Overview 58 matches · 3 in Waratek scope · 1 protected · 15 exploited · 9 CISA KEV · 15 EPSS ≥ 0.5
Protected by Waratek
1
1.7%
Rule in development
1
1.7%
Mitigation candidate
1
1.7%
No exploit published
0
0.0%
Outside Waratek scope
1
1.7%
Not applicable
54
93.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
1
1.7%
partly blocked
0
0.0%
not blocked
57
98.3%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
15
25.9%
Working exploit published
37
63.8%
Proof of concept only
6
10.3%
Forecast only
0
0.0%
No public exploit
0
0.0%
split by
peak 22 / year
19991
Not applicable1
High1
not blocked1
Working exploit published1
20000
20010
20020
20030
20040
20051
Not applicable1
Low1
not blocked1
Working exploit published1
20060
20071
Not applicable1
High1
not blocked1
Working exploit published1
20083
Not applicable3
High1
Medium2
not blocked3
Working exploit published3
20090
20102
Not applicable2
High2
not blocked2
Working exploit published2
20110
20120
20130
20140
20150
20161
Not applicable1
High1
not blocked1
Exploited1
20172
Not applicable2
Critical1
Medium1
not blocked2
Working exploit published2
201822
Not applicable22
Critical3
High3
Medium16
not blocked22
Exploited2
Working exploit published20
20192
Not applicable2
High1
Medium1
not blocked2
Working exploit published1
Proof of concept only1
20202
Not applicable2
Critical1
Medium1
not blocked2
Exploited1
Working exploit published1
20216
Protected by Waratek1
Outside Waratek scope1
Not applicable4
Critical2
High1
Medium3
blocked by ARMR today1
not blocked5
Exploited2
Working exploit published2
Proof of concept only2
20225
Rule in development1
Not applicable4
Critical1
High3
Medium1
not blocked5
Exploited3
Working exploit published2
20233
Mitigation candidate1
Not applicable2
Critical1
High1
Medium1
not blocked3
Exploited2
Working exploit published1
20241
Not applicable1
High1
not blocked1
Exploited1
20253
Not applicable3
High2
Low1
not blocked3
Proof of concept only3
20263
Not applicable3
Critical2
Medium1
not blocked3
Exploited3
1999200220052008201120142017202020232026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-93616 | Critical | 2026-09-22 | Not applicable | Exploited | A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server. |
| CVE-2026-16232 | Critical | 2026-07-22 | Not applicable | Exploited | An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain an application login token and use it to authenticate with full administrative privileges. Successful exploitation allows the attacker to modify security policies and security configurations. Remote exploitation requires internet access to the Management Server IP address and a configuration that does not restrict Trusted Clients. Check Point is aware that this vulnerability is being exploited and has affected a very small number of customers. |
| CVE-2025-15503 | Medium | 2026-01-10 | Not applicable | Exploited | A security flaw has been discovered in Sangfor Operation and Maintenance Management System up to 3.0.8. The impacted element is an unknown function of the file /fort/trust/version/common/common.jsp. Performing a manipulation of the argument File results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way. |
| CVE-2025-12916 | Low | 2025-11-09 | Not applicable | Proof of concept only | A vulnerability was determined in Sangfor Operation and Maintenance Security Management System 3.0. Impacted is an unknown function of the file /fort/portal_login of the component Frontend. This manipulation of the argument loginUrl causes command injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 3.0.11 and 3.0.12 is recommended to address this issue. It is advisable to upgrade the affected component. |
| CVE-2025-31644 | High | 2025-05-07 | Not applicable | Proof of concept only | When running in Appliance mode, a command injection vulnerability exists in an undisclosed iControl REST and BIG-IP TMOS Shell (tmsh) command which may allow an authenticated attacker with administrator role privileges to execute arbitrary system commands. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2025-20029 | High | 2025-02-05 | Not applicable | Proof of concept only | Command injection vulnerability exists in iControl REST and BIG-IP TMOS Shell (tmsh) save command, which may allow an authenticated attacker to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2016-15041 | High | 2024-10-16 | Not applicable | Exploited | The MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mwp_setup_purchase_username’ parameter in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. |
