WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product communications eagle application processor✕
Overview 12 matches · 3 in Waratek scope · 1 protected · 3 exploited · 1 CISA KEV · 4 public PoC · 4 EPSS ≥ 0.5
12matches 3in Waratek scope25.0% 1protected8.3% 3exploited25.0% 1CISA KEV8.3% 4public PoC33.3% 4EPSS ≥ 0.533.3%
Protected by Waratek 1 8.3% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 16.7% Outside Waratek scope 8 66.7% Not applicable 1 8.3% Withdrawn CVE 0 0.0%
Critical 1 8.3% High 5 41.7% Medium 6 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 8.3% partly blocked 0 0.0% not blocked 11 91.7% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 25.0% Working exploit published 1 8.3% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 8 66.7%
split by peak 5 / year
Not applicable: 1Outside Waratek scope: 8No exploit published: 2Protected by Waratek: 1 Medium: 6High: 5Critical: 1 not blocked: 11blocked by ARMR today: 1 No public exploit: 8Working exploit published: 1Exploited: 3
20151 Outside Waratek scope1 High1 not blocked1 Working exploit published1 20161 No exploit published1 Medium1 not blocked1 No public exploit1 20170 20182 Outside Waratek scope1 Not applicable1 High1 Medium1 not blocked2 No public exploit2 20192 Protected by Waratek1 Outside Waratek scope1 Medium2 blocked by ARMR today1 not blocked1 Exploited1 No public exploit1 20205 Outside Waratek scope5 High3 Medium2 not blocked5 Exploited2 No public exploit3 20211 No exploit published1 Critical1 not blocked1 No public exploit1
2015201620172018201920202021
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2021-21783 Critical 2021-03-25 No exploit published No public exploit A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote code execution. An attacker can send an HTTP request to trigger this vulnerability.
CVE-2020-12723 High 2020-06-05 Outside Waratek scope No public exploit regcomp.c in Perl before 5.30.3 allows a buffer overflow via a crafted regular expression because of recursive S_study_chunk calls.
CVE-2020-10878 High 2020-06-05 Outside Waratek scope No public exploit Perl before 5.30.3 has an integer overflow related to mishandling of a "PL_regkind[OP(n)] == NOTHING" situation. A crafted regular expression could lead to malformed bytecode with a possibility of instruction injection.
CVE-2020-10543 High 2020-06-05 Outside Waratek scope No public exploit Perl before 5.30.3 on 32-bit platforms allows a heap-based buffer overflow because nested regular expression quantifiers have an integer overflow.
CVE-2020-11023 Medium 2020-04-29 Outside Waratek scope Exploited In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing <option> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2020-11022 Medium 2020-04-29 Outside Waratek scope Exploited In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.
CVE-2019-10219 Medium 2019-11-08 Protected by Waratek No public exploit A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
CVE-2019-11358 Medium 2019-04-20 Outside Waratek scope Exploited jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.
CVE-2018-3693 Medium 2018-07-10 Not applicable No public exploit Systems with microprocessors utilizing speculative execution and branch prediction may allow unauthorized disclosure of information to an attacker with local user access via a speculative buffer overflow and side-channel analysis.
CVE-2018-7566 High 2018-03-30 Outside Waratek scope No public exploit The Linux kernel 4.15 has a Buffer Overflow via an SNDRV_SEQ_IOCTL_SET_CLIENT_POOL ioctl write operation to /dev/snd/seq by a local user.
CVE-2016-5458 Medium 2016-07-21 No exploit published No public exploit Unspecified vulnerability in the Oracle Communications EAGLE Application Processor component in Oracle Communications Applications 16.0 allows remote authenticated users to affect confidentiality and integrity via vectors related to APPL.
CVE-2015-0235 High 2015-01-28 Outside Waratek scope Working exploit published Heap-based buffer overflow in the __nss_hostname_digits_dots function in glibc 2.2, and other 2.x versions before 2.18, allows context-dependent attackers to execute arbitrary code via vectors related to the (1) gethostbyname or (2) gethostbyname2 function, aka "GHOST."