WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product suse linux enterprise server✕
Overview 230 matches · 5 in Waratek scope · 1 protected · 8 exploited · 2 CISA KEV · 29 public PoC · 9 EPSS ≥ 0.5
230matches 5in Waratek scope2.2% 1protected0.4% 8exploited3.5% 2CISA KEV0.9% 29public PoC12.6% 9EPSS ≥ 0.53.9%
Protected by Waratek 1 0.4% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 4 1.7% Outside Waratek scope 13 5.7% Not applicable 212 92.2% Withdrawn CVE 0 0.0%
Critical 28 12.2% High 107 46.5% Medium 81 35.2% Low 14 6.1% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 0.4% partly blocked 0 0.0% not blocked 229 99.6% not established 0 0.0% unrecorded 0 0.0%
Exploited 8 3.5% Working exploit published 18 7.8% Proof of concept only 3 1.3% Forecast only 0 0.0% No public exploit 201 87.4%
split by peak 52 / year
Not applicable: 212Outside Waratek scope: 13No exploit published: 4Protected by Waratek: 1 Low: 14Medium: 81High: 107Critical: 28 not blocked: 229blocked by ARMR today: 1 No public exploit: 201Proof of concept only: 3Working exploit published: 18Exploited: 8
20084 Not applicable4 High2 Medium2 not blocked4 No public exploit4 20094 Not applicable4 High2 Medium2 not blocked4 Exploited1 Working exploit published1 No public exploit2 201016 Not applicable16 High10 Medium5 Low1 not blocked16 Exploited1 No public exploit15 20110 20125 Not applicable5 High2 Medium2 Low1 not blocked5 Proof of concept only1 No public exploit4 20139 Not applicable9 Critical6 High1 Medium1 Low1 not blocked9 No public exploit9 201448 Outside Waratek scope1 Not applicable47 Critical9 High20 Medium15 Low4 not blocked48 Exploited3 Working exploit published2 Proof of concept only1 No public exploit42 201541 No exploit published2 Outside Waratek scope9 Not applicable30 High23 Medium15 Low3 not blocked41 Working exploit published1 Proof of concept only1 No public exploit39 201652 Protected by Waratek1 No exploit published2 Outside Waratek scope1 Not applicable48 Critical7 High19 Medium25 Low1 blocked by ARMR today1 not blocked51 Exploited2 Working exploit published11 No public exploit39 201724 Not applicable24 Critical5 High14 Medium4 Low1 not blocked24 Working exploit published1 No public exploit23 201810 Outside Waratek scope1 Not applicable9 Critical1 High5 Medium3 Low1 not blocked10 Exploited1 Working exploit published1 No public exploit8 20192 Not applicable2 High2 not blocked2 No public exploit2 202015 Outside Waratek scope1 Not applicable14 High7 Medium7 Low1 not blocked15 Working exploit published1 No public exploit14
2008201020122014201620182020
230 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2011-1585 Low 2013-06-08 Not applicable No public exploit The cifs_find_smb_ses function in fs/cifs/connect.c in the Linux kernel before 2.6.36 does not properly determine the associations between users and sessions, which allows local users to bypass CIFS share authentication by leveraging a mount of a share by a different user.
CVE-2012-5830 High 2012-11-21 Not applicable No public exploit Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderbird before 17.0, Thunderbird ESR 10.x before 10.0.11, and SeaMonkey before 2.14 on Mac OS X allows remote attackers to execute arbitrary code via an HTML document.
CVE-2011-4914 Medium 2012-06-21 Not applicable No public exploit The ROSE protocol implementation in the Linux kernel before 2.6.39 does not verify that certain data-length values are consistent with the amount of data sent, which might allow remote attackers to obtain sensitive information from kernel memory or cause a denial of service (out-of-bounds read) via crafted data to a ROSE socket.
CVE-2011-4913 High 2012-06-21 Not applicable No public exploit The rose_parse_ccitt function in net/rose/rose_subr.c in the Linux kernel before 2.6.39 does not validate the FAC_CCITT_DEST_NSAP and FAC_CCITT_SRC_NSAP fields, which allows remote attackers to (1) cause a denial of service (integer underflow, heap memory corruption, and panic) via a small length value in data sent to a ROSE socket, or (2) conduct stack-based buffer overflow attacks via a large length value in data sent to a ROSE socket.
