Overview 159 matches · 9 in Waratek scope · 1 protected · 3 exploited · 1 CISA KEV · 10 public PoC · 0 EPSS ≥ 0.5
159matches
9in Waratek scope5.7%
1protected0.6%
3exploited1.9%
1CISA KEV0.6%
10public PoC6.3%
0EPSS ≥ 0.50.0%
Protected by Waratek
1
0.6%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
8
5.0%
Outside Waratek scope
0
0.0%
Not applicable
150
94.3%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
0.6%
partly blocked
0
0.0%
not blocked
158
99.4%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 30 / year
20021
Not applicable1
High1
not blocked1
No public exploit1
20030
20043
Not applicable3
High1
Medium1
Low1
not blocked3
Working exploit published1
No public exploit2
20051
Not applicable1
High1
not blocked1
No public exploit1
20062
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
20073
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20083
Not applicable3
Critical1
High2
not blocked3
No public exploit3
20094
Not applicable4
High4
not blocked4
Working exploit published1
No public exploit3
20102
Not applicable2
High1
Medium1
not blocked2
Working exploit published1
No public exploit1
20110
20123
Not applicable3
High3
not blocked3
Working exploit published1
No public exploit2
20136
Not applicable6
Medium4
Low2
not blocked6
No public exploit6
20146
Not applicable6
Medium5
Low1
not blocked6
Working exploit published1
No public exploit5
20153
Not applicable3
High2
Medium1
not blocked3
No public exploit3
20160
20175
Not applicable5
Critical1
High2
Medium2
not blocked5
No public exploit5
201814
Not applicable14
Critical1
High4
Medium9
not blocked14
Working exploit published1
No public exploit13
201912
No exploit published1
Not applicable11
Critical3
High4
Medium5
not blocked12
No public exploit12
20206
No exploit published1
Not applicable5
Critical3
High2
Medium1
not blocked6
No public exploit6
20214
Not applicable4
Critical1
Medium3
not blocked4
Working exploit published1
Proof of concept only1
No public exploit2
202230
Protected by Waratek1
No exploit published6
Not applicable23
Critical4
High15
Medium11
blocked by ARMR today1
not blocked29
Proof of concept only1
No public exploit29
202325
Not applicable25
Critical2
High18
Medium5
not blocked25
Proof of concept only8
No public exploit17
202415
Not applicable15
High5
Medium10
not blocked15
Exploited2
Proof of concept only2
No public exploit11
202510
Not applicable10
Critical1
High5
Medium4
not blocked10
No public exploit10
20261
Not applicable1
High1
not blocked1
Exploited1
2002200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2018-16492 | Critical | 2019-02-01 | Not applicable | No public exploit | A prototype pollution vulnerability was found in module extend <2.0.2, ~<3.0.2 that allows an attacker to inject arbitrary properties onto Object.prototype. |
| CVE-2018-16491 | Critical | 2019-02-01 | Not applicable | No public exploit | A prototype pollution vulnerability was found in node.extend <1.1.7, ~<2.0.1 that allows an attacker to inject arbitrary properties onto Object.prototype. |
| CVE-2018-16489 | Critical | 2019-02-01 | Not applicable | No public exploit | A prototype pollution vulnerability was found in just-extend <4.0.0 that allows attack to inject properties onto Object.prototype through its functions. |
| CVE-2018-2451 | Medium | 2018-08-14 | Not applicable | No public exploit | XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding authorizations have been revoked meanwhile by an administrator user. Similarly, an attacker who managed to gain access to the platform user's session might misuse the session token even after the session has been closed. |
| CVE-2018-3750 | Critical | 2018-07-03 | Not applicable | No public exploit | The utilities function in all versions <= 0.5.0 of the deep-extend node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all objects. |
| CVE-2015-4557 | Medium | 2018-04-12 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the new_Twitter_sign_button function in nextend-Twitter-connect.php in the Nextend Twitter Connect plugin before 1.5.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the redirect_to parameter. NOTE: this may overlap CVE-2015-4413. |
| CVE-2018-7717 | Medium | 2018-03-05 | Not applicable | No public exploit | The htmlImageAddTitleAttribute function in sige.php in the Kubik-Rubik Simple Image Gallery Extended (SIGE) extension 3.2.3 for Joomla! has XSS via a crafted image header, as demonstrated by the Caption-Abstract header object in a JPEG file. This is fixed in 3.3.1. |
| CVE-2017-1758 | High | 2018-02-21 | Not applicable | No public exploit | IBM Financial Transaction Manager for ACH Services for Multi-Platform (IBM Control Center 6.0 and 6.1, IBM Financial Transaction Manager 3.0.2, 3.0.3, 3.0.4, and 3.1.0, IBM Transformation Extender Advanced 9.0) is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 135859. |
