WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Product enterprise linux hpc node eus✕Has a public PoC✕
Overview 7 matches · 0 in Waratek scope · 0 protected · 3 exploited · 2 CISA KEV · 4 EPSS ≥ 0.5
7matches 0in Waratek scope0.0% 0protected0.0% 3exploited42.9% 2CISA KEV28.6% 4EPSS ≥ 0.557.1%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 7 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 1 14.3% Medium 5 71.4% Low 1 14.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 7 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 42.9% Working exploit published 4 57.1% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 5 / month
Not applicable: 7 Low: 1Medium: 5High: 1 not blocked: 7 Working exploit published: 4Exploited: 3
Jun 151 Not applicable1 Medium1 not blocked1 Working exploit published1 Jul 150 Aug 150 Sep 150 Oct 150 Nov 150 Dec 150 Jan 160 Feb 161 Not applicable1 High1 not blocked1 Exploited1 Mar 160 Apr 160 May 165 Not applicable5 Medium4 Low1 not blocked5 Exploited2 Working exploit published3
Jun 15Jul 15Aug 15Sep 15Oct 15Nov 15Dec 15Jan 16Feb 16Mar 16Apr 16May 16
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2016-3718 Medium 2016-05-05 Not applicable Exploited The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
CVE-2016-3717 Medium 2016-05-05 Not applicable Working exploit published The LABEL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to read arbitrary files via a crafted image.
CVE-2016-3716 Low 2016-05-05 Not applicable Working exploit published The MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to move arbitrary files via a crafted image.
CVE-2016-3715 Medium 2016-05-05 Not applicable Exploited The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2016-2107 Medium 2016-05-05 Not applicable Working exploit published The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.
CVE-2015-7547 High 2016-02-18 Not applicable Exploited Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module.
CVE-2015-4148 Medium 2015-06-09 Not applicable Working exploit published The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri property is a string, which allows remote attackers to obtain sensitive information by providing crafted serialized data with an int data type, related to a "type confusion" issue.