WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product manager proxy✕
Overview 7 matches · 0 in Waratek scope · 0 protected · 2 exploited · 2 CISA KEV · 2 public PoC · 3 EPSS ≥ 0.5
7matches 0in Waratek scope0.0% 0protected0.0% 2exploited28.6% 2CISA KEV28.6% 2public PoC28.6% 3EPSS ≥ 0.542.9%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 1 14.3% Not applicable 6 85.7% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 7 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 7 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 28.6% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 1 14.3% No public exploit 4 57.1%
split by peak 3 / month
Not applicable: 6Outside Waratek scope: 1 Medium: 7 not blocked: 7 No public exploit: 4Forecast only: 1Exploited: 2
Mar 161 Not applicable1 Medium1 not blocked1 Forecast only1 Apr 160 May 163 Outside Waratek scope1 Not applicable2 Medium3 not blocked3 Exploited2 No public exploit1 Jun 160 Jul 162 Not applicable2 Medium2 not blocked2 No public exploit2 Aug 160 Sep 160 Oct 160 Nov 160 Dec 160 Jan 171 Not applicable1 Medium1 not blocked1 No public exploit1
Mar 16Apr 16May 16Jun 16Jul 16Aug 16Sep 16Oct 16Nov 16Dec 16Jan 17
7 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2015-7976 Medium 2017-01-30 Not applicable No public exploit The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.
CVE-2016-4956 Medium 2016-07-05 Not applicable No public exploit ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service (interleaved-mode transition and time change) via a spoofed broadcast packet. NOTE: this vulnerability exists because of an incomplete fix for CVE-2016-1548.
CVE-2016-4955 Medium 2016-07-05 Not applicable No public exploit ntpd in NTP 4.x before 4.2.8p8, when autokey is enabled, allows remote attackers to cause a denial of service (peer-variable clearing and association outage) by sending (1) a spoofed crypto-NAK packet or (2) a packet with an incorrect MAC value at a certain time.
CVE-2016-0264 Medium 2016-05-24 Outside Waratek scope No public exploit Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2016-3718 Medium 2016-05-05 Not applicable Exploited The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.
CVE-2016-3715 Medium 2016-05-05 Not applicable Exploited The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2016-1285 Medium 2016-03-09 Not applicable Forecast only named in ISC BIND 9.x before 9.9.8-P4 and 9.10.x before 9.10.3-P4 does not properly handle DNAME records when parsing fetch reply messages, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a malformed packet to the rndc (aka control channel) interface, related to alist.c and sexpr.c.