WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor amazon✕
Overview 202 matches · 18 in Waratek scope · 3 protected · 3 exploited · 2 CISA KEV · 3 public PoC · 3 EPSS ≥ 0.5
202matches 18in Waratek scope8.9% 3protected1.5% 3exploited1.5% 2CISA KEV1.0% 3public PoC1.5% 3EPSS ≥ 0.51.5%
Protected by Waratek 3 1.5% Rule in development 0 0.0% Mitigation candidate 1 0.5% No exploit published 14 6.9% Outside Waratek scope 0 0.0% Not applicable 184 91.1% Withdrawn CVE 0 0.0%
Critical 20 9.9% High 104 51.5% Medium 75 37.1% Low 3 1.5% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 3 1.5% partly blocked 0 0.0% not blocked 199 98.5% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 1.5% Working exploit published 0 0.0% Proof of concept only 5 2.5% Forecast only 0 0.0% No public exploit 194 96.0%
split by peak 51 / year
Not applicable: 184No exploit published: 14Mitigation candidate: 1Protected by Waratek: 3 Low: 3Medium: 75High: 104Critical: 20 not blocked: 199blocked by ARMR today: 3 No public exploit: 194Proof of concept only: 5Exploited: 3
20127 No exploit published1 Not applicable6 High3 Medium4 not blocked7 No public exploit7 20130 20141 Not applicable1 Medium1 not blocked1 No public exploit1 20150 20160 20175 Not applicable5 Critical1 High3 Medium1 not blocked5 No public exploit5 201827 Not applicable27 High13 Medium13 Low1 not blocked27 No public exploit27 201914 Not applicable14 Critical4 High8 Medium2 not blocked14 No public exploit14 20208 No exploit published1 Not applicable7 Critical1 High3 Medium3 Low1 not blocked8 No public exploit8 202121 Not applicable21 Critical6 High14 Medium1 not blocked21 No public exploit21 202220 Protected by Waratek1 No exploit published4 Not applicable15 Critical2 High12 Medium6 blocked by ARMR today1 not blocked19 Proof of concept only2 No public exploit18 202318 Mitigation candidate1 No exploit published5 Not applicable12 Critical1 High8 Medium9 not blocked18 Exploited1 No public exploit17 202418 Protected by Waratek2 No exploit published1 Not applicable15 Critical2 High7 Medium9 blocked by ARMR today2 not blocked16 Exploited1 Proof of concept only1 No public exploit16 202512 No exploit published2 Not applicable10 High3 Medium8 Low1 not blocked12 Proof of concept only1 No public exploit11 202651 Not applicable51 Critical3 High30 Medium18 not blocked51 Exploited1 Proof of concept only1 No public exploit49
20122014201620182020202220242026
202 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2012-4249 High 2012-08-12 Not applicable No public exploit The Amazon Lab126 com.lab126.system sendEvent implementation on the Kindle Touch before 5.1.2 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a string, as demonstrated by using lipc-set-prop to set an LIPC property, a different vulnerability than CVE-2012-4248.
CVE-2012-4248 High 2012-08-12 Not applicable No public exploit The Amazon Kindle Touch before 5.1.2 does not properly restrict access to the libkindleplugin.so NPAPI plugin interface, which might allow remote attackers to have an unspecified impact via vectors involving the (1) dev.log, (2) lipc.set, (3) lipc.get, or (4) todo.scheduleItems method, a different vulnerability than CVE-2012-4249.
‹ prev page 3 of 3 next ›