WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor isc✕
Overview 247 matches · 0 in Waratek scope · 0 protected · 4 exploited · 1 CISA KEV · 26 public PoC · 20 EPSS ≥ 0.5
247matches 0in Waratek scope0.0% 0protected0.0% 4exploited1.6% 1CISA KEV0.4% 26public PoC10.5% 20EPSS ≥ 0.58.1%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 18 7.3% Not applicable 229 92.7% Withdrawn CVE 0 0.0%
Critical 3 1.2% High 136 55.1% Medium 101 40.9% Low 7 2.8% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 247 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 1.6% Working exploit published 20 8.1% Proof of concept only 3 1.2% Forecast only 13 5.3% No public exploit 207 83.8%
split by peak 36 / year
Not applicable: 229Outside Waratek scope: 18 Low: 7Medium: 101High: 136Critical: 3 not blocked: 247 No public exploit: 207Forecast only: 13Proof of concept only: 3Working exploit published: 20Exploited: 4
19961 Not applicable1 Critical1 not blocked1 No public exploit1 19975 Not applicable5 High3 Medium2 not blocked5 No public exploit5 19984 Not applicable4 High1 Medium2 Low1 not blocked4 Working exploit published2 No public exploit2 19998 Not applicable8 High6 Medium2 not blocked8 Working exploit published2 No public exploit6 20008 Not applicable8 High4 Medium3 Low1 not blocked8 Working exploit published3 No public exploit5 20016 Not applicable6 High4 Medium2 not blocked6 Working exploit published2 No public exploit4 200212 Not applicable12 High6 Medium6 not blocked12 Working exploit published3 No public exploit9 20033 Not applicable3 High1 Medium2 not blocked3 No public exploit3 20043 Not applicable3 High3 not blocked3 No public exploit3 20053 Not applicable3 High1 Medium2 not blocked3 No public exploit3 20066 Not applicable6 High2 Medium4 not blocked6 Forecast only1 No public exploit5 20076 Not applicable6 High2 Medium4 not blocked6 Working exploit published2 No public exploit4 20083 Not applicable3 High2 Medium1 not blocked3 Working exploit published1 No public exploit2 20097 Not applicable7 High2 Medium4 Low1 not blocked7 Exploited1 Working exploit published1 No public exploit5 201012 Not applicable12 High1 Medium10 Low1 not blocked12 Working exploit published1 No public exploit11 201111 Not applicable11 High5 Medium5 Low1 not blocked11 Forecast only1 No public exploit10 201213 Not applicable13 High6 Medium6 Low1 not blocked13 Working exploit published1 No public exploit12 20136 Not applicable6 High4 Medium2 not blocked6 Exploited1 No public exploit5 20145 Not applicable5 High1 Medium3 Low1 not blocked5 Forecast only1 No public exploit4 20158 Not applicable8 High5 Medium3 not blocked8 Exploited1 Forecast only1 No public exploit6 201613 Outside Waratek scope1 Not applicable12 High5 Medium8 not blocked13 Exploited1 Forecast only5 No public exploit7 20173 Outside Waratek scope1 Not applicable2 High3 not blocked3 No public exploit3 20180 201936 Outside Waratek scope3 Not applicable33 High24 Medium12 not blocked36 Working exploit published1 Proof of concept only1 Forecast only2 No public exploit32 20209 Outside Waratek scope4 Not applicable5 High5 Medium4 not blocked9 Working exploit published1 No public exploit8 20217 Outside Waratek scope4 Not applicable3 Critical1 High4 Medium2 not blocked7 Forecast only2 No public exploit5 202213 Not applicable13 High8 Medium5 not blocked13 No public exploit13 20239 Not applicable9 High9 not blocked9 No public exploit9 20248 Outside Waratek scope5 Not applicable3 High7 Medium1 not blocked8 Proof of concept only2 No public exploit6 20250 202619 Not applicable19 Critical1 High12 Medium6 not blocked19 No public exploit19
19961999200220052008201120142017202020232026
247 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2003-0914 Medium 2003-12-15 Not applicable No public exploit ISC BIND 8.3.x before 8.3.7, and 8.4.x before 8.4.3, allows remote attackers to poison the cache via a malicious name server that returns negative responses with a large TTL (time-to-live) value.
CVE-2003-0039 Medium 2003-02-07 Not applicable No public exploit ISC dhcrelay (dhcp-relay) 3.0rc9 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (packet storm) via a certain BOOTP packet that is forwarded to a broadcast MAC address, causing an infinite loop that is not restricted by a hop count.
CVE-2003-0026 High 2003-01-17 Not applicable No public exploit Multiple stack-based buffer overflows in the error handling routines of the minires library, as used in the NSUPDATE capability for ISC DHCPD 3.0 through 3.0.1RC10, allow remote attackers to execute arbitrary code via a DHCP message containing a long hostname.
