WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Product vm server✕Has a public PoC✕
Overview 4 matches · 0 in Waratek scope · 0 protected · 2 exploited · 1 CISA KEV · 2 EPSS ≥ 0.5
4matches 0in Waratek scope0.0% 0protected0.0% 2exploited50.0% 1CISA KEV25.0% 2EPSS ≥ 0.550.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 4 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 2 50.0% Medium 2 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 4 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 50.0% Working exploit published 1 25.0% Proof of concept only 1 25.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 1 / month
Not applicable: 4 Medium: 2High: 2 not blocked: 4 Proof of concept only: 1Working exploit published: 1Exploited: 2
Jul 151 Not applicable1 High1 not blocked1 Exploited1 Aug 150 Sep 150 Oct 150 Nov 150 Dec 150 Jan 160 Feb 160 Mar 161 Not applicable1 Medium1 not blocked1 Working exploit published1 Apr 160 May 160 Jun 160 Jul 160 Aug 161 Not applicable1 Medium1 not blocked1 Proof of concept only1 Sep 161 Not applicable1 High1 not blocked1 Exploited1
Jul 15Sep 15Nov 15Jan 16Mar 16May 16Jul 16Sep 16
4 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2016-2776 High 2016-09-28 Not applicable Exploited buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.
CVE-2016-5696 Medium 2016-08-06 Not applicable Proof of concept only net/ipv4/tcp_input.c in the Linux kernel before 4.7 does not properly determine the rate of challenge ACK segments, which makes it easier for remote attackers to hijack TCP sessions via a blind in-window attack.
CVE-2016-3115 Medium 2016-03-22 Not applicable Working exploit published Multiple CRLF injection vulnerabilities in session.c in sshd in OpenSSH before 7.2p2 allow remote authenticated users to bypass intended shell-command restrictions via crafted X11 forwarding data, related to the (1) do_authenticated1 and (2) session_x11_req functions.
CVE-2015-5477 High 2015-07-29 Not applicable Exploited named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.