WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product json✕
Overview 207 matches · 39 in Waratek scope · 6 protected · 3 exploited · 0 CISA KEV · 5 public PoC · 1 EPSS ≥ 0.5
207matches 39in Waratek scope18.8% 6protected2.9% 3exploited1.4% 0CISA KEV0.0% 5public PoC2.4% 1EPSS ≥ 0.50.5%
Protected by Waratek 6 2.9% Rule in development 0 0.0% Mitigation candidate 1 0.5% No exploit published 32 15.5% Outside Waratek scope 3 1.4% Not applicable 164 79.2% Withdrawn CVE 1 0.5%
Critical 54 26.1% High 97 46.9% Medium 54 26.1% Low 1 0.5% None 0 0.0% Unknown 1 0.5%
blocked by ARMR today 6 2.9% partly blocked 0 0.0% not blocked 201 97.1% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 1.4% Working exploit published 1 0.5% Proof of concept only 56 27.1% Forecast only 0 0.0% No public exploit 147 71.0%
split by peak 40 / year
Withdrawn CVE: 1Not applicable: 164Outside Waratek scope: 3No exploit published: 32Mitigation candidate: 1Protected by Waratek: 6 Unknown: 1Low: 1Medium: 54High: 97Critical: 54 not blocked: 201blocked by ARMR today: 6 No public exploit: 147Proof of concept only: 56Working exploit published: 1Exploited: 3
20102 Not applicable2 Medium2 not blocked2 No public exploit2 20110 20120 20131 Not applicable1 High1 not blocked1 No public exploit1 20142 Not applicable2 Medium2 not blocked2 No public exploit2 20151 Not applicable1 Medium1 not blocked1 No public exploit1 20161 Not applicable1 High1 not blocked1 No public exploit1 20174 Not applicable4 High2 Medium2 not blocked4 No public exploit4 201815 No exploit published2 Outside Waratek scope1 Not applicable12 Critical4 High10 Medium1 not blocked15 Exploited1 Proof of concept only1 No public exploit13 20199 Protected by Waratek1 Not applicable8 Critical3 High5 Medium1 blocked by ARMR today1 not blocked8 No public exploit9 202018 Protected by Waratek2 No exploit published1 Not applicable15 Critical7 High10 Medium1 blocked by ARMR today2 not blocked16 No public exploit18 202140 Protected by Waratek2 No exploit published2 Not applicable35 Withdrawn CVE1 Critical11 High12 Medium16 Unknown1 blocked by ARMR today2 not blocked38 Working exploit published1 No public exploit39 202228 Mitigation candidate1 No exploit published3 Not applicable24 Critical11 High10 Medium7 not blocked28 Proof of concept only11 No public exploit17 202339 No exploit published18 Outside Waratek scope1 Not applicable20 Critical9 High24 Medium6 not blocked39 Proof of concept only21 No public exploit18 202413 No exploit published1 Not applicable12 Critical4 High6 Medium3 not blocked13 Proof of concept only7 No public exploit6 202513 No exploit published1 Not applicable12 Critical2 High5 Medium5 Low1 not blocked13 Proof of concept only7 No public exploit6 202621 Protected by Waratek1 No exploit published4 Outside Waratek scope1 Not applicable15 Critical3 High11 Medium7 blocked by ARMR today1 not blocked20 Exploited2 Proof of concept only9 No public exploit10
201020122014201620182020202220242026
207 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2016-2537 High 2016-02-23 Not applicable No public exploit The is-my-json-valid package before 2.12.4 for Node.js has an incorrect exports['utc-millisec'] regular expression, which allows remote attackers to cause a denial of service (blocked event loop) via a crafted string.
CVE-2015-4590 Medium 2015-06-22 Not applicable No public exploit The extractFrom function in Internals/QuotedString.cpp in Arduino JSON before 4.5 allows remote attackers to cause a denial of service (crash) via a JSON string with a \ (backslash) followed by a terminator, as demonstrated by "\\\0", which triggers a buffer overflow and over-read.
CVE-2013-6371 Medium 2014-04-22 Not applicable No public exploit The hash functionality in json-c before 0.12 allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted JSON data, involving collisions.
CVE-2013-6370 Medium 2014-04-22 Not applicable No public exploit Buffer overflow in the printbuf APIs in json-c before 0.12 allows remote attackers to cause a denial of service via unspecified vectors.
CVE-2013-0269 High 2013-02-13 Not applicable No public exploit The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service (resource consumption) or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain internal objects, as demonstrated by conducting a SQL injection attack against Ruby on Rails, aka "Unsafe Object Creation Vulnerability."
CVE-2010-1666 Medium 2010-07-02 Not applicable No public exploit Buffer overflow in Dan Pascu python-cjson 1.0.5, when UCS-4 encoding is enabled, allows context-dependent attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors involving crafted Unicode input to the cjson.encode function.
CVE-2009-4924 Medium 2010-07-02 Not applicable No public exploit Dan Pascu python-cjson 1.0.5 does not properly handle a ['/'] argument to cjson.encode, which makes it easier for remote attackers to conduct certain cross-site scripting (XSS) attacks involving Firefox and the end tag of a SCRIPT element.
‹ prev page 3 of 3 next ›