CVE-2002-2213 Medium 2002-12-31 Not applicable No public exploit The DNS resolver in unspecified versions of Infoblox DNS One, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
CVE-2002-2212 Medium 2002-12-31 Not applicable No public exploit The DNS resolver in unspecified versions of Fujitsu UXP/V, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
CVE-2002-2211 Medium 2002-12-31 Not applicable No public exploit BIND 4 and BIND 8, when resolving recursive DNS queries for arbitrary hosts, allows remote attackers to conduct DNS cache poisoning via a birthday attack that uses a large number of open queries for the same resource record (RR) combined with spoofed responses, which increases the possibility of successfully spoofing a response in a way that is more efficient than brute force methods.
CVE-2002-1221 Medium 2002-11-29 Not applicable No public exploit BIND 8.x through 8.3.3 allows remote attackers to cause a denial of service (crash) via SIG RR elements with invalid expiry times, which are removed from the internal BIND database and later cause a null dereference.
CVE-2002-1220 Medium 2002-11-29 Not applicable Working exploit published BIND 8.3.x through 8.3.3 allows remote attackers to cause a denial of service (termination due to assertion failure) via a request for a subdomain that does not exist, with an OPT resource record with a large UDP payload size.
CVE-2002-1219 High 2002-11-29 Not applicable No public exploit Buffer overflow in named in BIND 4 versions 4.9.10 and earlier, and 8 versions 8.3.3 and earlier, allows remote attackers to execute arbitrary code via a certain DNS server response containing SIG resource records (RR).
CVE-2002-0029 High 2002-11-29 Not applicable No public exploit Buffer overflows in the DNS stub resolver library in ISC BIND 4.9.2 through 4.9.10, and other derived libraries such as BSD libc and GNU glibc, allow remote attackers to execute arbitrary code via DNS server responses that trigger the overflow in the (1) getnetbyname, or (2) getnetbyaddr functions, aka "LIBRESOLV: buffer overrun" and a different vulnerability than CVE-2002-0684.
CVE-2002-0684 High 2002-08-12 Not applicable No public exploit Buffer overflow in DNS resolver functions that perform lookup of network names and addresses, as used in BIND 4.9.8 and ported to glibc 2.2.5 and earlier, allows remote malicious DNS servers to execute arbitrary code through a subroutine used by functions such as getnetbyname and getnetbyaddr.
CVE-2002-0525 High 2002-08-12 Not applicable Working exploit published Format string vulnerabilities in (1) inews or (2) rnews for INN 2.2.3 and earlier allow local users and remote malicious NNTP servers to gain privileges via format string specifiers in NTTP responses.
CVE-2002-0702 High 2002-07-26 Not applicable Working exploit published Format string vulnerabilities in the logging routines for dynamic DNS code (print.c) of ISC DHCP daemon (DHCPD) 3 to 3.0.1rc8, with the NSUPDATE option enabled, allow remote malicious DNS servers to execute arbitrary code via format strings in a DNS server response.
CVE-2002-0651 High 2002-07-03 Not applicable No public exploit Buffer overflow in the DNS resolver code used in libc, glibc, and libbind, as derived from ISC BIND, allows remote malicious DNS servers to cause a denial of service and possibly execute arbitrary code via the stub resolvers.
CVE-2002-0400 Medium 2002-06-18 Not applicable No public exploit ISC BIND 9 before 9.2.1 allows remote attackers to cause a denial of service (shutdown) via a malformed DNS packet that triggers an error condition that is not properly handled when the rdataset parameter to the dns_message_findtype() function in message.c is not NULL, aka DoS_findtype.
CVE-2001-0497 High 2001-07-21 Not applicable No public exploit dnskeygen in BIND 8.2.4 and earlier, and dnssec-keygen in BIND 9.1.2 and earlier, set insecure permissions for a HMAC-MD5 shared secret key file used for DNS Transactional Signatures (TSIG), which allows attackers to obtain the keys and perform dynamic DNS updates.
CVE-2001-1442 Medium 2001-04-21 Not applicable Working exploit published Buffer overflow in innfeed for ISC InterNetNews (INN) before 2.3.0 allows local users in the "news" group to gain privileges via a long -c command line argument.
CVE-2001-0013 High 2001-02-12 Not applicable No public exploit Format string vulnerability in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
CVE-2001-0012 Medium 2001-02-12 Not applicable No public exploit BIND 4 and BIND 8 allow remote attackers to access sensitive information such as environment variables.
CVE-2001-0011 High 2001-02-12 Not applicable No public exploit Buffer overflow in nslookupComplain function in BIND 4 allows remote attackers to gain root privileges.
