Overview 1,321 matches · 138 in Waratek scope · 52 protected · 35 exploited · 25 CISA KEV · 86 public PoC · 39 EPSS ≥ 0.5
1,321matches
138in Waratek scope10.4%
52protected3.9%
35exploited2.6%
25CISA KEV1.9%
86public PoC6.5%
39EPSS ≥ 0.53.0%
Protected by Waratek
52
3.9%
Rule in development
0
0.0%
Mitigation candidate
13
1.0%
No exploit published
73
5.5%
Outside Waratek scope
33
2.5%
Not applicable
1,150
87.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
52
3.9%
partly blocked
0
0.0%
not blocked
1,269
96.1%
not established
0
0.0%
unrecorded
0
0.0%
split by
peak 146 / year
19971
Not applicable1
Low1
not blocked1
No public exploit1
19980
19990
20000
20010
20021
Not applicable1
Medium1
not blocked1
No public exploit1
20035
Protected by Waratek1
No exploit published3
Not applicable1
High4
Medium1
blocked by ARMR today1
not blocked4
No public exploit5
20045
No exploit published1
Not applicable4
High3
Medium2
not blocked5
Working exploit published2
No public exploit3
200512
Not applicable12
High9
Medium2
Low1
not blocked12
Working exploit published8
No public exploit4
20065
Outside Waratek scope1
Not applicable4
High2
Medium2
Low1
not blocked5
Working exploit published2
No public exploit3
20078
Outside Waratek scope1
Not applicable7
High5
Medium3
not blocked8
No public exploit8
200810
Mitigation candidate1
Not applicable9
High6
Medium4
not blocked10
Working exploit published5
No public exploit5
200912
Not applicable12
Critical1
High4
Medium5
Low2
not blocked12
Working exploit published2
No public exploit10
201013
Not applicable13
High2
Medium11
not blocked13
No public exploit13
20115
Not applicable5
High3
Medium2
not blocked5
Working exploit published2
No public exploit3
201210
No exploit published1
Not applicable9
High3
Medium7
not blocked10
Working exploit published4
No public exploit6
20139
Protected by Waratek3
Mitigation candidate1
Not applicable5
High2
Medium7
blocked by ARMR today3
not blocked6
Working exploit published4
No public exploit5
201412
Protected by Waratek1
Not applicable11
Critical2
High2
Medium7
Low1
blocked by ARMR today1
not blocked11
Exploited3
Working exploit published1
No public exploit8
201518
Protected by Waratek1
No exploit published3
Not applicable14
Critical1
High5
Medium11
Low1
blocked by ARMR today1
not blocked17
Exploited1
Working exploit published3
No public exploit14
201630
No exploit published1
Not applicable29
Critical5
High16
Medium8
Low1
not blocked30
Exploited2
Working exploit published1
No public exploit27
201759
Protected by Waratek2
No exploit published1
Not applicable56
Critical8
High27
Medium21
Low3
blocked by ARMR today2
not blocked57
Working exploit published4
No public exploit55
2018122
Protected by Waratek2
Mitigation candidate1
No exploit published5
Outside Waratek scope3
Not applicable111
Critical13
High61
Medium45
Low3
blocked by ARMR today2
not blocked120
Exploited3
Working exploit published4
Proof of concept only2
Forecast only2
No public exploit111
2019144
Protected by Waratek18
No exploit published6
Outside Waratek scope6
Not applicable114
Critical17
High62
Medium57
Low8
blocked by ARMR today18
not blocked126
Exploited1
Working exploit published1
Proof of concept only3
Forecast only2
No public exploit137
2020146
Protected by Waratek16
Mitigation candidate7
No exploit published13
Outside Waratek scope4
Not applicable106
Critical13
High77
Medium44
Low12
blocked by ARMR today16
not blocked130
Exploited4
Working exploit published3
Proof of concept only2
No public exploit137
2021144
Protected by Waratek4
Mitigation candidate2
No exploit published16
Outside Waratek scope7
Not applicable115
Critical16
High75
Medium52
Low1
blocked by ARMR today4
not blocked140
Exploited5
Working exploit published1
Proof of concept only5
Forecast only3
No public exploit130
2022145
Protected by Waratek3
No exploit published7
Outside Waratek scope4
Not applicable131
Critical14
High60
Medium68
Low3
blocked by ARMR today3
not blocked142
Exploited3
Working exploit published2
Proof of concept only7
No public exploit133
2023103
Mitigation candidate1
No exploit published4
Outside Waratek scope1
Not applicable97
Critical8
High56
Medium39
not blocked103
Exploited5
Proof of concept only3
Forecast only1
No public exploit94
202472
No exploit published1
Outside Waratek scope5
Not applicable66
Critical7
High39
Medium26
not blocked72
Proof of concept only7
No public exploit65
2025104
No exploit published2
Outside Waratek scope1
Not applicable101
Critical14
High58
Medium29
Low3
not blocked104
Exploited1
Proof of concept only19
No public exploit84
2026126
Protected by Waratek1
No exploit published9
Not applicable116
Critical19
High65
Medium39
Low3
blocked by ARMR today1
not blocked125
Exploited7
Proof of concept only5
No public exploit114
