Overview 4 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
4matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
1public PoC25.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
25.0%
Not applicable
3
75.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
4
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
1
25.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
3
75.0%
split by
peak 1 / month
Aug 171
Not applicable1
Medium1
not blocked1
No public exploit1
Sep 170
Oct 170
Nov 170
Dec 170
Jan 180
Feb 180
Mar 180
Apr 180
May 180
Jun 181
Not applicable1
Medium1
not blocked1
No public exploit1
Jul 180
Aug 180
Sep 180
Oct 181
Outside Waratek scope1
Medium1
not blocked1
Working exploit published1
Nov 180
Dec 181
Not applicable1
Medium1
not blocked1
No public exploit1
Aug 17Oct 17Dec 17Feb 18Apr 18Jun 18Aug 18Oct 18Dec 18
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2018-19039 | Medium | 2018-12-13 | Not applicable | No public exploit | Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions. |
| CVE-2018-18065 | Medium | 2018-10-08 | Outside Waratek scope | Working exploit published | _set_key in agent/helpers/table_container.c in Net-SNMP before 5.8 has a NULL Pointer Exception bug that can be used by an authenticated attacker to remotely cause the instance to crash via a crafted UDP packet, resulting in Denial of Service. |
| CVE-2018-12099 | Medium | 2018-06-11 | Not applicable | No public exploit | Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links. |
| CVE-2017-12422 | Medium | 2017-08-29 | Not applicable | No public exploit | NetApp StorageGRID Webscale 10.2.x before 10.2.2.3, 10.3.x before 10.3.0.4, and 10.4.x before 10.4.0.2 allow remote authenticated users to delete arbitrary objects via unspecified vectors. |