WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Product sentry✕Has a public PoC✕
Overview 9 matches · 0 in Waratek scope · 0 protected · 3 exploited · 3 CISA KEV · 4 EPSS ≥ 0.5
9matches 0in Waratek scope0.0% 0protected0.0% 3exploited33.3% 3CISA KEV33.3% 4EPSS ≥ 0.544.4%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 9 100.0% Withdrawn CVE 0 0.0%
Critical 3 33.3% High 5 55.6% Medium 1 11.1% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 9 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 33.3% Working exploit published 6 66.7% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 4 / year
Not applicable: 9 Medium: 1High: 5Critical: 3 not blocked: 9 Working exploit published: 6Exploited: 3
20041 Not applicable1 High1 not blocked1 Working exploit published1 20050 20060 20070 20084 Not applicable4 High3 Medium1 not blocked4 Working exploit published4 20090 20100 20110 20120 20130 20140 20151 Not applicable1 High1 not blocked1 Working exploit published1 20160 20170 20180 20190 20201 Not applicable1 Critical1 not blocked1 Exploited1 20210 20220 20231 Not applicable1 Critical1 not blocked1 Exploited1 20240 20250 20261 Not applicable1 Critical1 not blocked1 Exploited1
200420062008201020122014201620182020202220242026
9 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-10520 Critical 2026-06-09 Not applicable Exploited An OS Command Injection vulnerability in Ivanti Sentry before the R10.5.2, R10.6.2 and R10.7.1 versions allows a remote unauthenticated user to achieve root-level remote code execution
CVE-2023-38035 Critical 2023-08-21 Not applicable Exploited A security vulnerability in MICS Admin Portal in Ivanti MobileIron Sentry versions 9.18.0 and below, which may allow an attacker to bypass authentication controls on the administrative interface due to an insufficiently restrictive Apache HTTPD configuration.
CVE-2020-15505 Critical 2020-07-07 Not applicable Exploited A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sentry versions 9.7.2 and earlier, and 9.8.0; and Monitor and Reporting Database (RDB) version 2.0.0.1 and earlier that allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2014-9643 High 2015-02-06 Not applicable Working exploit published K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitrary memory locations, and consequently gain privileges, via a crafted 0x95002570, 0x95002574, 0x95002580, 0x950025a8, 0x950025ac, or 0x950025c8 IOCTL call.
CVE-2008-4548 High 2008-10-14 Not applicable Working exploit published Stack-based buffer overflow in the PTZCamPanelCtrl ActiveX control (CamPanel.dll) in RTS Sentry 2.1.0.2 allows remote attackers to execute arbitrary code via a long second argument to the ConnectServer method.
CVE-2008-1322 High 2008-03-13 Not applicable Working exploit published The File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service (CPU consumption) or overwrite arbitrary files via a query string that specifies the -b option, probably due to an argument injection vulnerability.
CVE-2008-1321 Medium 2008-03-13 Not applicable Working exploit published The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication, which allows remote attackers to cause a denial of service (service termination) via the exit command to TCP port 6162, or have other impacts via other commands.
CVE-2008-1320 High 2008-03-13 Not applicable Working exploit published Multiple buffer overflows in ASG-Sentry Network Manager 7.0.0 and earlier allow remote attackers to execute arbitrary code or cause a denial of service (crash) via (1) a long request to FxIAList on TCP port 6162, or (2) an SNMP request with a long community string to FxAgent on UDP port 6161.
CVE-2004-0362 High 2004-04-15 Not applicable Working exploit published Multiple stack-based buffer overflows in the ICQ parsing routines of the ISS Protocol Analysis Module (PAM) component, as used in various RealSecure, Proventia, and BlackICE products, allow remote attackers to execute arbitrary code via a SRV_MULTI response containing a SRV_USER_ONLINE response packet and a SRV_META_USER response packet with long (1) nickname, (2) firstname, (3) lastname, or (4) email address fields, as exploited by the Witty worm.