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2025-32433 | Critical | 2025-04-16 | Outside Waratek scope | Exploited | Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules. |
| CVE-2025-27743 | High | 2025-04-08 | Not applicable | No public exploit | Untrusted search path in System Center allows an authorized attacker to elevate privileges locally. |
| CVE-2025-3136 | Medium | 2025-04-03 | Not applicable | Proof of concept only | A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0. This issue affects the function torch.cuda.memory.caching_allocator_delete of the file c10/cuda/CUDACachingAllocator.cpp. The manipulation leads to memory corruption. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. |
| CVE-2025-3121 | Medium | 2025-04-02 | Not applicable | Proof of concept only | A vulnerability classified as problematic has been found in PyTorch 2.6.0. Affected is the function torch.jit.jit_module_from_flatbuffer. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. |
| CVE-2025-3001 | Medium | 2025-03-31 | Not applicable | Proof of concept only | A vulnerability classified as critical was found in PyTorch 2.6.0. This vulnerability affects the function torch.lstm_cell. The manipulation leads to memory corruption. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. |
| CVE-2025-3000 | Medium | 2025-03-31 | Not applicable | No public exploit | A vulnerability classified as critical has been found in PyTorch 2.6.0. This affects the function torch.jit.script. The manipulation leads to memory corruption. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. |
| CVE-2025-2999 | Medium | 2025-03-31 | Not applicable | No public exploit | A vulnerability was found in PyTorch 2.6.0. It has been rated as critical. Affected by this issue is the function torch.nn.utils.rnn.unpack_sequence. The manipulation leads to memory corruption. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. |
| CVE-2025-2998 | Medium | 2025-03-31 | Not applicable | Proof of concept only | A vulnerability was found in PyTorch 2.6.0. It has been declared as critical. Affected by this vulnerability is the function torch.nn.utils.rnn.pad_packed_sequence. The manipulation leads to memory corruption. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. |
| CVE-2025-2953 | Medium | 2025-03-30 | Not applicable | Proof of concept only | A vulnerability, which was classified as problematic, has been found in PyTorch 2.6.0+cu124. Affected by this issue is the function torch.mkldnn_max_pool2d. The manipulation leads to denial of service. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. The real existence of this vulnerability is still doubted at the moment. The security policy of the project warns to use unknown models which might establish malicious effects. |
| CVE-2024-8020 | High | 2025-03-20 | Not applicable | Proof of concept only | A vulnerability in lightning-ai/pytorch-lightning version 2.3.2 allows an attacker to cause a denial of service by sending an unexpected POST request to the `/api/v1/state` endpoint of `LightningApp`. This issue occurs due to improper handling of unexpected state values, which results in the server shutting down. |
| CVE-2024-8019 | Critical | 2025-03-20 | Not applicable | Proof of concept only | In lightning-ai/pytorch-lightning version 2.3.2, a vulnerability exists in the `LightningApp` when running on a Windows host. The vulnerability occurs at the `/api/v1/upload_file/` endpoint, allowing an attacker to write or overwrite arbitrary files by providing a crafted filename. This can lead to potential remote code execution (RCE) by overwriting critical files or placing malicious files in sensitive locations. |
| CVE-2025-30196 | Medium | 2025-03-19 | No exploit published | No public exploit | Jenkins AnchorChain Plugin 1.0 does not limit URL schemes for links it creates based on workspace content, allowing the `javascript:` scheme, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control the input file for the Anchor Chain post-build step. |
| CVE-2025-2396 | High | 2025-03-17 | Not applicable | No public exploit | The U-Office Force from e-Excellence has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and execute web shell backdoors, thereby enabling arbitrary code execution on the server. |
| CVE-2025-2395 | Critical | 2025-03-17 | Not applicable | No public exploit | The U-Office Force from e-Excellence has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to use a particular API and alter cookies to log in as an administrator. |