| CVE-2023-46747 | Critical | 2023-10-26 | Not applicable | Exploited | Undisclosed requests may bypass configuration utility authentication, allowing an attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute arbitrary system commands. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2023-44487 | High | 2023-10-10 | Mitigation candidate | Exploited | The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023. |
| CVE-2023-1263 | Medium | 2023-03-07 | Not applicable | Working exploit published | The CMP – Coming Soon & Maintenance plugin for WordPress is vulnerable to Information Exposure in versions up to, and including, 4.1.6 via the cmp_get_post_detail function. This can allow unauthenticated individuals to obtain the contents of any non-password-protected, published post or page even when maintenance mode is enabled. |
| CVE-2022-41800 | High | 2022-12-07 | Not applicable | Exploited | In all versions of BIG-IP, when running in Appliance mode, an authenticated user assigned the Administrator role may be able to bypass Appliance mode restrictions, utilizing an undisclosed iControl REST endpoint. A successful exploit can allow the attacker to cross a security boundary. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2022-41622 | High | 2022-12-07 | Not applicable | Working exploit published | In all versions, BIG-IP and BIG-IQ are vulnerable to cross-site request forgery (CSRF) attacks through iControl SOAP. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2022-1388 | Critical | 2022-05-05 | Not applicable | Exploited | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all 12.1.x and 11.6.x versions, undisclosed requests may bypass iControl REST authentication. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated |
| CVE-2021-40822 | High | 2022-05-02 | Rule in development | Exploited | GeoServer through 2.18.5 and 2.19.x through 2.19.2 allows SSRF via the option for setting a proxy host. |
| CVE-2021-24926 | Medium | 2022-02-01 | Not applicable | Working exploit published | The Domain Check WordPress plugin before 1.0.17 does not sanitise and escape the domain parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue |
| CVE-2021-44228 | Critical | 2021-12-10 | Protected by Waratek | Exploited | Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects. |
| CVE-2002-20001 | High | 2021-11-11 | Not applicable | Proof of concept only | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it can only communicate with DHE, and the server must be configured to allow DHE. |
| CVE-2020-20988 | Medium | 2021-08-12 | Not applicable | Working exploit published | A cross site scripting (XSS) vulnerability in the /domains/cost-by-owner.php component of Domainmod 4.13 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the "or Expiring Between" parameter. |
| CVE-2021-22986 | Critical | 2021-03-31 | Not applicable | Exploited | On BIG-IP versions 16.0.x before 16.0.1.1, 15.1.x before 15.1.2.1, 14.1.x before 14.1.4, 13.1.x before 13.1.3.6, and 12.1.x before 12.1.5.3 amd BIG-IQ 7.1.0.x before 7.1.0.3 and 7.0.0.x before 7.0.0.2, the iControl REST interface has an unauthenticated remote command execution vulnerability. Note: Software versions which have reached End of Software Development (EoSD) are not evaluated. |
| CVE-2021-3449 | Medium | 2021-03-25 | Outside Waratek scope | Proof of concept only | An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j). |
| CVE-2021-27695 | Medium | 2021-03-15 | Not applicable | Working exploit published | Multiple stored cross-site scripting (XSS) vulnerabilities in openMAINT 2.1-3.3-b allow remote attackers to inject arbitrary web script or HTML via any "Add" sections, such as Add Card Building & Floor, or others in the Name and Code Parameters. |
| CVE-2020-5902 | Critical | 2020-07-01 | Not applicable | Exploited | In BIG-IP versions 15.0.0-15.1.0.3, 14.1.0-14.1.2.5, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the Traffic Management User Interface (TMUI), also referred to as the Configuration utility, has a Remote Code Execution (RCE) vulnerability in undisclosed pages. |
