WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product evm✕
Overview 12 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
12matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 1public PoC8.3% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 12 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 12 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 12 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 8.3% Proof of concept only 1 8.3% Forecast only 0 0.0% No public exploit 10 83.3%
split by peak 3 / year
Not applicable: 12 Medium: 12 not blocked: 12 No public exploit: 10Proof of concept only: 1Working exploit published: 1
20011 Not applicable1 Medium1 not blocked1 No public exploit1 20020 20030 20040 20050 20060 20072 Not applicable2 Medium2 not blocked2 Working exploit published1 No public exploit1 20080 20090 20100 20112 Not applicable2 Medium2 not blocked2 No public exploit2 20120 20130 20140 20150 20160 20170 20180 20191 Not applicable1 Medium1 not blocked1 No public exploit1 20200 20211 Not applicable1 Medium1 not blocked1 No public exploit1 20220 20232 Not applicable2 Medium2 not blocked2 Proof of concept only1 No public exploit1 20243 Not applicable3 Medium3 not blocked3 No public exploit3
200220042006200820102012201420162018202020222024
12 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2024-37159 Medium 2024-06-17 Not applicable No public exploit Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0.
CVE-2024-37154 Medium 2024-06-06 Not applicable No public exploit Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. Users are able to delegate tokens that have not yet been vested. This affects employees and grantees who have funds managed via `ClawbackVestingAccount`. This affects 18.1.0 and earlier.
CVE-2024-32873 Medium 2024-06-06 Not applicable No public exploit Evmos is the Ethereum Virtual Machine (EVM) Hub on the Cosmos Network. The spendable balance is not updated properly when delegating vested tokens. The issue allows a clawback vesting account to anticipate the release of unvested tokens. This vulnerability is fixed in 18.0.0.
CVE-2023-25798 Medium 2023-05-03 Not applicable No public exploit Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Olevmedia Olevmedia Shortcodes plugin <= 1.1.9 versions.
CVE-2023-0168 Medium 2023-02-27 Not applicable Proof of concept only The Olevmedia Shortcodes WordPress plugin through 1.1.9 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVE-2021-29511 Medium 2021-05-12 Not applicable No public exploit evm is a pure Rust implementation of Ethereum Virtual Machine. Prior to the patch, when executing specific EVM opcodes related to memory operations that use `evm_core::Memory::copy_large`, the `evm` crate can over-allocate memory when it is not needed, making it possible for an attacker to perform denial-of-service attack. The flaw was corrected in commit `19ade85`. Users should upgrade to `==0.21.1, ==0.23.1, ==0.24.1, ==0.25.1, >=0.26.1`. There are no workarounds. Please upgrade your `evm` crate version.
CVE-2015-9421 Medium 2019-09-26 Not applicable No public exploit The olevmedia-shortcodes plugin before 1.1.9 for WordPress has CSRF with resultant XSS via the wp-admin/admin-ajax.php?action=omsc_popup id parameter.
CVE-2011-1105 Medium 2011-02-28 Not applicable No public exploit Multiple cross-site scripting (XSS) vulnerabilities in Mutare EVM allow remote attackers to inject arbitrary web script or HTML via (1) a delivery address and possibly (2) a PIN.
CVE-2011-1104 Medium 2011-02-28 Not applicable No public exploit Multiple cross-site request forgery (CSRF) vulnerabilities in Mutare EVM allow remote attackers to hijack the authentication of arbitrary users for requests that (1) change a PIN, (2) delete messages, (3) add a delivery address, or (4) change a delivery address.
CVE-2007-6133 Medium 2007-11-27 Not applicable Working exploit published PHP remote file inclusion vulnerability in admin/kfm/initialise.php in DevMass Shopping Cart 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the kfm_base_path parameter.
CVE-2007-3124 Medium 2007-06-07 Not applicable No public exploit Buffer overflow in backup/src/vmsbackup.c (aka the backup utility) in FreeVMS before 0.3.6 might allow local users to gain privileges via a long string in response to an "extract [ny]" prompt.
CVE-2001-0845 Medium 2001-12-06 Not applicable No public exploit Vulnerability in DECwindows Motif Server on OpenVMS VAX or Alpha 6.2 through 7.3, and SEVMS VAX or Alpha 6.2, allows local users to gain access to unauthorized resources.