WaratekVRT Sign in
Reset
More filters (2)
Columns
Including CVEs outside Waratek scope✕Protection: None✕Product storagegrid webscale✕
Overview 8 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 2 public PoC · 0 EPSS ≥ 0.5
8matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 2public PoC25.0% 0EPSS ≥ 0.50.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 4 50.0% Not applicable 4 50.0% Withdrawn CVE 0 0.0%
Critical 1 12.5% High 3 37.5% Medium 4 50.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 8 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 1 12.5% Proof of concept only 2 25.0% Forecast only 0 0.0% No public exploit 5 62.5%
split by peak 2 / month
Not applicable: 4Outside Waratek scope: 4 Medium: 4High: 3Critical: 1 not blocked: 8 No public exploit: 5Proof of concept only: 2Working exploit published: 1
Aug 171 Not applicable1 Medium1 not blocked1 No public exploit1 Sep 170 Oct 170 Nov 171 Outside Waratek scope1 High1 not blocked1 Proof of concept only1 Dec 170 Jan 181 Outside Waratek scope1 High1 not blocked1 No public exploit1 Feb 180 Mar 180 Apr 180 May 180 Jun 181 Not applicable1 Medium1 not blocked1 No public exploit1 Jul 180 Aug 180 Sep 180 Oct 182 Outside Waratek scope2 High1 Medium1 not blocked2 Working exploit published1 Proof of concept only1 Nov 181 Not applicable1 Critical1 not blocked1 No public exploit1 Dec 181 Not applicable1 Medium1 not blocked1 No public exploit1
Aug 17Oct 17Dec 17Feb 18Apr 18Jun 18Aug 18Oct 18Dec 18
8 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2018-19039 Medium 2018-12-13 Not applicable No public exploit Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.
CVE-2018-5495 Critical 2018-11-14 Not applicable No public exploit All StorageGRID Webscale versions are susceptible to a vulnerability which could permit an unauthenticated attacker to communicate with systems on the same network as the StorageGRID Webscale Admin Node via HTTP or to take over services on the Admin Node.
CVE-2018-18066 High 2018-10-08 Outside Waratek scope Proof of concept only snmp_oid_compare in snmplib/snmp_api.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an unauthenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVE-2018-18065 Medium 2018-10-08 Outside Waratek scope Working exploit published _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service.
CVE-2018-12099 Medium 2018-06-11 Not applicable No public exploit Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links.
CVE-2016-10708 High 2018-01-21 Outside Waratek scope No public exploit sshd in OpenSSH before 7.4 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an out-of-sequence NEWKEYS message, as demonstrated by Honggfuzz, related to kex.c and packet.c.
CVE-2016-8610 High 2017-11-13 Outside Waratek scope Proof of concept only A denial of service flaw was found in OpenSSL 0.9.8, 1.0.1, 1.0.2 through 1.0.2h, and 1.1.0 in the way the TLS/SSL protocol defined processing of ALERT packets during a connection handshake. A remote attacker could use this flaw to make a TLS/SSL server consume an excessive amount of CPU and fail to accept connections from other clients.
CVE-2017-12422 Medium 2017-08-29 Not applicable No public exploit NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to delete arbitrary objects via unspecified vectors.