CVE-2001-0010 High 2001-02-12 Not applicable Working exploit published Buffer overflow in transaction signature (TSIG) handling code in BIND 8 allows remote attackers to gain root privileges.
CVE-2000-0888 Medium 2000-12-19 Not applicable No public exploit named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by sending an SRV record to the server, aka the "srv bug."
CVE-2000-0887 Medium 2000-12-19 Not applicable Working exploit published named in BIND 8.2 through 8.2.2-P6 allows remote attackers to cause a denial of service by making a compressed zone transfer (ZXFR) request and performing a name service query on an authoritative record that is not cached, aka the "zxfr bug."
CVE-2000-1029 High 2000-12-11 Not applicable Working exploit published Buffer overflow in host command allows a remote attacker to execute arbitrary commands via a long response to an AXFR query.
CVE-2000-0360 Medium 2000-10-20 Not applicable No public exploit Buffer overflow in INN 2.2.1 and earlier allows remote attackers to cause a denial of service via a maliciously formatted article.
CVE-2000-0585 High 2000-06-24 Not applicable No public exploit ISC DHCP client program dhclient allows remote attackers to execute arbitrary commands via shell metacharacters.
CVE-2000-0335 High 2000-05-03 Not applicable No public exploit The resolver in glibc 2.1.3 uses predictable IDs, which allows a local attacker to spoof DNS query results.
CVE-1999-0706 High 2000-04-27 Not applicable No public exploit Linux xmonisdn package allows local users to gain root privileges by modifying the IFS or PATH environmental variables.
CVE-2000-0472 Low 2000-02-06 Not applicable Working exploit published Buffer overflow in innd 2.2.2 allows remote attackers to execute arbitrary commands via a cancel request containing a long message ID.
CVE-1999-0808 High 1999-12-31 Not applicable No public exploit Multiple buffer overflows in ISC DHCP Distribution server (dhcpd) 1.0 and 2.0 allow a remote attacker to cause a denial of service (crash) and possibly execute arbitrary commands via long options.
CVE-1999-0849 Medium 1999-11-10 Not applicable No public exploit Denial of service in BIND named via maxdname.
CVE-1999-0848 Medium 1999-11-10 Not applicable Working exploit published Denial of service in BIND named via consuming more than "fdmax" file descriptors.
CVE-1999-0837 High 1999-11-10 Not applicable No public exploit Denial of service in BIND by improperly closing TCP sessions via so_linger.
CVE-1999-0833 High 1999-11-10 Not applicable No public exploit Buffer overflow in BIND 8.2 via NXT records.
CVE-1999-0705 High 1999-09-01 Not applicable Working exploit published Buffer overflow in INN inews program.
CVE-1999-0785 High 1999-05-11 Not applicable No public exploit The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.
CVE-1999-0754 High 1999-05-11 Not applicable No public exploit The INN inndstart program allows local users to gain privileges by specifying an alternate configuration file using the INNCONF environmental variable.
CVE-1999-1499 Low 1998-04-10 Not applicable Working exploit published named in ISC BIND 4.9 and 8.1 allows local users to destroy files via a symlink attack on (1) named_dump.db when root kills the process with a SIGINT, or (2) named.stats when SIGIOT is used.
CVE-1999-0011 Medium 1998-04-08 Not applicable No public exploit Denial of Service vulnerabilities in BIND 4.9 and BIND 8 Releases via CNAME record and zone transfer.
CVE-1999-0010 Medium 1998-04-08 Not applicable No public exploit Denial of Service vulnerability in BIND 8 Releases via maliciously formatted DNS messages.
CVE-1999-0009 High 1998-04-08 Not applicable Working exploit published Inverse query buffer overflow in BIND 4.9 and BIND 8 Releases.
CVE-1999-0024 Medium 1997-08-13 Not applicable No public exploit DNS cache poisoning via BIND, by predictable query IDs.
CVE-1999-0247 High 1997-07-21 Not applicable No public exploit Buffer overflow in nnrpd program in INN up to version 1.6 allows remote users to execute arbitrary commands.
CVE-1999-0184 Medium 1997-07-01 Not applicable No public exploit When compiled with the -DALLOW_UPDATES option, bind allows dynamic updates to the DNS server, allowing for malicious modification of DNS records.
CVE-1999-0868 High 1997-02-20 Not applicable No public exploit ucbmail allows remote attackers to execute commands via shell metacharacters that are passed to it from INN.
CVE-1999-0100 High 1997-01-01 Not applicable No public exploit Remote access in AIX innd 1.5.1, using control messages.
CVE-1999-0043 Critical 1996-12-04 Not applicable No public exploit Command execution via shell metachars in INN daemon (innd) 1.5 using "newgroup" and "rmgroup" control messages, and others.
‹ prev page 3 of 3 next ›