WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product communications cloud native core network function cloud native environment✕
Overview 11 matches · 3 in Waratek scope · 2 protected · 3 exploited · 3 CISA KEV · 3 public PoC · 3 EPSS ≥ 0.5
11matches 3in Waratek scope27.3% 2protected18.2% 3exploited27.3% 3CISA KEV27.3% 3public PoC27.3% 3EPSS ≥ 0.527.3%
Protected by Waratek 2 18.2% Rule in development 0 0.0% Mitigation candidate 1 9.1% No exploit published 0 0.0% Outside Waratek scope 7 63.6% Not applicable 1 9.1% Withdrawn CVE 0 0.0%
Critical 11 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 18.2% partly blocked 0 0.0% not blocked 9 81.8% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 27.3% Working exploit published 0 0.0% Proof of concept only 2 18.2% Forecast only 0 0.0% No public exploit 6 54.5%
split by peak 3 / quarter
Not applicable: 1Outside Waratek scope: 7Mitigation candidate: 1Protected by Waratek: 2 Critical: 11 not blocked: 9blocked by ARMR today: 2 No public exploit: 6Proof of concept only: 2Exploited: 3
Q3 191 Not applicable1 Critical1 not blocked1 No public exploit1 Q4 190 Q1 202 Outside Waratek scope2 Critical2 not blocked2 No public exploit2 Q2 200 Q3 200 Q4 201 Outside Waratek scope1 Critical1 not blocked1 No public exploit1 Q1 213 Outside Waratek scope3 Critical3 not blocked3 Proof of concept only1 No public exploit2 Q2 210 Q3 210 Q4 210 Q1 222 Mitigation candidate1 Outside Waratek scope1 Critical2 not blocked2 Exploited1 Proof of concept only1 Q2 222 Protected by Waratek2 Critical2 blocked by ARMR today2 Exploited2
Q3 19Q4 19Q1 20Q2 20Q3 20Q4 20Q1 21Q2 21Q3 21Q4 21Q1 22Q2 22
11 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2022-22965 Critical 2022-04-01 Protected by Waratek Exploited A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e. the default, it is not vulnerable to the exploit. However, the nature of the vulnerability is more general, and there may be other ways to exploit it.
CVE-2022-22963 Critical 2022-04-01 Protected by Waratek Exploited In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.
CVE-2022-22947 Critical 2022-03-03 Mitigation candidate Exploited In spring cloud gateway versions prior to 3.1.1+ and 3.0.7+ , applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request that could allow arbitrary remote execution on the remote host.
CVE-2022-23219 Critical 2022-01-14 Outside Waratek scope Proof of concept only The deprecated compatibility function clnt_create in the sunrpc module of the GNU C Library (aka glibc) through 2.34 copies its hostname argument on the stack without validating its length, which may result in a buffer overflow, potentially resulting in a denial of service or (if an application is not built with a stack protector enabled) arbitrary code execution.
CVE-2020-14343 Critical 2021-02-09 Outside Waratek scope No public exploit A vulnerability was discovered in the PyYAML library in versions before 5.4, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. This flaw allows an attacker to execute arbitrary code on the system by abusing the python/object/new constructor. This flaw is due to an incomplete fix for CVE-2020-1747.
CVE-2020-36242 Critical 2021-02-07 Outside Waratek scope No public exploit In the cryptography package before 3.3.2 for Python, certain sequences of update calls to symmetrically encrypt multi-GB values could result in an integer overflow and buffer overflow, as demonstrated by the Fernet class.
CVE-2021-3177 Critical 2021-01-19 Outside Waratek scope Proof of concept only Python 3.x through 3.9.1 has a buffer overflow in PyCArg_repr in _ctypes/callproc.c, which may lead to remote code execution in certain Python applications that accept floating-point numbers as untrusted input, as demonstrated by a 1e300 argument to c_double.from_param. This occurs because sprintf is used unsafely.
CVE-2020-27619 Critical 2020-10-22 Outside Waratek scope No public exploit In Python 3 through 3.9.0, the Lib/test/multibytecodec_support.py CJK codec tests call eval() on content retrieved via HTTP.
CVE-2020-1747 Critical 2020-03-24 Outside Waratek scope No public exploit A vulnerability was discovered in the PyYAML library in versions before 5.3.1, where it is susceptible to arbitrary code execution when it processes untrusted YAML files through the full_load method or with the FullLoader loader. Applications that use the library to process untrusted input may be vulnerable to this flaw. An attacker could use this flaw to execute arbitrary code on the system by abusing the python/object/new constructor.
CVE-2019-15606 Critical 2020-02-07 Outside Waratek scope No public exploit Including trailing white space in HTTP header values in Nodejs 10, 12, and 13 causes bypass of authorization based on header value comparisons
CVE-2019-10746 Critical 2019-08-23 Not applicable No public exploit mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload.