WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor facebook✕
Overview 128 matches · 1 in Waratek scope · 0 protected · 3 exploited · 2 CISA KEV · 10 public PoC · 4 EPSS ≥ 0.5
128matches 1in Waratek scope0.8% 0protected0.0% 3exploited2.3% 2CISA KEV1.6% 10public PoC7.8% 4EPSS ≥ 0.53.1%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 0.8% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 127 99.2% Withdrawn CVE 0 0.0%
Critical 55 43.0% High 54 42.2% Medium 19 14.8% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 128 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 2.3% Working exploit published 3 2.3% Proof of concept only 5 3.9% Forecast only 0 0.0% No public exploit 117 91.4%
split by peak 29 / year
Not applicable: 127Mitigation candidate: 1 Medium: 19High: 54Critical: 55 not blocked: 128 No public exploit: 117Proof of concept only: 5Working exploit published: 3Exploited: 3
20082 Not applicable2 High2 not blocked2 Working exploit published2 20090 20100 20110 20120 20130 20146 Not applicable6 High2 Medium4 not blocked6 No public exploit6 20151 Not applicable1 Medium1 not blocked1 No public exploit1 20160 20176 Not applicable6 Critical6 not blocked6 No public exploit6 201810 Not applicable10 Critical4 High4 Medium2 not blocked10 No public exploit10 201929 Not applicable29 Critical15 High13 Medium1 not blocked29 No public exploit29 202016 Not applicable16 Critical5 High10 Medium1 not blocked16 No public exploit16 202125 Not applicable25 Critical11 High11 Medium3 not blocked25 Working exploit published1 No public exploit24 20228 Not applicable8 Critical5 High1 Medium2 not blocked8 Proof of concept only1 No public exploit7 202316 Mitigation candidate1 Not applicable15 Critical8 High6 Medium2 not blocked16 Exploited1 Proof of concept only1 No public exploit14 20241 Not applicable1 High1 not blocked1 No public exploit1 20256 Not applicable6 Critical1 High2 Medium3 not blocked6 Exploited2 Proof of concept only2 No public exploit2 20262 Not applicable2 High2 not blocked2 Proof of concept only1 No public exploit1
2008201020122014201620182020202220242026
128 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2019-3557 Critical 2019-01-15 Not applicable No public exploit The implementations of streams for bz2 and php://output improperly implemented their readImpl functions, returning -1 consistently. This behavior caused some stream functions, such as stream_get_line, to trigger an out-of-bounds read when operating on such malformed streams. The implementations were updated to return valid values consistently. This affects all supported versions of HHVM (3.30 and 3.27.4 and below).
CVE-2019-3554 Medium 2019-01-15 Not applicable No public exploit Wangle's AcceptRoutingHandler incorrectly casts a socket when accepting a TLS 1.3 connection, leading to a potential denial of service attack against systems accepting such connections. This affects versions of Wangle prior to v2019.01.14.00
CVE-2018-6345 Critical 2019-01-15 Not applicable No public exploit The function number_format is vulnerable to a heap overflow issue when its second argument ($dec_points) is excessively large. The internal implementation of the function will cause a string to be created with an invalid length, which can then interact poorly with other functions. This affects all supported versions of HHVM (3.30.1 and 3.27.5 and below).
CVE-2018-6343 High 2018-12-31 Not applicable No public exploit Proxygen fails to validate that a secondary auth manager is set before dereferencing it. That can cause a denial of service issue when parsing a Certificate/CertificateRequest HTTP2 Frame over a fizz (TLS 1.3) transport. This issue affects Proxygen releases starting from v2018.10.29.00 until the fix in v2018.11.19.00.
CVE-2018-6342 Critical 2018-12-31 Not applicable No public exploit react-dev-utils on Windows allows developers to run a local webserver for accepting various commands, including a command to launch an editor. The input to that command was not properly sanitized, allowing an attacker who can make a network request to the server (either via CSRF or by direct request) to execute arbitrary commands on the targeted system. This issue affects multiple branches: 1.x.x prior to 1.0.4, 2.x.x prior to 2.0.2, 3.x.x prior to 3.1.2, 4.x.x prior to 4.2.2, and 5.x.x prior to 5.0.2.
CVE-2018-6341 Medium 2018-12-31 Not applicable No public exploit React applications which rendered to HTML using the ReactDOMServer API were not escaping user-supplied attribute names at render-time. That lack of escaping could lead to a cross-site scripting vulnerability. This issue affected minor releases 16.0.x, 16.1.x, 16.2.x, 16.3.x, and 16.4.x. It was fixed in 16.0.1, 16.1.2, 16.2.1, 16.3.3, and 16.4.2.
CVE-2018-6340 High 2018-12-31 Not applicable No public exploit The Memcache::getextendedstats function can be used to trigger an out-of-bounds read. Exploiting this issue requires control over memcached server hostnames and/or ports. This affects all supported versions of HHVM (3.30 and 3.27.4 and below).
CVE-2018-6337 High 2018-12-31 Not applicable No public exploit folly::secureRandom will re-use a buffer between parent and child processes when fork() is called. That will result in multiple forked children producing repeat (or similar) results. This affects HHVM 3.26 prior to 3.26.3 and the folly library between v2017.12.11.00 and v2018.08.09.00.
CVE-2018-6335 High 2018-12-31 Not applicable No public exploit A Malformed h2 frame can cause 'std::out_of_range' exception when parsing priority meta data. This behavior can lead to denial-of-service. This affects all supported versions of HHVM (3.25.2, 3.24.6, and 3.21.10 and below) when using the proxygen server to handle HTTP2 requests.
CVE-2018-6334 Critical 2018-12-31 Not applicable No public exploit Multipart-file uploads call variables to be improperly registered in the global scope. In cases where variables are not declared explicitly before being used this can lead to unexpected behavior. This affects all supported versions of HHVM prior to the patch (3.25.1, 3.24.5, and 3.21.9 and below).
CVE-2018-6333 Critical 2018-12-31 Not applicable No public exploit The hhvm-attach deep link handler in Nuclide did not properly sanitize the provided hostname parameter when rendering. As a result, a malicious URL could be used to render HTML and other content inside of the editor's context, which could potentially be chained to lead to code execution. This issue affected Nuclide prior to v0.290.0.
CVE-2018-6331 Critical 2018-12-31 Not applicable No public exploit Buck parser-cache command loads/saves state using Java serialized object. If the state information is maliciously crafted, deserializing it could lead to code execution. This issue affects Buck versions prior to v2018.06.25.01.
CVE-2018-6332 Medium 2018-12-03 Not applicable No public exploit A potential denial-of-service issue in the Proxygen handling of invalid HTTP2 settings which can cause the server to spend disproportionate resources. This affects all supported versions of HHVM (3.24.3 and 3.21.7 and below) when using the proxygen server to handle HTTP2 requests.
CVE-2016-6875 Critical 2017-02-17 Not applicable No public exploit Infinite recursion in wddx in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
CVE-2016-6874 Critical 2017-02-17 Not applicable No public exploit The array_*_recursive functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, related to recursion.
CVE-2016-6873 Critical 2017-02-17 Not applicable No public exploit Self recursion in compact in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
CVE-2016-6872 Critical 2017-02-17 Not applicable No public exploit Integer overflow in StringUtil::implode in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
CVE-2016-6871 Critical 2017-02-17 Not applicable No public exploit Integer overflow in bcmath in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors, which triggers a buffer overflow.
CVE-2016-6870 Critical 2017-02-17 Not applicable No public exploit Out-of-bounds write in the (1) mb_detect_encoding, (2) mb_send_mail, and (3) mb_detect_order functions in Facebook HHVM before 3.15.0 allows attackers to have unspecified impact via unknown vectors.
CVE-2014-9714 Medium 2015-04-13 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in the WddxPacket::recursiveAddVar function in HHVM (aka the HipHop Virtual Machine) before 3.5.0 allows remote attackers to inject arbitrary web script or HTML via a crafted string to the wddx_serialize_value function.
CVE-2014-6229 Medium 2014-12-28 Not applicable No public exploit The HashContext class in hphp/runtime/ext/ext_hash.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 incorrectly expects that a certain key string uses '\0' for termination, which allows remote attackers to obtain sensitive information by leveraging read access beyond the end of the string, and makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging truncation of a string containing an internal '\0' character.
CVE-2014-6228 High 2014-12-28 Not applicable No public exploit Integer overflow in the string_chunk_split function in hphp/runtime/base/zend-string.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via crafted arguments to the chunk_split function.
CVE-2014-5386 Medium 2014-12-28 Not applicable No public exploit The mcrypt_create_iv function in hphp/runtime/ext/mcrypt/ext_mcrypt.cpp in Facebook HipHop Virtual Machine (HHVM) before 3.3.0 does not seed the random number generator, which makes it easier for remote attackers to defeat cryptographic protection mechanisms by leveraging the use of a single initialization vector.
CVE-2014-2209 Medium 2014-12-28 Not applicable No public exploit Facebook HipHop Virtual Machine (HHVM) before 3.1.0 does not drop supplemental group memberships within hphp/util/capability.cpp and hphp/util/light-process.cpp, which allows remote attackers to bypass intended access restrictions by leveraging group permissions for a file or directory.
CVE-2014-2208 High 2014-12-28 Not applicable No public exploit CRLF injection vulnerability in the LightProcess protocol implementation in hphp/util/light-process.cpp in Facebook HipHop Virtual Machine (HHVM) before 2.4.2 allows remote attackers to execute arbitrary commands by entering a \n (newline) character before the end of a string.
CVE-2014-6392 Medium 2014-09-15 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in the Facebook app 14.0 and the Facebook Messenger app 10.0 for iOS allows remote attackers to inject arbitrary web script or HTML via a crafted filename extension that is improperly handled during MIME sniffing of chat traffic. NOTE: the vendor disputes the significance of this report, because the user must accept an interstitial warning before the HTML file content is rendered, and because the HTML content's origin is a sandbox domain
CVE-2008-5711 High 2008-12-24 Not applicable Working exploit published Heap-based buffer overflow in the Facebook PhotoUploader ActiveX control 5.0.14.0 and earlier allows remote attackers to execute arbitrary code via a long FileMask property value.
CVE-2008-0660 High 2008-02-08 Not applicable Working exploit published Multiple stack-based buffer overflows in Aurigma Image Uploader ActiveX control (ImageUploader4.ocx) 4.6.17.0, 4.5.70.0, and 4.5.126.0, and ImageUploader5 5.0.10.0, as used by Facebook PhotoUploader 4.5.57.0, allow remote attackers to execute arbitrary code via long (1) ExtractExif and (2) ExtractIptc properties.
‹ prev page 2 of 2 next ›