WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Vendor intel✕Has a public PoC✕
Overview 24 matches · 2 in Waratek scope · 2 protected · 7 exploited · 4 CISA KEV · 8 EPSS ≥ 0.5
24matches 2in Waratek scope8.3% 2protected8.3% 7exploited29.2% 4CISA KEV16.7% 8EPSS ≥ 0.533.3%
Protected by Waratek 2 8.3% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 3 12.5% Not applicable 19 79.2% Withdrawn CVE 0 0.0%
Critical 3 12.5% High 8 33.3% Medium 13 54.2% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 8.3% partly blocked 0 0.0% not blocked 22 91.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 7 29.2% Working exploit published 11 45.8% Proof of concept only 6 25.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 5 / year
Not applicable: 19Outside Waratek scope: 3Protected by Waratek: 2 Medium: 13High: 8Critical: 3 not blocked: 22blocked by ARMR today: 2 Proof of concept only: 6Working exploit published: 11Exploited: 7
19991 Not applicable1 Medium1 not blocked1 Working exploit published1 20004 Not applicable4 High2 Medium2 not blocked4 Working exploit published4 20010 20020 20030 20040 20050 20062 Not applicable2 Medium2 not blocked2 Working exploit published2 20071 Not applicable1 High1 not blocked1 Working exploit published1 20080 20090 20100 20110 20120 20131 Not applicable1 High1 not blocked1 Exploited1 20141 Not applicable1 Medium1 not blocked1 Working exploit published1 20150 20160 20174 Not applicable4 Critical1 High3 not blocked4 Exploited2 Working exploit published1 Proof of concept only1 20185 Outside Waratek scope3 Not applicable2 High1 Medium4 not blocked5 Exploited2 Working exploit published1 Proof of concept only2 20191 Not applicable1 Medium1 not blocked1 Proof of concept only1 20202 Not applicable2 Medium2 not blocked2 Proof of concept only2 20212 Protected by Waratek2 Critical2 blocked by ARMR today2 Exploited2
199920012003200520072009201120132015201720192021
24 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2021-45046 Critical 2021-12-14 Protected by Waratek Exploited It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.
CVE-2021-44228 Critical 2021-12-10 Protected by Waratek Exploited Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.
CVE-2020-0551 Medium 2020-03-12 Not applicable Proof of concept only Load value injection in some Intel(R) Processors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. The list of affected products is provided in intel-sa-00334: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00334.html
CVE-2019-14615 Medium 2020-01-17 Not applicable Proof of concept only Insufficient control flow in certain data structures for some Intel(R) Processors with Intel(R) Processor Graphics may allow an unauthenticated user to potentially enable information disclosure via local access.
CVE-2019-11157 Medium 2019-12-16 Not applicable Proof of concept only Improper conditions check in voltage settings for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege and/or information disclosure via local access.
CVE-2017-5693 High 2018-07-31 Not applicable Proof of concept only Firmware in the Intel Puma 5, 6, and 7 Series might experience resource depletion or timeout, which allows a network attacker to create a denial of service via crafted network traffic.
CVE-2018-3639 Medium 2018-05-22 Outside Waratek scope Exploited Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4.
CVE-2017-5754 Medium 2018-01-04 Not applicable Proof of concept only Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis of the data cache.
CVE-2017-5753 Medium 2018-01-04 Outside Waratek scope Exploited Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVE-2017-5715 Medium 2018-01-04 Outside Waratek scope Working exploit published Systems with microprocessors utilizing speculative execution and indirect branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis.
CVE-2017-5717 High 2017-12-12 Not applicable Working exploit published Type Confusion in Content Protection HECI Service in Intel Graphics Driver allows unprivileged user to elevate privileges via local access.
CVE-2017-5721 High 2017-10-11 Not applicable Proof of concept only Insufficient input validation in system firmware for Intel NUC7i3BNK, NUC7i3BNH, NUC7i5BNK, NUC7i5BNH, NUC7i7BNH versions BN0049 and below allows local attackers to execute arbitrary code via manipulation of memory.
CVE-2015-2291 High 2017-08-09 Not applicable Exploited (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.
CVE-2017-5689 Critical 2017-05-02 Not applicable Exploited An unprivileged network attacker could gain system privileges to provisioned Intel manageability SKUs: Intel Active Management Technology (AMT) and Intel Standard Manageability (ISM). An unprivileged local attacker could provision manageability features gaining unprivileged network or local system privileges on Intel manageability SKUs: Intel Active Management Technology (AMT), Intel Standard Manageability (ISM), and Intel Small Business Technology (SBT).
CVE-2014-8272 Medium 2014-12-19 Not applicable Working exploit published The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote attackers to execute arbitrary commands via a brute-force attack.
CVE-2013-4786 High 2013-07-08 Not applicable Exploited The IPMI 2.0 specification supports RMCP+ Authenticated Key-Exchange Protocol (RAKP) authentication, which allows remote attackers to obtain password hashes and conduct offline password guessing attacks by obtaining the HMAC from a RAKP message 2 response from a BMC.
CVE-2007-0686 High 2007-02-03 Not applicable Working exploit published The Intel 2200BG 802.11 Wireless Mini-PCI driver 9.0.3.9 (w29n51.sys) allows remote attackers to cause a denial of service (system crash) via crafted disassociation packets, which triggers memory corruption of "internal kernel structures," a different vulnerability than CVE-2006-6651. NOTE: this issue might overlap CVE-2006-3992.
CVE-2006-6651 Medium 2006-12-20 Not applicable Working exploit published Race condition in W29N51.SYS in the Intel 2200BG wireless driver 9.0.3.9 allows remote attackers to cause memory corruption and execute arbitrary code via a series of crafted beacon frames. NOTE: some details are obtained solely from third party information.
CVE-2006-2316 Medium 2006-05-12 Not applicable Working exploit published S24EvMon.exe in the Intel PROset/Wireless software, possibly 10.1.0.33, uses a S24EventManagerSharedMemory shared memory section with weak permissions, which allows local users to read or modify passwords or other data, or cause a denial of service.
CVE-2000-0989 Medium 2000-12-19 Not applicable Working exploit published Buffer overflow in Intel InBusiness eMail Station 1.04.87 POP service allows remote attackers to cause a denial of service and possibly execute commands via a long username.
CVE-2000-0516 High 2000-06-06 Not applicable Working exploit published When configured to store configuration information in an LDAP directory, Shiva Access Manager 5.0.0 stores the root DN (Distinguished Name) name and password in cleartext in a file that is world readable, which allows local users to compromise the LDAP server.
CVE-2000-0451 Medium 2000-05-19 Not applicable Working exploit published The Intel express 8100 ISDN router allows remote attackers to cause a denial of service via oversized or fragmented ICMP packets.
CVE-2000-0384 High 2000-05-08 Not applicable Working exploit published NetStructure 7110 and 7180 have undocumented accounts (servnow, root, and wizard) whose passwords are easily guessable from the NetStructure's MAC address, which could allow remote attackers to gain root access.
CVE-1999-1566 Medium 1999-05-08 Not applicable Working exploit published Buffer overflow in iParty server 1.2 and earlier allows remote attackers to cause a denial of service (crash) by connecting to default port 6004 and sending repeated extended characters.