WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product communicator✕
Overview 19 matches · 1 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 1 EPSS ≥ 0.5
19matches 1in Waratek scope5.3% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 3public PoC15.8% 1EPSS ≥ 0.55.3%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 5.3% Outside Waratek scope 0 0.0% Not applicable 18 94.7% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 19 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 19 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 15.8% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 16 84.2%
split by peak 3 / year
Not applicable: 18No exploit published: 1 High: 19 not blocked: 19 No public exploit: 16Working exploit published: 3
19981 Not applicable1 High1 not blocked1 No public exploit1 19993 No exploit published1 Not applicable2 High3 not blocked3 No public exploit3 20001 Not applicable1 High1 not blocked1 Working exploit published1 20012 Not applicable2 High2 not blocked2 Working exploit published1 No public exploit1 20022 Not applicable2 High2 not blocked2 No public exploit2 20030 20040 20050 20060 20070 20081 Not applicable1 High1 not blocked1 No public exploit1 20091 Not applicable1 High1 not blocked1 No public exploit1 20100 20111 Not applicable1 High1 not blocked1 Working exploit published1 20120 20131 Not applicable1 High1 not blocked1 No public exploit1 20140 20150 20160 20170 20181 Not applicable1 High1 not blocked1 No public exploit1 20193 Not applicable3 High3 not blocked3 No public exploit3 20201 Not applicable1 High1 not blocked1 No public exploit1 20210 20221 Not applicable1 High1 not blocked1 No public exploit1
1998200020022004200620082010201220142016201820202022
19 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2022-33883 High 2022-10-03 Not applicable No public exploit A malicious crafted file consumed through Moldflow Synergy, Moldflow Adviser, Moldflow Communicator, and Advanced Material Exchange applications could lead to memory corruption vulnerability. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process.
CVE-2010-3048 High 2020-01-16 Not applicable No public exploit Cisco Unified Personal Communicator 7.0 (1.13056) does not free allocated memory for received data and does not perform validation if memory allocation is successful, causing a remote denial of service condition.
CVE-2019-6566 High 2019-05-09 Not applicable No public exploit GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to replace the uninstaller with a malicious version, which could allow an attacker to gain administrator privileges to the system.
CVE-2019-6564 High 2019-05-09 Not applicable No public exploit GE Communicator, all versions prior to 4.0.517, allows a non-administrative user to place malicious files within the installer file directory, which may allow an attacker to gain administrative privileges on a system during installation or upgrade.
CVE-2019-6546 High 2019-05-09 Not applicable No public exploit GE Communicator, all versions prior to 4.0.517, allows an attacker to place malicious files within the working directory of the program, which may allow an attacker to manipulate widgets and UI elements.
CVE-2017-7908 High 2018-10-02 Not applicable No public exploit A heap-based buffer overflow exists in the third-party product Gigasoft, v5 and prior, included in GE Communicator 3.15 and prior. A malicious HTML file that loads the ActiveX controls can trigger the vulnerability via unchecked function calls.
CVE-2013-1302 High 2013-05-15 Not applicable No public exploit Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."
CVE-2011-4040 High 2011-11-21 Not applicable Working exploit published Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet.
CVE-2009-0194 High 2009-05-11 Not applicable No public exploit The domain-locking implementation in the GARMINAXCONTROL.GarminAxControl_t.1 ActiveX control in npGarmin.dll in the Garmin Communicator Plug-In 2.6.4.0 does not properly enforce the restrictions that (1) download and (2) upload requests come from a web site specified by the user, which allows remote attackers to obtain sensitive information or reconfigure Garmin GPS devices via unspecified vectors related to a "synchronisation error."
CVE-2008-3068 High 2008-07-07 Not applicable No public exploit Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.
CVE-2002-2248 High 2002-12-31 Not applicable No public exploit Buffer overflow in the sun.awt.windows.WDefaultFontCharset Java class implementation in Netscape 4.0 allows remote attackers to execute arbitrary code via an applet that calls the WDefaultFontCharset constructor with a long string and invokes the canConvert method.
CVE-2002-0593 High 2002-06-18 Not applicable No public exploit Buffer overflow in Netscape 6 and Mozilla 1.0 RC1 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long channel name in an IRC URI.
CVE-2001-0596 High 2001-08-02 Not applicable Working exploit published Netscape Communicator before 4.77 allows remote attackers to execute arbitrary Javascript via a GIF image whose comment contains the Javascript.
CVE-2000-1187 High 2001-01-09 Not applicable No public exploit Buffer overflow in the HTML parser for Netscape 4.75 and earlier allows remote attackers to execute arbitrary commands via a long password value in a form field.
CVE-2000-0711 High 2000-10-20 Not applicable Working exploit published Netscape Communicator does not properly prevent a ServerSocket object from being created by untrusted entities, which allows remote attackers to create a server on the victim's system via a malicious applet, as demonstrated by Brown Orifice.
CVE-1999-1189 High 1999-11-24 Not applicable No public exploit Buffer overflow in Netscape Navigator/Communicator 4.7 for Windows 95 and Windows 98 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long argument after the ? character in a URL that references an .asp, .cgi, .html, or .pl file.
CVE-1999-1357 High 1999-10-05 Not applicable No public exploit Netscape Communicator 4.04 through 4.7 (and possibly other versions) in various UNIX operating systems converts the 0x8b character to a "<" sign, and the 0x9b character to a ">" sign, which could allow remote attackers to attack other clients via cross-site scripting (CSS) in CGI programs that do not filter these characters.
CVE-1999-0440 High 1999-03-01 No exploit published No public exploit The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
CVE-1999-0537 High 1998-04-01 Not applicable No public exploit A configuration in a web browser such as Internet Explorer or Netscape Navigator allows execution of active content such as ActiveX, Java, Javascript, etc.