WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product milo✕
Overview 205 matches · 1 in Waratek scope · 0 protected · 6 exploited · 1 CISA KEV · 7 public PoC · 3 EPSS ≥ 0.5
205matches 1in Waratek scope0.5% 0protected0.0% 6exploited2.9% 1CISA KEV0.5% 7public PoC3.4% 3EPSS ≥ 0.51.5%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 0.5% Outside Waratek scope 0 0.0% Not applicable 204 99.5% Withdrawn CVE 0 0.0%
Critical 21 10.2% High 103 50.2% Medium 79 38.5% Low 2 1.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 205 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 6 2.9% Working exploit published 3 1.5% Proof of concept only 31 15.1% Forecast only 0 0.0% No public exploit 165 80.5%
split by peak 124 / year
Not applicable: 204No exploit published: 1 Low: 2Medium: 79High: 103Critical: 21 not blocked: 205 No public exploit: 165Proof of concept only: 31Working exploit published: 3Exploited: 6
20131 Not applicable1 Medium1 not blocked1 Working exploit published1 20140 20151 Not applicable1 Medium1 not blocked1 No public exploit1 20160 20170 20184 Not applicable4 Critical1 High1 Medium2 not blocked4 No public exploit4 20195 Not applicable5 Critical1 High1 Medium3 not blocked5 No public exploit5 20205 Not applicable5 High1 Medium4 not blocked5 No public exploit5 202114 Not applicable14 Critical2 High3 Medium9 not blocked14 Exploited2 Working exploit published2 No public exploit10 202210 No exploit published1 Not applicable9 Critical1 High6 Medium3 not blocked10 Proof of concept only1 No public exploit9 202334 Not applicable34 Critical5 High8 Medium20 Low1 not blocked34 Exploited3 Proof of concept only1 No public exploit30 20247 Not applicable7 High3 Medium4 not blocked7 Proof of concept only5 No public exploit2 20250 2026124 Not applicable124 Critical11 High80 Medium32 Low1 not blocked124 Exploited1 Proof of concept only24 No public exploit99
2014201620182020202220242026
205 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2018-20328 Medium 2018-12-21 Not applicable No public exploit Chamilo LMS version 1.11.8 contains XSS in main/social/group_view.php in the social groups tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.
CVE-2018-20327 Medium 2018-12-21 Not applicable No public exploit Chamilo LMS version 1.11.8 contains XSS in main/template/default/admin/gradebook_list.tpl in the gradebook dependencies tool, allowing authenticated users to affect other users, under specific conditions of permissions granted by administrators. This is considered "low risk" due to the nature of the feature it exploits.
CVE-2018-1999019 Critical 2018-07-23 Not applicable No public exploit Chamilo LMS version 11.x contains an Unserialization vulnerability in the "hash" GET parameter for the api endpoint located at /webservices/api/v2.php that can result in Unauthenticated remote code execution. This attack appear to be exploitable via a simple GET request to the api endpoint. This vulnerability appears to have been fixed in After commit 0de84700648f098c1fbf6b807dee28ec640efe62.
CVE-2015-5503 Medium 2015-08-18 Not applicable No public exploit Open redirect vulnerability in the Chamilo integration module 7.x-1.x before 7.x-1.2 for Drupal allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters.
CVE-2013-6787 Medium 2013-12-05 Not applicable Working exploit published SQL injection vulnerability in the check_user_password function in main/auth/profile.php in Chamilo LMS 1.9.6 and earlier, when using the non-encrypted passwords mode set at installation, allows remote authenticated users to execute arbitrary SQL commands via the "password0" parameter.
‹ prev page 3 of 3 next ›