| CVE-2025-2149 | Low | 2025-03-10 | Not applicable | Proof of concept only | A vulnerability was found in PyTorch 2.6.0+cu124. It has been rated as problematic. Affected by this issue is the function nnq_Sigmoid of the component Quantized Sigmoid Module. The manipulation of the argument scale/zero_point leads to improper initialization. The attack needs to be approached locally. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used. |
| CVE-2025-2148 | Low | 2025-03-10 | Not applicable | Proof of concept only | A vulnerability was found in PyTorch 2.6.0+cu124. It has been declared as critical. Affected by this vulnerability is the function torch.ops.profiler._call_end_callbacks_on_jit_fut of the component Tuple Handler. The manipulation of the argument None leads to memory corruption. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. |
| CVE-2025-1389 | High | 2025-02-17 | Not applicable | No public exploit | Orca HCM from Learning Digital has a SQL Injection vulnerability, allowing attackers with regular privileges to inject arbitrary SQL commands to read, modify, and delete database contents. |
| CVE-2025-1388 | High | 2025-02-17 | Not applicable | No public exploit | Orca HCM from LEARNING DIGITAL has an Arbitrary File Upload vulnerability, allowing remote attackers with regular privileges to upload and run web shells |
| CVE-2025-1387 | Critical | 2025-02-17 | Not applicable | No public exploit | Orca HCM from LEARNING DIGITAL has an Improper Authentication vulnerability, allowing unauthenticated remote attackers to log in to the system as any user. |
| CVE-2025-24497 | High | 2025-02-05 | Not applicable | No public exploit | When URL categorization is configured on a virtual server, undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2025-24320 | Medium | 2025-02-05 | Not applicable | No public exploit | A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. This vulnerability is due to an incomplete fix for CVE-2024-31156 https://my.f5.com/manage/s/article/K000138636 . Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2025-23239 | High | 2025-02-05 | Not applicable | No public exploit | When running in Appliance mode, and logged into a highly-privileged role, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2025-22891 | High | 2025-02-05 | Not applicable | No public exploit | When BIG-IP PEM Control Plane listener Virtual Server is configured with Diameter Endpoint profile, undisclosed traffic can cause the Virtual Server to stop processing new client connections and an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2025-22846 | High | 2025-02-05 | Not applicable | No public exploit | When SIP Session and Router ALG profiles are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2025-21091 | High | 2025-02-05 | Not applicable | No public exploit | When SNMP v1 or v2c are disabled on the BIG-IP, undisclosed requests can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2025-21087 | High | 2025-02-05 | Not applicable | No public exploit | When Client or Server SSL profiles are configured on a Virtual Server, or DNSSEC signing operations are in use, undisclosed traffic can cause an increase in memory and CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2025-20058 | High | 2025-02-05 | Not applicable | No public exploit | When a BIG-IP message routing profile is configured on a virtual server, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2025-20045 | High | 2025-02-05 | Not applicable | No public exploit | When SIP session Application Level Gateway mode (ALG) profile with Passthru Mode enabled and SIP router ALG profile are configured on a Message Routing type virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2025-20029 | High | 2025-02-05 | Not applicable | Proof of concept only | Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2025-21552 | Medium | 2025-01-21 | No exploit published | No public exploit | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are Prior to 9.2.9.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Orchestrator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Orchestrator accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). |
| CVE-2024-53291 | High | 2024-12-25 | Not applicable | No public exploit | Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Exposure of Sensitive Information Through Metadata vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure. |
| CVE-2024-52543 | Medium | 2024-12-25 | Not applicable | No public exploit | Dell NativeEdge, version(s) 2.1.0.0, contain(s) a Creation of Temporary File With Insecure Permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure. |
| CVE-2024-47978 | High | 2024-12-25 | Not applicable | No public exploit | Dell NativeEdge, version(s) 2.1.0.0, contain(s) an Execution with Unnecessary Privileges vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. |
