WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product diagnostics✕
Overview 26 matches · 2 in Waratek scope · 1 protected · 6 exploited · 4 CISA KEV · 5 public PoC · 1 EPSS ≥ 0.5
26matches 2in Waratek scope7.7% 1protected3.8% 6exploited23.1% 4CISA KEV15.4% 5public PoC19.2% 1EPSS ≥ 0.53.8%
Protected by Waratek 1 3.8% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 1 3.8% Outside Waratek scope 0 0.0% Not applicable 24 92.3% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 26 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 1 3.8% partly blocked 0 0.0% not blocked 25 96.2% not established 0 0.0% unrecorded 0 0.0%
Exploited 6 23.1% Working exploit published 2 7.7% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 18 69.2%
split by peak 3 / year
Not applicable: 24No exploit published: 1Protected by Waratek: 1 High: 26 not blocked: 25blocked by ARMR today: 1 No public exploit: 18Working exploit published: 2Exploited: 6
20031 Not applicable1 High1 not blocked1 No public exploit1 20040 20050 20063 Protected by Waratek1 No exploit published1 Not applicable1 High3 blocked by ARMR today1 not blocked2 No public exploit3 20070 20081 Not applicable1 High1 not blocked1 No public exploit1 20090 20100 20110 20121 Not applicable1 High1 not blocked1 Working exploit published1 20133 Not applicable3 High3 not blocked3 Working exploit published1 No public exploit2 20140 20151 Not applicable1 High1 not blocked1 Exploited1 20161 Not applicable1 High1 not blocked1 No public exploit1 20171 Not applicable1 High1 not blocked1 Exploited1 20180 20190 20202 Not applicable2 High2 not blocked2 No public exploit2 20213 Not applicable3 High3 not blocked3 Exploited3 20223 Not applicable3 High3 not blocked3 No public exploit3 20232 Not applicable2 High2 not blocked2 Exploited1 No public exploit1 20242 Not applicable2 High2 not blocked2 No public exploit2 20250 20262 Not applicable2 High2 not blocked2 No public exploit2
200420062008201020122014201620182020202220242026
26 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-69805 High 2026-09-08 Not applicable No public exploit External control of file name or path in .NET allows an unauthorized attacker to elevate privileges over a network.
CVE-2026-25193 High 2026-05-25 Not applicable No public exploit Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.  Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted. Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.
CVE-2024-41174 High 2024-08-27 Not applicable No public exploit The IPC-Diagnostics package in TwinCAT/BSD is susceptible to improper input neutralization by a low-privileged local attacker.
CVE-2024-41173 High 2024-08-27 Not applicable No public exploit The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local authentication bypass by a low privileged attacker.
CVE-2023-5739 High 2023-10-31 Not applicable No public exploit Certain versions of HP PC Hardware Diagnostics Windows are potentially vulnerable to elevation of privilege.
CVE-2022-3699 High 2023-10-25 Not applicable Exploited A privilege escalation vulnerability was reported in the Lenovo HardwareScanPlugin prior to version 1.3.1.2 and Lenovo Diagnostics prior to version 4.45 that could allow a local user to execute code with elevated privileges.
CVE-2022-29149 High 2022-06-15 Not applicable No public exploit Open Management Infrastructure (OMI) Elevation of Privilege Vulnerability
CVE-2022-24396 High 2022-03-10 Not applicable No public exploit The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via localhost on http port 3005. Due to lack of authentication checks, an attacker could access administrative or other privileged functionalities and read, modify, or delete sensitive information and configurations.
CVE-2022-22547 High 2022-03-10 Not applicable No public exploit Simple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access information which would otherwise be restricted via a random port 9000-65535. This allows information gathering which could be used exploit future open-source security exploits.