CVE-2012-2313 Low 2012-06-13 Not applicable No public exploit The rio_ioctl function in drivers/net/ethernet/dlink/dl2k.c in the Linux kernel before 3.3.7 does not restrict access to the SIOCSMIIREG command, which allows local users to write data to an Ethernet adapter via an ioctl call.
CVE-2011-3026 Medium 2012-02-16 Not applicable Proof of concept only Integer overflow in libpng, as used in Google Chrome before 17.0.963.56, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an integer truncation.
CVE-2010-3881 Low 2010-12-23 Not applicable No public exploit arch/x86/kvm/x86.c in the Linux kernel before 2.6.36.2 does not initialize certain structure members, which allows local users to obtain potentially sensitive information from kernel stack memory via read operations on the /dev/kvm device.
CVE-2010-4494 High 2010-12-07 Not applicable No public exploit Double free vulnerability in libxml2 2.7.8 and other versions, as used in Google Chrome before 8.0.552.215 and other products, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to XPath handling.
CVE-2010-4008 Medium 2010-11-17 Not applicable No public exploit libxml2 before 2.7.8, as used in Google Chrome before 7.0.517.44, Apple Safari 5.0.2 and earlier, and other products, reads from invalid memory locations during processing of malformed XPath expressions, which allows context-dependent attackers to cause a denial of service (application crash) via a crafted XML document.
CVE-2010-2537 High 2010-09-30 Not applicable No public exploit The btrfs_ioctl_clone function in fs/btrfs/ioctl.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a (1) BTRFS_IOC_CLONE or (2) BTRFS_IOC_CLONE_RANGE ioctl call that specifies this file as a donor.
CVE-2010-3081 High 2010-09-24 Not applicable Exploited The compat_alloc_user_space functions in include/asm/compat.h files in the Linux kernel before 2.6.36-rc4-git2 on 64-bit platforms do not properly allocate the userspace memory required for the 32-bit compatibility layer, which allows local users to gain privileges by leveraging the ability of the compat_mc_getsockopt function (aka the MCAST_MSFILTER getsockopt support) to control a certain length value, related to a "stack pointer underflow" issue, as exploited in the wild in September 2010.
CVE-2010-3078 Medium 2010-09-21 Not applicable No public exploit The xfs_ioc_fsgetxattr function in fs/xfs/linux-2.6/xfs_ioctl.c in the Linux kernel before 2.6.36-rc4 does not initialize a certain structure member, which allows local users to obtain potentially sensitive information from kernel stack memory via an ioctl call.
CVE-2010-2942 Medium 2010-09-21 Not applicable No public exploit The actions implementation in the network queueing functionality in the Linux kernel before 2.6.36-rc2 does not properly initialize certain structure members when performing dump operations, which allows local users to obtain potentially sensitive information from kernel memory via vectors related to (1) the tcf_gact_dump function in net/sched/act_gact.c, (2) the tcf_mirred_dump function in net/sched/act_mirred.c, (3) the tcf_nat_dump function in net/sched/act_nat.c, (4) the tcf_simp_dump function in net/sched/act_simple.c, and (5) the tcf_skbedit_dump function in net/sched/act_skbedit.c.
CVE-2010-2960 High 2010-09-08 Not applicable No public exploit The keyctl_session_to_parent function in security/keys/keyctl.c in the Linux kernel 2.6.35.4 and earlier expects that a certain parent session keyring exists, which allows local users to cause a denial of service (NULL pointer dereference and system crash) or possibly have unspecified other impact via a KEYCTL_SESSION_TO_PARENT argument to the keyctl function.
CVE-2010-2798 High 2010-09-08 Not applicable No public exploit The gfs2_dirent_find_space function in fs/gfs2/dir.c in the Linux kernel before 2.6.35 uses an incorrect size value in calculations associated with sentinel directory entries, which allows local users to cause a denial of service (NULL pointer dereference and panic) and possibly have unspecified other impact by renaming a file in a GFS2 filesystem, related to the gfs2_rename function in fs/gfs2/ops_inode.c.
CVE-2010-2524 High 2010-09-08 Not applicable No public exploit The DNS resolution functionality in the CIFS implementation in the Linux kernel before 2.6.35, when CONFIG_CIFS_DFS_UPCALL is enabled, relies on a user's keyring for the dns_resolver upcall in the cifs.upcall userspace helper, which allows local users to spoof the results of DNS queries and perform arbitrary CIFS mounts via vectors involving an add_key call, related to a "cache stuffing" issue and MS-DFS referrals.