| CVE-2021-1132 | High | 2024-11-18 | Outside Waratek scope | No public exploit | A vulnerability in the API subsystem and in the web-management interface of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to access sensitive data. This vulnerability exists because the web-management interface and certain HTTP-based APIs do not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to access sensitive files on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. |
| CVE-2024-49505 | Medium | 2024-11-13 | Not applicable | Proof of concept only | A Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in openSUSE Tumbleweed MirrorCache allows the execution of arbitrary JS via reflected XSS in the REGEX and P parameters. This issue affects MirrorCache before 1.083. |
| CVE-2024-49048 | High | 2024-11-12 | Not applicable | No public exploit | TorchGeo Remote Code Execution Vulnerability |
| CVE-2024-48063 | Critical | 2024-10-29 | Not applicable | Proof of concept only | In PyTorch <=2.4.1, the RemoteModule has Deserialization RCE. NOTE: this is disputed by multiple parties because this is intended behavior in PyTorch distributed computing. |
| CVE-2024-45844 | High | 2024-10-16 | Not applicable | Proof of concept only | BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2024-20491 | High | 2024-10-02 | Not applicable | No public exploit | A vulnerability in a logging function of Cisco Nexus Dashboard Insights could allow an attacker with access to a tech support file to view sensitive information. This vulnerability exists because remote controller credentials are recorded in an internal log that is stored in the tech support file. An attacker could exploit this vulnerability by accessing a tech support file that is generated from an affected system. A successful exploit could allow the attacker to view remote controller admin credentials in clear text. Note: Best practice is to store debug logs and tech support files safely and to share them only with trusted parties because they may contain sensitive information. |
| CVE-2024-20490 | High | 2024-10-02 | Not applicable | No public exploit | A vulnerability in a logging function of Cisco Nexus Dashboard Fabric Controller (NDFC) and Cisco Nexus Dashboard Orchestrator (NDO) could allow an attacker with access to a tech support file to view sensitive information. This vulnerability exists because HTTP proxy credentials could be recorded in an internal log that is stored in the tech support file. An attacker could exploit this vulnerability by accessing a tech support file that is generated from an affected system. A successful exploit could allow the attacker to view HTTP proxy server admin credentials in clear text that are configured on Nexus Dashboard to reach an external network. Note: Best practice is to store debug logs and tech support files safely and to share them only with trusted parties because they may contain sensitive information. |
| CVE-2024-20385 | Medium | 2024-10-02 | Not applicable | No public exploit | A vulnerability in the SSL/TLS implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an unauthenticated, remote attacker to intercept sensitive information from an affected device. This vulnerability exists because the Cisco NDO Validate Peer Certificate site management feature validates the certificates for Cisco Application Policy Infrastructure Controller (APIC), Cisco Cloud Network Controller (CNC), and Cisco Nexus Dashboard only when a new site is added or an existing one is reregistered. An attacker could exploit this vulnerability by using machine-in-the-middle techniques to intercept the traffic between the affected device and Cisco NDO and then using a crafted certificate to impersonate the affected device. A successful exploit could allow the attacker to learn sensitive information during communications between these devices. |
| CVE-2024-20381 | High | 2024-09-11 | Outside Waratek scope | No public exploit | A vulnerability in the JSON-RPC API feature in Cisco Crosswork Network Services Orchestrator (NSO) and ConfD that is used by the web-based management interfaces of Cisco Optical Site Manager and Cisco RV340 Dual WAN Gigabit VPN Routers could allow an authenticated, remote attacker to modify the configuration of an affected application or device. This vulnerability is due to improper authorization checks on the API. An attacker with privileges sufficient to access the affected application or device could exploit this vulnerability by sending malicious requests to the JSON-RPC API. A successful exploit could allow the attacker to make unauthorized modifications to the configuration of the affected application or device, including creating new user accounts or elevating their own privileges on an affected system. |