CVE-2021-38649 High 2021-09-15 Not applicable Exploited Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38648 High 2021-09-15 Not applicable Exploited Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2021-38645 High 2021-09-15 Not applicable Exploited Open Management Infrastructure Elevation of Privilege Vulnerability
CVE-2020-5807 High 2020-12-29 Not applicable No public exploit An unauthenticated remote attacker can send data to RsvcHost.exe listening on TCP port 5241 to add entries in the FactoryTalk Diagnostics event log. The attacker can specify long fields in the log entry, which can cause an unhandled exception in wcscpy_s() if a local user opens FactoryTalk Diagnostics Viewer (FTDiagViewer.exe) to view the log entry. Observed in FactoryTalk Diagnostics 6.11. All versions of FactoryTalk Diagnostics are affected.
CVE-2020-8338 High 2020-10-14 Not applicable No public exploit A DLL search path vulnerability was reported in Lenovo Diagnostics prior to version 4.35.4 that could allow a user with local access to execute code on the system.
CVE-2015-2291 High 2017-08-09 Not applicable Exploited (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows allows local users to cause a denial of service or possibly execute arbitrary code with kernel privileges via a crafted (a) 0x80862013, (b) 0x8086200B, (c) 0x8086200F, or (d) 0x80862007 IOCTL call.
CVE-2016-3231 High 2016-06-16 Not applicable No public exploit The Standard Collector service in Windows Diagnostics Hub mishandles library loading, which allows local users to gain privileges via a crafted application, aka "Windows Diagnostics Hub Elevation of Privilege Vulnerability."
CVE-2015-4051 High 2015-06-08 Not applicable Exploited Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a denial of service (reboot or shutdown), create arbitrary users, or possibly have unspecified other impact via a crafted request, as demonstrated by a beckhoff.com:service:cxconfig:1#Write SOAP action to /upnpisapi.
CVE-2013-3574 High 2013-06-14 Not applicable Working exploit published Absolute path traversal vulnerability in hpdiags/frontend2/commands/saveCompareConfig.php in HP Insight Diagnostics 9.4.0.4710 allows remote attackers to write data to arbitrary files via a full pathname in the argument to the devicePath (aka mount) parameter.
CVE-2013-3573 High 2013-06-14 Not applicable No public exploit HP Insight Diagnostics 9.4.0.4710 allows remote attackers to conduct unspecified injection attacks via unknown vectors.
CVE-2012-3278 High 2013-01-25 Not applicable No public exploit Stack-based buffer overflow in magentservice.exe in HP Diagnostics Server 8.x through 8.07 and 9.x through 9.21 allows remote attackers to execute arbitrary code via a malformed message packet.
CVE-2011-4789 High 2012-01-13 Not applicable Working exploit published Stack-based buffer overflow in magentservice.exe in the server in HP LoadRunner 11.00 before patch 4 allows remote attackers to execute arbitrary code via a crafted size value in a packet. NOTE: it was originally reported that the affected product is HP Diagnostics Server, but HP states that "the vulnerable product is actually HP LoadRunner."
CVE-2008-3542 High 2008-10-02 Not applicable No public exploit Unspecified vulnerability in HP Insight Diagnostics before 7.9.1.2402 allows remote attackers to read arbitrary files via unknown vectors.
CVE-2006-1037 High 2006-03-07 Protected by Waratek No public exploit SQL injection vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to execute arbitrary SQL commands via unknown attack vectors.
CVE-2006-1036 High 2006-03-07 Not applicable No public exploit Multiple unspecified vulnerabilities in the Oracle Diagnostics module 2.2 and earlier have unknown impact and attack vectors, related to "permissions."
CVE-2006-1035 High 2006-03-07 No exploit published No public exploit Unspecified vulnerability in the Oracle Diagnostics module 2.2 and earlier allows remote attackers to access diagnostics tests via unknown attack vectors.
CVE-2003-1495 High 2003-12-31 Not applicable No public exploit Unspecified vulnerability in the non-SSL web agent in various HP Management Agent products allows local users or remote attackers to gain privileges or cause a denial of service via unknown attack vectors.