| CVE-2017-16356 | Medium | 2018-02-20 | Not applicable | Working exploit published | Reflected XSS in Kubik-Rubik SIGE (aka Simple Image Gallery Extended) before 3.3.0 allows attackers to execute JavaScript in a victim's browser by having them visit a plugins/content/sige/plugin_sige/print.php link with a crafted img, name, or caption parameter. |
| CVE-2018-2379 | Medium | 2018-02-14 | Not applicable | No public exploit | In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint. |
| CVE-2018-2378 | Medium | 2018-02-14 | Not applicable | No public exploit | In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource consumption. |
| CVE-2018-2377 | Medium | 2018-02-14 | Not applicable | No public exploit | In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized users. |
| CVE-2018-2376 | High | 2018-02-14 | Not applicable | No public exploit | In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space. |
| CVE-2018-2375 | High | 2018-02-14 | Not applicable | No public exploit | In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space. |
| CVE-2018-2374 | Medium | 2018-02-14 | Not applicable | No public exploit | In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sensitive application data like service bindings within that space. |
| CVE-2018-2373 | High | 2018-02-14 | Not applicable | No public exploit | Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statements that deliver information about system configuration in SAP HANA Extended Application Services, 1.0. |
| CVE-2018-2372 | Medium | 2018-02-14 | Not applicable | No public exploit | A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentiality of SSL communication. |
| CVE-2017-16680 | High | 2017-12-12 | Not applicable | No public exploit | Two potential audit log injections in SAP HANA extended application services 1.0, advanced model: 1) Certain HTTP/REST endpoints of controller service are missing user input validation which could allow unprivileged attackers to forge audit log lines. Hence the interpretation of audit log files could be hindered or misdirected. 2) User Account and Authentication writes audit logs into syslog and additionally writes the same audit entries into a log file. Entries in the log file miss escaping. Hence the interpretation of audit log files could be hindered or misdirected, while the entries in syslog are correct. |
| CVE-2016-0959 | Critical | 2017-06-27 | Not applicable | No public exploit | Use after free vulnerability in Adobe Flash Player Desktop Runtime before 20.0.0.267, Adobe Flash Player Extended Support Release before 18.0.0.324, Adobe Flash Player for Google Chrome before 20.0.0.267, Adobe Flash Player for Microsoft Edge and Internet Explorer 11 before 20.0.0.267, Adobe Flash Player for Internet Explorer 10 and 11 before 20.0.0.267, Adobe Flash Player for Linux before 11.2.202.559, AIR Desktop Runtime before 20.0.0.233, AIR SDK before 20.0.0.233, AIR SDK & Compiler before 20.0.0.233, AIR for Android before 20.0.0.233. |
| CVE-2017-2175 | High | 2017-05-22 | Not applicable | No public exploit | Untrusted search path vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. |
| CVE-2017-2174 | Medium | 2017-05-22 | Not applicable | No public exploit | Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2017-2173 | Medium | 2017-05-22 | Not applicable | No public exploit | Cross-site scripting vulnerability in Empirical Project Monitor - eXtended all versions allows remote authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2015-4173 | Medium | 2015-08-26 | Not applicable | No public exploit | Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as used in the SRA firmware before 7.5.1.2-40sv and 8.x before 8.0.0.3-23sv, allows local users to gain privileges via a Trojan horse program in the %SYSTEMDRIVE% folder. |
| CVE-2015-5536 | High | 2015-08-13 | Not applicable | No public exploit | Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via the (1) sub_dir parameter in a formUSBStorage request; pinCode parameter in a (2) formWpsStart or (3) formiNICWpsStart request; (4) wps_enrolee_pin parameter in a formWlanSetupWPS request; or unspecified parameters in a (5) formWlanMP, (6) formBSSetSitesurvey, (7) formHwSet, or (8) formConnectionSetting request. |
| CVE-2015-1311 | High | 2015-01-22 | Not applicable | No public exploit | The Extended Application Services (XS) in SAP HANA allows remote attackers to inject arbitrary ABAP code via unspecified vectors, aka SAP Note 2098906. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. |
| CVE-2014-8800 | Medium | 2014-12-05 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in nextend-facebook-settings.php in the Nextend Facebook Connect plugin before 1.5.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the fb_login_button parameter in a newfb_update_options action. |
