candidate1
Not applicable3
Critical1
High2
Medium1
not blocked4
Working exploit published1
Proof of concept only2
No public exploit1
20214
Protected by Waratek2
Not applicable2
Critical1
High2
Medium1
blocked by ARMR today2
not blocked2
Exploited1
Working exploit published1
No public exploit2
202213
Not applicable13
High12
Medium1
not blocked13
Proof of concept only1
No public exploit12
20238
Not applicable8
High3
Medium5
not blocked8
Proof of concept only1
No public exploit7
20245
Not applicable5
High3
Medium2
not blocked5
No public exploit5
20259
Not applicable9
High5
Medium4
not blocked9
Exploited1
No public exploit8
20269
Not applicable9
High2
Medium4
Low3
not blocked9
Proof of concept only1
No public exploit8
200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2006-5327 | High | 2006-10-17 | Not applicable | No public exploit | Untrusted search path vulnerability in OpenBase SQL 10.0 and earlier, as used in Apple Xcode 2.2 2.2 and earlier and possibly other products, allows local users to execute arbitrary code via a modified PATH that references a malicious gzip program, which is executed by gnutar with certain TAR_OPTIONS environment variable settings, when gnutar is invoked by OpenBase. |
| CVE-2006-1466 | Medium | 2006-05-24 | Not applicable | No public exploit | Xcode Tools before 2.3 for Mac OS X 10.4, when running the WebObjects plugin, allows remote attackers to access or modify WebObjects projects through a network service. |
| CVE-2004-2687 | High | 2004-12-31 | Not applicable | Working exploit published | distcc 2.x, as used in XCode 1.5 and others, when not configured to restrict access to the server port, allows remote attackers to execute arbitrary commands via compilation jobs, which are executed by the server without authorization checks. |