Overview 9 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
9matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
1public PoC11.1%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
9
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
9
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
1
11.1%
Forecast only
0
0.0%
No public exploit
8
88.9%
split by
peak 5 / month
Jun 181
Not applicable1
Medium1
not blocked1
No public exploit1
Jul 180
Aug 180
Sep 180
Oct 180
Nov 180
Dec 181
Not applicable1
Medium1
not blocked1
No public exploit1
Jan 191
Not applicable1
Medium1
not blocked1
Proof of concept only1
Feb 190
Mar 195
Not applicable5
Critical1
High1
Medium3
not blocked5
No public exploit5
Apr 190
May 190
Jun 190
Jul 190
Aug 190
Sep 191
Not applicable1
Medium1
not blocked1
No public exploit1
Jul 18Sep 18Nov 18Jan 19Mar 19May 19Jul 19Sep 19
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2019-15902 | Medium | 2019-09-04 | Not applicable | No public exploit | A backporting error was discovered in the Linux stable/longterm kernel 4.4.x through 4.4.190, 4.9.x through 4.9.190, 4.14.x through 4.14.141, 4.19.x through 4.19.69, and 5.2.x through 5.2.11. Misuse of the upstream "x86/ptrace: Fix possible spectre-v1 in ptrace_get_debugreg()" commit reintroduced the Spectre vulnerability that it aimed to eliminate. This occurred because the backport process depends on cherry picking specific commits, and because two (correctly ordered) code lines were swapped. |
| CVE-2019-7612 | Critical | 2019-03-25 | Not applicable | No public exploit | A sensitive data disclosure flaw was found in the way Logstash versions before 5.6.15 and 6.6.1 logs malformed URLs. If a malformed URL is specified as part of the Logstash configuration, the credentials for the URL could be inadvertently logged as part of the error message. |
| CVE-2019-7222 | Medium | 2019-03-21 | Not applicable | No public exploit | The KVM implementation in the Linux kernel through 4.20.5 has an Information Leak. |
| CVE-2019-7221 | High | 2019-03-21 | Not applicable | No public exploit | The KVM implementation in the Linux kernel through 4.20.5 has a Use-after-Free. |
| CVE-2019-6454 | Medium | 2019-03-21 | Not applicable | No public exploit | An issue was discovered in sd-bus in systemd 239. bus_process_object() in libsystemd/sd-bus/bus-objects.c allocates a variable-length stack buffer for temporarily storing the object path of incoming D-Bus messages. An unprivileged local user can exploit this by sending a specially crafted message to PID1, causing the stack pointer to jump over the stack guard pages into an unmapped memory region and trigger a denial of service (systemd PID1 crash and kernel panic). |
| CVE-2018-19985 | Medium | 2019-03-21 | Not applicable | No public exploit | The function hso_get_config_data in drivers/net/usb/hso.c in the Linux kernel through 4.19.8 reads if_num from the USB device (as a u8) and uses it to index a small array, resulting in an object out-of-bounds (OOB) read that potentially allows arbitrary read in the kernel address space. |
| CVE-2019-5489 | Medium | 2019-01-07 | Not applicable | Proof of concept only | The mincore() implementation in mm/mincore.c in the Linux kernel through 4.19.13 allowed local attackers to observe page cache access patterns of other processes on the same system, potentially allowing sniffing of secret information. (Fixing this affects the output of the fincore program.) Limited remote exploitation may be possible, as demonstrated by latency differences in accessing public files from an Apache HTTP Server. |
| CVE-2018-19039 | Medium | 2018-12-13 | Not applicable | No public exploit | Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions. |
| CVE-2018-12099 | Medium | 2018-06-11 | Not applicable | No public exploit | Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links. |