| CVE-2014-7330 | Medium | 2014-10-19 | Not applicable | No public exploit | The XtendCU Mobile (aka com.metova.cuae.xtend) application 1.0.28 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. |
| CVE-2014-5173 | Medium | 2014-07-31 | Not applicable | No public exploit | SAP HANA Extend Application Services (XS) allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public. |
| CVE-2014-5171 | Low | 2014-07-31 | Not applicable | No public exploit | SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network. |
| CVE-2013-1980 | Medium | 2014-02-11 | Not applicable | No public exploit | Buffer overflow in the get_dsmp function in loaders/masi_load.c in libxmp before 4.1.0 allows remote attackers to execute arbitrary code via a crafted MASI file. |
| CVE-2013-2962 | Medium | 2014-02-06 | Not applicable | No public exploit | Buffer overflow in the Launcher in IBM WebSphere Transformation Extender 8.4.x before 8.4.0.4 allows local users to cause a denial of service (process crash or Admin Console command-stream outage) via unspecified vectors. |
| CVE-2013-4039 | Medium | 2013-08-28 | Not applicable | No public exploit | IBM WebSphere Extended Deployment Compute Grid 8.0 before 8.0.0.3 allows remote authenticated users to obtain sensitive information, and consequently bypass intended access restrictions on jobs, via unspecified vectors. |
| CVE-2013-4944 | Low | 2013-07-29 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in the BuddyPress Extended Friendship Request plugin before 1.0.2 for WordPress, when the "Friend Connections" component is enabled, allows remote attackers to inject arbitrary web script or HTML via the friendship_request_message parameter to wp-admin/admin-ajax.php. NOTE: some of these details are obtained from third party information. |
| CVE-2013-4877 | Low | 2013-07-18 | Not applicable | No public exploit | The Verizon Wireless Network Extender SCS-26UC4 and SCS-2U01 does not use CAVE authentication, which makes it easier for remote attackers to obtain ESN and MIN values from arbitrary phones, and conduct cloning attacks, by sniffing the network for registration packets. |
| CVE-2013-4876 | Medium | 2013-07-18 | Not applicable | No public exploit | The Verizon Wireless Network Extender SCS-2U01 has a hardcoded password for the root account, which makes it easier for physically proximate attackers to obtain administrative access by leveraging a login prompt. |
| CVE-2013-4875 | Medium | 2013-07-18 | Not applicable | No public exploit | The Uboot bootloader on the Verizon Wireless Network Extender SCS-2U01 allows physically proximate attackers to bypass the intended boot process and obtain a login prompt by connecting a crafted HDMI cable and sending a SysReq interrupt. |
| CVE-2013-4874 | Medium | 2013-07-18 | Not applicable | No public exploit | The Uboot bootloader on the Verizon Wireless Network Extender SCS-26UC4 allows physically proximate attackers to obtain root access by connecting a crafted HDMI cable and using a sys session to modify the ramboot environment variable. |
| CVE-2012-2289 | High | 2012-08-26 | Not applicable | No public exploit | EMC ApplicationXtender Desktop before 6.5 SP2 and ApplicationXtender Web Access .NET before 6.5 SP2 allow remote attackers to upload files to any location, and possibly execute arbitrary code, via unspecified vectors. |
| CVE-2012-1350 | High | 2012-08-06 | Not applicable | No public exploit | Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service (radio-interface input-queue hang) via IAPP 0x3281 packets, aka Bug ID CSCtc12426. |
| CVE-2012-2515 | High | 2012-07-05 | Not applicable | Working exploit published | Multiple stack-based buffer overflows in the KeyHelp.KeyCtrl.1 ActiveX control in KeyHelp.ocx 1.2.312 in KeyWorks KeyHelp Module (aka the HTML Help component), as used in EMC Documentum ApplicationXtender Desktop 5.4; EMC Captiva Quickscan Pro 4.6 SP1; GE Intelligent Platforms Proficy Historian 3.1, 3.5, 4.0, and 4.5; GE Intelligent Platforms Proficy HMI/SCADA iFIX 5.0 and 5.1; GE Intelligent Platforms Proficy Pulse 1.0; GE Intelligent Platforms Proficy Batch Execution 5.6; GE Intelligent Platforms SI7 I/O Driver 7.20 through 7.42; and other products, allow remote attackers to execute arbitrary code via a long string in the second argument to the (1) JumpMappedID or (2) JumpURL method. |
| CVE-2010-4516 | Medium | 2010-12-09 | Not applicable | No public exploit | Multiple cross-site scripting (XSS) vulnerabilities in the JXtended Comments component before 1.3.1 for Joomla allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
| CVE-2010-3155 | High | 2010-08-27 | Not applicable | Working exploit published | Untrusted search path vulnerability in Adobe ExtendScript Toolkit (ESTK) CS5 3.5.0.52 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse dwmapi.dll that is located in the same folder as a .jsx file. |