| CVE-2024-8585 | Medium | 2024-09-09 | Not applicable | No public exploit | Orca HCM from LEARNING DIGITA does not properly restrict a specific parameter of the file download functionality, allowing a remote attacker with regular privileges to download arbitrary system files. |
| CVE-2024-8584 | Critical | 2024-09-09 | Not applicable | No public exploit | Orca HCM from LEARNING DIGITAL has an Missing Authentication vulnerability, allowing unauthenticated remote attacker to exploit this functionality to create an account with administrator privilege and subsequently use it to log in. |
| CVE-2024-42006 | High | 2024-08-20 | Not applicable | No public exploit | Keyfactor AWS Orchestrator through 2.0 allows Information Disclosure. |
| CVE-2024-41727 | High | 2024-08-14 | Not applicable | No public exploit | In BIG-IP tenants running on r2000 and r4000 series hardware, or BIG-IP Virtual Edition (VEs) using Intel E810 SR-IOV NIC, undisclosed traffic can cause an increase in memory resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2024-41723 | Medium | 2024-08-14 | Not applicable | No public exploit | Undisclosed requests to BIG-IP iControl REST can lead to information leak of user account names. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2024-41164 | High | 2024-08-14 | Not applicable | No public exploit | When TCP profile with Multipath TCP enabled (MPTCP) is configured on a Virtual Server, undisclosed traffic along with conditions beyond the attackers control can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2024-39778 | High | 2024-08-14 | Not applicable | No public exploit | When a stateless virtual server is configured on BIG-IP system with a High-Speed Bridge (HSB), undisclosed requests can cause TMM to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2024-6987 | Medium | 2024-08-08 | Not applicable | No public exploit | The Orchid Store theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'orchid_store_activate_plugin' function in all versions up to, and including, 1.5.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to activate the Addonify Floating Cart For WooCommerce plugin if it is installed. |
| CVE-2023-38001 | Medium | 2024-07-30 | Not applicable | No public exploit | IBM Aspera Orchestrator 4.0.1 is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted from a user that the website trusts. IBM X-Force ID: 260206. |
| CVE-2023-26289 | Medium | 2024-07-30 | Not applicable | No public exploit | IBM Aspera Orchestrator 4.0.1 is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. This could allow an attacker to conduct various attacks against the vulnerable system, including cross-site scripting, cache poisoning or session hijacking. IBM X-Force ID: 248478. |
| CVE-2023-26288 | Medium | 2024-07-30 | Not applicable | No public exploit | IBM Aspera Orchestrator 4.0.1 does not invalidate session after a password change which could allow an authenticated user to impersonate another user on the system. IBM X-Force ID: 248477. |
| CVE-2024-40897 | High | 2024-07-26 | Not applicable | No public exploit | Stack-based buffer overflow vulnerability exists in orcparse.c of ORC versions prior to 0.4.39. If a developer is tricked to process a specially crafted file with the affected ORC compiler, an arbitrary code may be executed on the developer's build environment. This may lead to compromise of developer machines or CI build environments. |
| CVE-2024-41914 | Critical | 2024-07-24 | Not applicable | No public exploit | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script code in a victim's browser in the context of the affected interface. |
| CVE-2024-41136 | High | 2024-07-24 | Not applicable | No public exploit | An authenticated command injection vulnerability exists in the HPE Aruba Networking EdgeConnect SD-WAN gateways Command Line Interface. Successful exploitation of this vulnerability results in the ability to execute arbitrary commands as a privileged user on the underlying operating system. |
| CVE-2024-22444 | Medium | 2024-07-24 | Not applicable | No public exploit | A vulnerability within the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow a remote attacker to conduct a reflected cross-site scripting (XSS) attack against a user of the interface. A successful exploit could allow an attacker to execute arbitrary script code in a victims browser in the context of the affected interface. |
| CVE-2024-22443 | High | 2024-07-24 | Not applicable | No public exploit | A vulnerability in the web-based management interface of EdgeConnect SD-WAN Orchestrator could allow an authenticated remote attacker to conduct a server-side prototype pollution attack. Successful exploitation of this vulnerability could allow an attacker to execute arbitrary commands on the underlying operating system leading to complete system compromise. |
| CVE-2024-35199 | High | 2024-07-19 | Not applicable | No public exploit | TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. In affected versions the two gRPC ports 7070 and 7071, are not bound to [localhost](http://localhost/) by default, so when TorchServe is launched, these two interfaces are bound to all interfaces. Customers using PyTorch inference Deep Learning Containers (DLC) through Amazon SageMaker and EKS are not affected. This issue in TorchServe has been fixed in PR #3083. TorchServe release 0.11.0 includes the fix to address this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
| CVE-2024-35198 | Critical | 2024-07-19 | Not applicable | No public exploit | TorchServe is a flexible and easy-to-use tool for serving and scaling PyTorch models in production. TorchServe 's check on allowed_urls configuration can be by-passed if the URL contains characters such as ".." but it does not prevent the model from being downloaded into the model store. Once a file is downloaded, it can be referenced without providing a URL the second time, which effectively bypasses the allowed_urls security check. Customers using PyTorch inference Deep Learning Containers (DLC) through Amazon SageMaker and EKS are not affected. This issue in TorchServe has been fixed by validating the URL without characters such as ".." before downloading see PR #3082. TorchServe release 0.11.0 includes the fix to address this vulnerability. Users are advised to upgrade. There are no known workarounds for this vulnerability. |
| CVE-2024-21168 | Medium | 2024-07-16 | No exploit published | No public exploit | Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported versions that are affected are Prior to 9.2.8.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise JD Edwards EnterpriseOne Orchestrator. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all JD Edwards EnterpriseOne Orchestrator accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). |
| CVE-2024-37999 | High | 2024-07-08 | Not applicable | No public exploit | A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application executes as a trusted account with high privileges and network access. This could allow an authenticated local attacker to escalate privileges. |
| CVE-2024-5980 | Critical | 2024-06-27 | Not applicable | Proof of concept only | A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path traversal when extracting tar.gz files. When the LightningApp is running with the plugin_server, attackers can deploy malicious tar.gz plugins that embed arbitrary files with path traversal vulnerabilities. This can result in arbitrary files being written to any directory in the victim's local file system, potentially leading to remote code execution. |
| CVE-2024-36396 | High | 2024-06-13 | Not applicable | No public exploit | Verint - CWE-434: Unrestricted Upload of File with Dangerous Type |
| CVE-2024-36395 | Medium | 2024-06-13 | Not applicable | No public exploit | Verint - CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) |
| CVE-2024-29855 | Critical | 2024-06-11 | Not applicable | Proof of concept only | Hard-coded JWT secret allows authentication bypass in Veeam Recovery Orchestrator |
| CVE-2024-5770 | Medium | 2024-06-08 | Not applicable | No public exploit | The WP Force SSL & HTTPS SSL Redirect plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ajax_save_setting' function in versions up to, and including, 1.66. This makes it possible for authenticated attackers, subscriber-level permissions and above, to update the plugin settings. |
| CVE-2024-5452 | Critical | 2024-06-06 | Not applicable | Proof of concept only | A remote code execution (RCE) vulnerability exists in the lightning-ai/pytorch-lightning library version 2.2.1 due to improper handling of deserialized user input and mismanagement of dunder attributes by the `deepdiff` library. The library uses `deepdiff.Delta` objects to modify application state based on frontend actions. However, it is possible to bypass the intended restrictions on modifying dunder attributes, allowing an attacker to construct a serialized delta that passes the deserializer whitelist and contains dunder attributes. When processed, this can be exploited to access other modules, classes, and instances, leading to arbitrary attribute write and total RCE on any self-hosted pytorch-lightning application in its default configuration, as the delta endpoint is enabled by default. |
| CVE-2024-20389 | High | 2024-05-16 | Not applicable | No public exploit | A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system. This vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command with crafted arguments. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system with the privileges of the root user. |
| CVE-2024-20326 | High | 2024-05-16 | Not applicable | No public exploit | A vulnerability in the ConfD CLI and the Cisco Crosswork Network Services Orchestrator CLI could allow an authenticated, low-privileged, local attacker to read and write arbitrary files as root on the underlying operating system. This vulnerability is due to improper authorization enforcement when specific CLI commands are used. An attacker could exploit this vulnerability by executing an affected CLI command with crafted arguments. A successful exploit could allow the attacker to read or write arbitrary files on the underlying operating system with the privileges of the root user. |
| CVE-2024-20369 | Medium | 2024-05-15 | Outside Waratek scope | No public exploit | A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An attacker could exploit this vulnerability by persuading a user to click a crafted link. A successful exploit could allow the attacker to redirect a user to a malicious website. |
| CVE-2024-20366 | High | 2024-05-15 | Outside Waratek scope | No public exploit | A vulnerability in the Tail-f High Availability Cluster Communications (HCC) function pack of Cisco Crosswork Network Services Orchestrator (NSO) could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability exists because a user-controlled search path is used to locate executable files. An attacker could exploit this vulnerability by configuring the application in a way that causes a malicious file to be executed. A successful exploit could allow the attacker to execute arbitrary code on an affected device as the root user. To exploit this vulnerability, the attacker would need valid credentials on an affected device. |
| CVE-2024-33608 | High | 2024-05-08 | Not applicable | No public exploit | When IPsec is configured on a virtual server, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2024-33604 | Medium | 2024-05-08 | Not applicable | No public exploit | A reflected cross-site scripting (XSS) vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2024-32761 | Medium | 2024-05-08 | Not applicable | No public exploit | Under certain conditions, a data leak may occur in the Traffic Management Microkernels (TMMs) of BIG-IP tenants running on VELOS and rSeries platforms. This leak occurs randomly and cannot be deliberately triggered. If it occurs, it may leak up to 64 bytes of non-contiguous randomized bytes. Under rare conditions, this may lead to a TMM restart, affecting availability. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2024-31156 | High | 2024-05-08 | Not applicable | No public exploit | A stored cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2024-28889 | Medium | 2024-05-08 | Not applicable | No public exploit | When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2024-27202 | Medium | 2024-05-08 | Not applicable | No public exploit | A DOM-based cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2024-25560 | High | 2024-05-08 | Not applicable | No public exploit | When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2023-27283 | Medium | 2024-05-04 | Not applicable | Proof of concept only | IBM Aspera Orchestrator 4.0.1 could allow a remote attacker to enumerate usernames due to observable response discrepancies. IBM X-Force ID: 248545. |
| CVE-2023-37407 | High | 2024-05-03 | Not applicable | No public exploit | IBM Aspera Orchestrator 4.0.1 could allow a remote authenticated attacker to execute arbitrary commands on the system by sending a specially crafted request. IBM X-Force ID: 260116. |
| CVE-2024-31584 | Medium | 2024-04-19 | Not applicable | No public exploit | Pytorch before v2.2.0 has an Out-of-bounds Read vulnerability via the component torch/csrc/jit/mobile/flatbuffer_loader.cpp. |
| CVE-2024-31583 | High | 2024-04-17 | Not applicable | No public exploit | Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp. |
| CVE-2024-31580 | Medium | 2024-04-17 | Not applicable | No public exploit | PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input. |
| CVE-2024-20302 | Medium | 2024-04-03 | Not applicable | No public exploit | A vulnerability in the tenant security implementation of Cisco Nexus Dashboard Orchestrator (NDO) could allow an authenticated, remote attacker to modify or delete tenant templates on an affected system. This vulnerability is due to improper access controls within tenant security. An attacker who is using a valid user account with write privileges and either a Site Manager or Tenant Manager role could exploit this vulnerability. A successful exploit could allow the attacker to modify or delete tenant templates under non-associated tenants, which could disrupt network traffic. |
| CVE-2024-20281 | High | 2024-04-03 | Outside Waratek scope | No public exploit | A vulnerability in the web-based management interface of Cisco Nexus Dashboard and Cisco Nexus Dashboard hosted services could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected system. This vulnerability is due to insufficient CSRF protections for the web-based management interface on an affected system. An attacker could exploit this vulnerability by persuading a user to click a malicious link. A successful exploit could allow the attacker to perform arbitrary actions with the privilege level of the affected user. If the affected user has administrative privileges, these actions could include modifying the system configuration and creating new privileged accounts. Note: There are internal security mechanisms in place that limit the scope of this exploit, reducing the Security Impact Rating of this vulnerability. |
| CVE-2024-0068 | High | 2024-02-29 | Not applicable | No public exploit | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows File Manipulation.This issue affects Workforce Access: before 8.7.1. |
| CVE-2023-49508 | Medium | 2024-02-16 | Not applicable | No public exploit | Directory Traversal vulnerability in YetiForceCompany YetiForceCRM versions 6.4.0 and before allows a remote authenticated attacker to obtain sensitive information via the license parameter in the LibraryLicense.php component. |
| CVE-2024-24775 | High | 2024-02-14 | Not applicable | No public exploit | When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2024-23982 | High | 2024-02-14 | Not applicable | No public exploit | When a BIG-IP PEM classification profile is configured on a UDP virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate. This issue affects classification engines using signatures released between 09-08-2022 and 02-16-2023. See the table in the F5 Security Advisory for a complete list of affected classification signature files. NOTE: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2024-23979 | High | 2024-02-14 | Not applicable | No public exploit | When SSL Client Certificate LDAP or Certificate Revocation List Distribution Point (CRLDP) authentication profile is configured on a virtual server, undisclosed requests can cause an increase in CPU resource utilization. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2024-23976 | Medium | 2024-02-14 | Not applicable | No public exploit | When running in Appliance mode, an authenticated attacker assigned the Administrator role may be able to bypass Appliance mode restrictions utilizing iAppsLX templates on a BIG-IP system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2024-23314 | High | 2024-02-14 | Not applicable | No public exploit | When HTTP/2 is configured on BIG-IP or BIG-IP Next SPK systems, undisclosed responses can cause the Traffic Management Microkernel (TMM) to terminate. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2024-22389 | High | 2024-02-14 | Not applicable | No public exploit | When BIG-IP is deployed in high availability (HA) and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2024-22093 | High | 2024-02-14 | Not applicable | No public exploit | When running in appliance mode, an authenticated remote command injection vulnerability exists in an undisclosed iControl REST endpoint on multi-bladed systems. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2024-21782 | Medium | 2024-02-14 | Not applicable | No public exploit | BIG-IP or BIG-IQ Resource Administrators and Certificate Managers who have access to the secure copy (scp) utility but do not have access to Advanced shell (bash) can execute arbitrary commands with a specially crafted command string. This vulnerability is due to an incomplete fix for CVE-2020-5873. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2024-22022 | High | 2024-02-07 | Not applicable | No public exploit | Vulnerability CVE-2024-22022 allows a Veeam Recovery Orchestrator user that has been assigned a low-privileged role to access the NTLM hash of the service account used by the Veeam Orchestrator Server Service. |
| CVE-2024-22021 | Medium | 2024-02-07 | Not applicable | No public exploit | Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role (Plan Author) to retrieve plans from a Scope other than the one they are assigned to. |
| CVE-2023-6336 | High | 2024-01-16 | Not applicable | No public exploit | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7. |
| CVE-2023-6335 | High | 2024-01-16 | Not applicable | No public exploit | Improper Link Resolution Before File Access ('Link Following') vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7. |