WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product plot✕
Overview 14 matches · 2 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 1 EPSS ≥ 0.5
14matches 2in Waratek scope14.3% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 0public PoC0.0% 1EPSS ≥ 0.57.1%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 2 14.3% Outside Waratek scope 0 0.0% Not applicable 12 85.7% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 14 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 14 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 1 7.1% No public exploit 13 92.9%
split by peak 7 / year
Not applicable: 12No exploit published: 2 Medium: 14 not blocked: 14 No public exploit: 13Forecast only: 1
20171 Not applicable1 Medium1 not blocked1 No public exploit1 20180 20191 Not applicable1 Medium1 not blocked1 No public exploit1 20202 No exploit published1 Not applicable1 Medium2 not blocked2 No public exploit2 20211 Not applicable1 Medium1 not blocked1 No public exploit1 20221 No exploit published1 Medium1 not blocked1 Forecast only1 20231 Not applicable1 Medium1 not blocked1 No public exploit1 20240 20257 Not applicable7 Medium7 not blocked7 No public exploit7
201720182019202020212022202320242025
14 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2013-1424 Medium 2025-06-26 Not applicable No public exploit Buffer overflow vulnerability in matplotlib.This issue affects matplotlib: before upstream commit ba4016014cb4fb4927e36ce8ea429fed47dcb787.
CVE-2025-31177 Medium 2025-05-07 Not applicable No public exploit gnuplot is affected by a heap buffer overflow at function utf8_copy_one.
CVE-2025-31181 Medium 2025-03-27 Not applicable No public exploit A flaw was found in gnuplot. The X11_graphics() function may lead to a segmentation fault and cause a system crash.
CVE-2025-31180 Medium 2025-03-27 Not applicable No public exploit A flaw was found in gnuplot. The CANVAS_text() function may lead to a segmentation fault and cause a system crash.
CVE-2025-31179 Medium 2025-03-27 Not applicable No public exploit A flaw was found in gnuplot. The xstrftime() function may lead to a segmentation fault, causing a system crash.
CVE-2025-31178 Medium 2025-03-27 Not applicable No public exploit A flaw was found in gnuplot. The GetAnnotateString() function may lead to a segmentation fault and cause a system crash.
CVE-2025-31176 Medium 2025-03-27 Not applicable No public exploit A flaw was found in gnuplot. The plot3d_points() function may lead to a segmentation fault and cause a system crash.
CVE-2023-30874 Medium 2023-08-17 Not applicable No public exploit Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Steve Curtis, St. Pete Design Gps Plotter plugin <= 5.1.4 versions.
CVE-2022-34783 Medium 2022-06-30 No exploit published Forecast only Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVE-2021-44917 Medium 2021-12-21 Not applicable No public exploit A Divide by Zero vulnerability exists in gnuplot 5.4 in the boundary3d function in graph3d.c, which could cause a Arithmetic exception and application crash.
CVE-2020-2265 Medium 2020-09-16 No exploit published No public exploit Jenkins Coverage/Complexity Scatter Plot Plugin 1.1.1 and earlier does not escape the method information in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide report files to the plugin's post-build step.
CVE-2015-5484 Medium 2020-01-15 Not applicable No public exploit Cross-site scripting (XSS) vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via a post.
CVE-2015-9347 Medium 2019-08-27 Not applicable No public exploit The wp-plotly plugin before 1.0.3 for WordPress has XSS by authors.
CVE-2017-1000006 Medium 2017-07-17 Not applicable No public exploit Plotly, Inc. plotly.js versions prior to 1.16.0 are vulnerable to an XSS issue.