CVE-2010-2495 High 2010-09-08 Not applicable No public exploit The pppol2tp_xmit function in drivers/net/pppol2tp.c in the L2TP implementation in the Linux kernel before 2.6.34 does not properly validate certain values associated with an interface, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via vectors related to a routing change.
CVE-2010-2066 Medium 2010-09-08 Not applicable No public exploit The mext_check_arguments function in fs/ext4/move_extent.c in the Linux kernel before 2.6.35 allows local users to overwrite an append-only file via a MOVE_EXT ioctl call that specifies this file as a donor.
CVE-2010-2302 High 2010-06-15 Not applicable No public exploit Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE: this might overlap CVE-2010-1771.
CVE-2010-2301 Medium 2010-06-15 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in editing/markup.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to inject arbitrary web script or HTML via vectors related to the node.innerHTML property of a TEXTAREA element. NOTE: this might overlap CVE-2010-1762.
CVE-2010-2297 High 2010-06-15 Not applicable No public exploit rendering/FixedTableLayout.cpp in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an HTML document that has a large colspan attribute within a table.
CVE-2010-1770 High 2010-06-11 Not applicable No public exploit WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a "type checking issue."
CVE-2009-3547 High 2009-11-04 Not applicable Exploited Multiple race conditions in fs/pipe.c in the Linux kernel before 2.6.32-rc6 allow local users to cause a denial of service (NULL pointer dereference and system crash) or gain privileges by attempting to open an anonymous pipe via a /proc/*/fd/ pathname.
CVE-2009-3621 Medium 2009-10-22 Not applicable Working exploit published net/unix/af_unix.c in the Linux kernel 2.6.31.4 and earlier allows local users to cause a denial of service (system hang) by creating an abstract-namespace AF_UNIX listening socket, performing a shutdown operation on this socket, and then performing a series of connect operations to this socket.
CVE-2009-3289 High 2009-09-22 Not applicable No public exploit The g_file_copy function in glib 2.0 sets the permissions of a target file to the permissions of a symbolic link (777), which allows user-assisted local users to modify files of other users, as demonstrated by using Nautilus to modify the permissions of the user home directory.
CVE-2009-2707 Medium 2009-09-18 Not applicable No public exploit Unspecified vulnerability in ia32el (aka the IA 32 emulation functionality) before 7042_7022-0.4.2 in SUSE Linux Enterprise (SLE) 10 SP2 on Itanium IA64 machines allows local users to cause a denial of service (system crash) via a 32-bit x86 application.
CVE-2007-6716 Medium 2008-09-04 Not applicable No public exploit fs/direct-io.c in the dio subsystem in the Linux kernel before 2.6.23 does not properly zero out the dio struct, which allows local users to cause a denial of service (OOPS), as demonstrated by a certain fio test.
CVE-2008-3275 Medium 2008-08-12 Not applicable No public exploit The (1) real_lookup and (2) __lookup_hash functions in fs/namei.c in the vfs implementation in the Linux kernel before 2.6.25.15 do not prevent creation of a child dentry for a deleted (aka S_DEAD) directory, which allows local users to cause a denial of service ("overflow" of the UBIFS orphan area) via a series of attempted file creations within deleted directories.
CVE-2008-2931 High 2008-07-09 Not applicable No public exploit The do_change_type function in fs/namespace.c in the Linux kernel before 2.6.22 does not verify that the caller has the CAP_SYS_ADMIN capability, which allows local users to gain privileges or cause a denial of service by modifying the properties of a mountpoint.
CVE-2008-2812 High 2008-07-09 Not applicable No public exploit The Linux kernel before 2.6.25.10 does not properly perform tty operations, which allows local users to cause a denial of service (system crash) or possibly gain privileges via vectors involving NULL pointer dereference of function pointers in (1) hamradio/6pack.c, (2) hamradio/mkiss.c, (3) irda/irtty-sir.c, (4) ppp_async.c, (5) ppp_synctty.c, (6) slip.c, (7) wan/x25_asy.c, and (8) wireless/strip.c in drivers/net/.
‹ prev page 3 of 3 next ›