| CVE-2020-15038 | Medium | 2020-06-24 | Not applicable | Working exploit published | The SeedProd coming-soon plugin before 5.1.1 for WordPress allows XSS. |
| CVE-2019-15811 | Medium | 2019-08-29 | Not applicable | Working exploit published | In DomainMOD through 4.13, the parameter daterange in the file reporting/domains/cost-by-month.php has XSS. |
| CVE-2019-11477 | High | 2019-06-19 | Not applicable | Proof of concept only | Jonathan Looney discovered that the TCP_SKB_CB(skb)->tcp_gso_segs value was subject to an integer overflow in the Linux kernel when handling TCP Selective Acknowledgments (SACKs). A remote attacker could use this to cause a denial of service. This has been fixed in stable kernel releases 4.4.182, 4.9.182, 4.14.127, 4.19.52, 5.1.11, and is fixed in commit 3b4929f65b0d8249f19a50245cd88ed1a2f78cff. |
| CVE-2018-1000856 | Medium | 2018-12-20 | Not applicable | Working exploit published | DomainMOD version 4.09.03 and above. Also verified in the latest version 4.11.01 contains a Cross Site Scripting (XSS) vulnerability in Segment Name field in the segments page that can result in Arbitrary script can be executed on all users browsers who visit the affected page. This attack appear to be exploitable via Victim must visit the vulnerable page. This vulnerability appears to have been fixed in No fix yet. |
| CVE-2018-20011 | Medium | 2018-12-10 | Not applicable | Working exploit published | DomainMOD 4.11.01 has XSS via the assets/add/category.php Category Name or Stakeholder field. |
| CVE-2018-20010 | Medium | 2018-12-10 | Not applicable | Working exploit published | DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider-account.php username field. |
| CVE-2018-20009 | Medium | 2018-12-10 | Not applicable | Working exploit published | DomainMOD 4.11.01 has XSS via the assets/add/ssl-provider.php SSL Provider Name or SSL Provider URL field. |
| CVE-2018-19915 | Medium | 2018-12-06 | Not applicable | Working exploit published | DomainMOD through 4.11.01 has XSS via the assets/edit/host.php Web Host Name or Web Host URL field. |
| CVE-2018-19914 | Medium | 2018-12-06 | Not applicable | Working exploit published | DomainMOD through 4.11.01 has XSS via the assets/add/dns.php Profile Name or notes field. |
| CVE-2018-19913 | Medium | 2018-12-06 | Not applicable | Working exploit published | DomainMOD through 4.11.01 has XSS via the assets/add/registrar-accounts.php UserName, Reseller ID, or notes field. |
| CVE-2018-19892 | Medium | 2018-12-06 | Not applicable | Working exploit published | DomainMOD through 4.11.01 has XSS via the admin/dw/add-server.php DisplayName, HostName, or UserName field. |
| CVE-2018-19752 | Medium | 2018-11-29 | Not applicable | Working exploit published | DomainMOD through 4.11.01 has XSS via the assets/add/registrar.php notes field for the Registrar. |
| CVE-2018-19751 | Medium | 2018-11-29 | Not applicable | Working exploit published | DomainMOD through 4.11.01 has XSS via the admin/ssl-fields/add.php notes field for Custom SSL Fields. |
| CVE-2018-19750 | Medium | 2018-11-29 | Not applicable | Working exploit published | DomainMOD through 4.11.01 has XSS via the admin/domain-fields/ notes field in an Add Custom Field action for Custom Domain Fields. |
| CVE-2018-19749 | Medium | 2018-11-29 | Not applicable | Working exploit published | DomainMOD through 4.11.01 has XSS via the assets/add/account-owner.php Owner name field. |
| CVE-2018-19137 | Medium | 2018-11-09 | Not applicable | Working exploit published | DomainMOD through 4.11.01 has XSS via the assets/edit/ip-address.php ipid parameter. |
| CVE-2018-19136 | Medium | 2018-11-09 | Not applicable | Working exploit published | DomainMOD through 4.11.01 has XSS via the assets/edit/registrar-account.php raid parameter. |
| CVE-2018-14634 | High | 2018-09-25 | Not applicable | Exploited | An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable. |
| CVE-2018-13405 | High | 2018-07-06 | Not applicable | Working exploit published | The inode_init_owner function in fs/inode.c in the Linux kernel through 3.16 allows local users to create files with an unintended group ownership, in a scenario where a directory is SGID to a certain group and is writable by a user who is not a member of that group. Here, the non-member can trigger creation of a plain file whose group ownership is that group. The intended behavior was that the non-member can trigger creation of a directory (but not a plain file) whose group ownership is that group. The non-member can escalate privileges by making the plain file executable and SGID. |