| CVE-2008-3685 | High | 2009-10-22 | Not applicable | No public exploit | Directory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to TCP port 2606. |
| CVE-2008-3684 | High | 2009-10-22 | Not applicable | No public exploit | Heap-based buffer overflow in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to execute arbitrary code via crafted packet data to TCP port 2606. |
| CVE-2007-6732 | High | 2009-09-13 | Not applicable | No public exploit | Multiple buffer overflows in the dtt_load function in loaders/dtt_load.c Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via unspecified vectors related to an untrusted length value and the (1) pofs and (2) plen arrays. |
| CVE-2007-6731 | High | 2009-09-13 | Not applicable | Working exploit published | Extended Module Player (XMP) 2.5.1 and earlier allow remote attackers to execute arbitrary code via an OXM file with a negative value, which bypasses a check in (1) test_oxm and (2) decrunch_oxm functions in misc/oxm.c, leading to a buffer overflow. |
| CVE-2008-0963 | High | 2008-04-14 | Not applicable | No public exploit | Format string vulnerability in EMC DiskXtender MediaStor 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted message to the RPC interface. |
| CVE-2008-0962 | High | 2008-04-14 | Not applicable | No public exploit | Stack-based buffer overflow in the File System Manager for EMC DiskXtender 6.20.060 allows remote authenticated users to execute arbitrary code via a crafted request to the RPC interface. |
| CVE-2008-0961 | Critical | 2008-04-14 | Not applicable | No public exploit | EMV DiskXtender 6.20.060 has a hard-coded login and password, which allows remote attackers to bypass authentication via the RPC interface. |
| CVE-2007-6360 | High | 2007-12-15 | Not applicable | No public exploit | Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050 on SPARC Enterprise M4000, M5000, M8000, and M9000 servers allows remote attackers to cause a denial of service (reboot) via (1) telnet, (2) ssh, or (3) http network traffic that triggers memory exhaustion. |
| CVE-2007-2923 | High | 2007-06-18 | Not applicable | No public exploit | The launch method in the LocalExec ActiveX control (LocalExec.ocx) in Novell exteNd Director 4.1 and Portal Services allows remote attackers to execute arbitrary commands. |
| CVE-2007-3045 | Medium | 2007-06-05 | Not applicable | No public exploit | Unspecified vulnerability in Hitachi TP1/NET/OSI-TP-Extended on HI-UX/WE2 before 20070213, and on HP-UX before 20070314, allows remote attackers to cause a denial of service via certain data to a port. |
| CVE-2006-5608 | High | 2006-10-30 | Not applicable | No public exploit | SQL injection vulnerability in Extended Tracker (xtracker) 4.7 before 1.5.2.1 for Drupal allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to "parameters from URLs." |
| CVE-2006-5254 | High | 2006-10-12 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in registration_detailed.inc.php in Mark Van Bellen Detailed User Registration (com_registration_detailed), aka regdetailed, 4.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. |
| CVE-2005-4437 | High | 2005-12-21 | Not applicable | No public exploit | MD5 Neighbor Authentication in Extended Interior Gateway Routing Protocol (EIGRP) 1.2, as implemented in Cisco IOS 11.3 and later, does not include the Message Authentication Code (MAC) in the checksum, which allows remote attackers to sniff message hashes and (1) replay EIGRP HELLO messages or (2) cause a denial of service by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network. |
| CVE-2004-2490 | Medium | 2004-12-31 | Not applicable | No public exploit | Buffer overflow in IBM Informix Dynamic Server (IDS) 9.40.xC1 and 9.40.xC2 allows local users to execute arbitrary code via a long GL_PATH environment variable. |
| CVE-2004-2319 | Low | 2004-12-31 | Not applicable | No public exploit | IBM Informix Dynamic Server (IDS) before 9.40.xC3 allows local users to (1) create or overwrite files via the /001 log file to onedcu or (2) read arbitrary files via a symlink attack on a file in /tmp to onshowaudit. |
| CVE-2004-2131 | High | 2004-01-27 | Not applicable | Working exploit published | Stack-based buffer overflow in ontape for IBM Informix Dynamic Server (IDS) 9.40.xC3 and earlier allows local users, with DSA privileges, to execute arbitrary code via a long ONCONFIG environment variable. |
| CVE-2002-2208 | High | 2002-12-31 | Not applicable | No public exploit | Extended Interior Gateway Routing Protocol (EIGRP), as implemented in Cisco IOS 11.3 through 12.2 and other products, allows remote attackers to cause a denial of service (flood) by sending a large number of spoofed EIGRP neighbor announcements, which results in an ARP storm on the local network. |