WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product diagnostics✕
Overview 16 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 5 public PoC · 0 EPSS ≥ 0.5
16matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 5public PoC31.2% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 16 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 16 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 16 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 4 25.0% Proof of concept only 1 6.2% Forecast only 0 0.0% No public exploit 11 68.8%
split by peak 2 / year
Not applicable: 16 Medium: 16 not blocked: 16 No public exploit: 11Proof of concept only: 1Working exploit published: 4
20071 Not applicable1 Medium1 not blocked1 Working exploit published1 20082 Not applicable2 Medium2 not blocked2 No public exploit2 20090 20102 Not applicable2 Medium2 not blocked2 Working exploit published2 20112 Not applicable2 Medium2 not blocked2 No public exploit2 20120 20131 Not applicable1 Medium1 not blocked1 Working exploit published1 20140 20150 20160 20170 20182 Not applicable2 Medium2 not blocked2 No public exploit2 20191 Not applicable1 Medium1 not blocked1 No public exploit1 20200 20211 Not applicable1 Medium1 not blocked1 No public exploit1 20220 20232 Not applicable2 Medium2 not blocked2 No public exploit2 20241 Not applicable1 Medium1 not blocked1 No public exploit1 20250 20261 Not applicable1 Medium1 not blocked1 Proof of concept only1
2008201020122014201620182020202220242026
16 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-0827 Medium 2026-04-15 Not applicable Proof of concept only During an internal security assessment, a potential vulnerability was discovered in Lenovo Diagnostics and the HardwareScanAddin used in Lenovo Vantage that, during installation or when using hardware scan, could allow a local authenticated user to perform an arbitrary file write with elevated privileges.
CVE-2024-41175 Medium 2024-08-27 Not applicable No public exploit The IPC-Diagnostics package included in TwinCAT/BSD is vulnerable to a local denial-of-service attack by a low privileged attacker.
CVE-2022-3698 Medium 2023-10-25 Not applicable No public exploit A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and  Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash.
CVE-2022-0353 Medium 2023-10-25 Not applicable No public exploit A denial of service vulnerability was reported in the Lenovo HardwareScanPlugin versions prior to 1.3.1.2 and  Lenovo Diagnostics versions prior to 4.45 that could allow a local user with administrative access to trigger a system crash.
CVE-2020-12526 Medium 2021-05-13 Not applicable No public exploit TwinCAT OPC UA Server in versions up to 2.3.0.12 and IPC Diagnostics UA Server in versions up to 3.1.0.1 from Beckhoff Automation GmbH & Co. KG are vulnerable to denial of service attacks. The attacker needs to send several specifically crafted requests to the running OPC UA server. After some of these requests the OPC UA server is no longer responsive to any client. This is without effect to the real-time functionality of IPCs.
CVE-2019-0390 Medium 2019-11-13 Not applicable No public exploit Under certain conditions SAP Data Hub (corrected in DH_Foundation version 2) allows an attacker to access information which would otherwise be restricted. Connection details that are maintained in Connection Manager are visible to users.
CVE-2016-8522 Medium 2018-02-15 Not applicable No public exploit A cross-site scripting vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.
CVE-2016-8521 Medium 2018-02-15 Not applicable No public exploit A Remote click jacking vulnerability in HPE Diagnostics version 9.24 IP1, 9.26 , 9.26IP1 was found.
CVE-2013-3575 Medium 2013-06-14 Not applicable Working exploit published hpdiags/frontend2/help/pageview.php in HP Insight Diagnostics 9.4.0.4710 does not properly restrict PHP include or require statements, which allows remote attackers to include arbitrary hpdiags/frontend2/help/ .html files via the path parameter.
CVE-2011-2957 Medium 2011-07-28 Not applicable No public exploit Unspecified vulnerability in Rockwell Automation FactoryTalk Diagnostics Viewer before V2.30.00 (CPR9 SR3) allows local users to execute arbitrary code via a crafted FactoryTalk Diagnostics Viewer (.ftd) configuration file, which triggers memory corruption.
CVE-2011-0892 Medium 2011-03-29 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in HP Diagnostics 7.5x and 8.0x before 8.05.54.225 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.
CVE-2010-4111 Medium 2010-12-22 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2010-3003 Medium 2010-09-10 Not applicable Working exploit published Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.0-11 on Linux allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-1438 Medium 2008-05-13 Not applicable No public exploit Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.
CVE-2008-1437 Medium 2008-05-13 Not applicable No public exploit Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438.
CVE-2007-6513 Medium 2007-12-21 Not applicable Working exploit published HP eSupportDiagnostics ActiveX control (hpediag.dll) 1.0.11.0 exports dangerous methods, which allows remote attackers to (1) read arbitrary files via the ReadTextFile method, or (2) read arbitrary registry values via the ReadValue method.