WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product linux enterprise debuginfo✕
Overview 14 matches · 0 in Waratek scope · 0 protected · 1 exploited · 1 CISA KEV · 1 public PoC · 2 EPSS ≥ 0.5
14matches 0in Waratek scope0.0% 0protected0.0% 1exploited7.1% 1CISA KEV7.1% 1public PoC7.1% 2EPSS ≥ 0.514.3%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 7.1% Not applicable 13 92.9% Withdrawn CVE 0 0.0%
Critical 14 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 14 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 7.1% Working exploit published 1 7.1% Proof of concept only 0 0.0% Forecast only 1 7.1% No public exploit 11 78.6%
split by peak 8 / quarter
Not applicable: 13Outside Waratek scope: 1 Critical: 14 not blocked: 14 No public exploit: 11Forecast only: 1Working exploit published: 1Exploited: 1
Q3 151 Outside Waratek scope1 Critical1 not blocked1 Exploited1 Q4 150 Q1 160 Q2 168 Not applicable8 Critical8 not blocked8 No public exploit8 Q3 161 Not applicable1 Critical1 not blocked1 No public exploit1 Q4 160 Q1 172 Not applicable2 Critical2 not blocked2 No public exploit2 Q2 170 Q3 170 Q4 171 Not applicable1 Critical1 not blocked1 Working exploit published1 Q1 181 Not applicable1 Critical1 not blocked1 Forecast only1
Q3 15Q4 15Q1 16Q2 16Q3 16Q4 16Q1 17Q2 17Q3 17Q4 17Q1 18
14 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2017-18017 Critical 2018-01-03 Not applicable Forecast only The tcpmss_mangle_packet function in net/netfilter/xt_TCPMSS.c in the Linux kernel before 4.11, and 4.9.x before 4.9.36, allows remote attackers to cause a denial of service (use-after-free and memory corruption) or possibly have unspecified other impact by leveraging the presence of xt_TCPMSS in an iptables action.
CVE-2017-14491 Critical 2017-10-04 Not applicable Working exploit published Heap-based buffer overflow in dnsmasq before 2.78 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a crafted DNS response.
CVE-2014-9847 Critical 2017-03-20 Not applicable No public exploit The jng decoder in ImageMagick 6.8.9.9 allows remote attackers to have an unspecified impact.
CVE-2014-9846 Critical 2017-03-20 Not applicable No public exploit Buffer overflow in the ReadRLEImage function in coders/rle.c in ImageMagick 6.8.9.9 allows remote attackers to have unspecified impact.
CVE-2016-5772 Critical 2016-08-07 Not applicable No public exploit Double free vulnerability in the php_wddx_process_data function in wddx.c in the WDDX extension in PHP before 5.5.37, 5.6.x before 5.6.23, and 7.x before 7.0.8 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted XML data that is mishandled in a wddx_deserialize call.
CVE-2016-5118 Critical 2016-06-10 Not applicable No public exploit The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a filename.
CVE-2016-0718 Critical 2016-05-26 Not applicable No public exploit Expat allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via a malformed input document, which triggers a buffer overflow.
CVE-2015-8779 Critical 2016-04-19 Not applicable No public exploit Stack-based buffer overflow in the catopen function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long catalog name.
CVE-2015-8778 Critical 2016-04-19 Not applicable No public exploit Integer overflow in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via the size argument to the __hcreate_r function, which triggers out-of-bounds heap-memory access.
CVE-2015-8776 Critical 2016-04-19 Not applicable No public exploit The strftime function in the GNU C Library (aka glibc or libc6) before 2.23 allows context-dependent attackers to cause a denial of service (application crash) or possibly obtain sensitive information via an out-of-range time value.
CVE-2014-9761 Critical 2016-04-19 Not applicable No public exploit Multiple stack-based buffer overflows in the GNU C Library (aka glibc or libc6) before 2.23 allow context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a long argument to the (1) nan, (2) nanf, or (3) nanl function.
CVE-2016-2324 Critical 2016-04-08 Not applicable No public exploit Integer overflow in Git before 2.7.4 allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, which triggers a heap-based buffer overflow.
CVE-2016-2315 Critical 2016-04-08 Not applicable No public exploit revision.c in git before 2.7.4 uses an incorrect integer data type, which allows remote attackers to execute arbitrary code via a (1) long filename or (2) many nested trees, leading to a heap-based buffer overflow.
CVE-2015-2590 Critical 2015-07-16 Outside Waratek scope Exploited Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.