| CVE-2018-10662 | Critical | 2018-06-26 | Not applicable | Working exploit published | An issue was discovered in multiple models of Axis IP Cameras. There is an Exposed Insecure Interface. |
| CVE-2018-10661 | Critical | 2018-06-26 | Not applicable | Exploited | An issue was discovered in multiple models of Axis IP Cameras. There is a bypass of access control. |
| CVE-2018-10660 | Critical | 2018-06-26 | Not applicable | Working exploit published | An issue was discovered in multiple models of Axis IP Cameras. There is Shell Command Injection. |
| CVE-2018-11404 | Medium | 2018-05-24 | Not applicable | Working exploit published | DomainMod v4.09.03 has XSS via the assets/edit/ssl-provider-account.php sslpaid parameter. |
| CVE-2018-11403 | Medium | 2018-05-24 | Not applicable | Working exploit published | DomainMod v4.09.03 has XSS via the assets/edit/account-owner.php oid parameter. |
| CVE-2018-5511 | High | 2018-04-13 | Not applicable | Working exploit published | On F5 BIG-IP 13.1.0-13.1.0.3 or 13.0.0, when authenticated administrative users execute commands in the Traffic Management User Interface (TMUI), also referred to as the BIG-IP Configuration utility, restrictions on allowed commands may not be enforced. |
| CVE-2017-17594 | Critical | 2017-12-13 | Not applicable | Working exploit published | DomainSale PHP Script 1.0 has SQL Injection via the domain.php id parameter. |
| CVE-2017-14841 | Medium | 2017-09-28 | Not applicable | Working exploit published | Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling. |
| CVE-2015-7547 | High | 2016-02-18 | Not applicable | Exploited | Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing "dual A/AAAA DNS queries" and the libnss_dns.so.2 NSS module. |
| CVE-2010-1046 | High | 2010-03-23 | Not applicable | Working exploit published | Multiple SQL injection vulnerabilities in index.php in Rostermain 1.1 and earlier allow remote attackers to execute arbitrary SQL commands via the (1) userid (username) and (2) password parameters. |
| CVE-2010-0973 | High | 2010-03-16 | Not applicable | Working exploit published | SQL injection vulnerability in index.php in phppool media Domain Verkaus and Auktions Portal allows remote attackers to execute arbitrary SQL commands via the id parameter. |
| CVE-2008-5788 | High | 2008-12-31 | Not applicable | Working exploit published | SQL injection vulnerability in index.php in Domain Seller Pro 1.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. |
| CVE-2008-1560 | Medium | 2008-03-31 | Not applicable | Working exploit published | Multiple cross-site scripting (XSS) vulnerabilities in Digiappz DigiDomain 2.2 allow remote attackers to inject arbitrary web script or HTML via the (1) domain parameter to lookup_result.asp, and the (2) word1 and (3) word2 parameters to suggest_result.asp. |
| CVE-2008-0688 | Medium | 2008-02-12 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in catalog.php in Smartscript Domain Trader 2.0 allows remote attackers to inject arbitrary web script or HTML via the id parameter in a viewcategory action. |
| CVE-2006-7120 | High | 2007-03-06 | Not applicable | Working exploit published | PHP remote file inclusion vulnerability in lib/php/phphtmllib-2.5.4/examples/example6.php for maintain 3.0.0-RC2 allows remote attackers to execute arbitrary PHP code via a URL in the phphtmllib parameter. NOTE: this issue might be in phpHtmlLib. NOTE: CVE disputes this issue for proper installations of maintain, since $phphtmllib is set in includes.inc before being used in example6.php |
| CVE-2005-3320 | Low | 2005-10-27 | Not applicable | Working exploit published | Cross-site scripting (XSS) vulnerability in SiteTurn Domain Manager Pro allows remote attackers to inject arbitrary web script or HTML via the err parameter in the panel script. |
| CVE-1999-1063 | High | 1999-06-01 | Not applicable | Working exploit published | CDomain whois_raw.cgi whois CGI script allows remote attackers to execute arbitrary commands via shell metacharacters in the fqdn parameter. |