WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Product workstation✕
Overview 2,478 matches · 92 in Waratek scope · 65 protected · 90 exploited · 64 CISA KEV · 196 public PoC · 91 EPSS ≥ 0.5
2,478matches 92in Waratek scope3.7% 65protected2.6% 90exploited3.6% 64CISA KEV2.6% 196public PoC7.9% 91EPSS ≥ 0.53.7%
Protected by Waratek 67 2.7% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 25 1.0% Outside Waratek scope 174 7.0% Not applicable 2,212 89.3% Withdrawn CVE 0 0.0%
Critical 282 11.4% High 1,092 44.1% Medium 978 39.5% Low 126 5.1% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 65 2.6% partly blocked 2 0.1% not blocked 2,411 97.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 90 3.6% Working exploit published 128 5.2% Proof of concept only 16 0.6% Forecast only 17 0.7% No public exploit 2,227 89.9%
split by peak 639 / year
Not applicable: 2,212Outside Waratek scope: 174No exploit published: 25Protected by Waratek: 67 Low: 126Medium: 978High: 1,092Critical: 282 not blocked: 2,411partly blocked: 2blocked by ARMR today: 65 No public exploit: 2,227Forecast only: 17Proof of concept only: 16Working exploit published: 128Exploited: 90
19991 Not applicable1 High1 not blocked1 Working exploit published1 20001 Not applicable1 Low1 not blocked1 No public exploit1 20014 Not applicable4 High2 Medium1 Low1 not blocked4 No public exploit4 20026 Not applicable6 High1 Medium5 not blocked6 Working exploit published1 No public exploit5 200313 Not applicable13 High6 Medium5 Low2 not blocked13 Exploited2 Working exploit published2 No public exploit9 200422 Not applicable22 High10 Medium11 Low1 not blocked22 Working exploit published2 No public exploit20 200544 Not applicable44 High19 Medium22 Low3 not blocked44 Working exploit published3 No public exploit41 20066 Not applicable6 High3 Medium2 Low1 not blocked6 Working exploit published2 No public exploit4 200732 Outside Waratek scope1 Not applicable31 High16 Medium11 Low5 not blocked32 Working exploit published3 No public exploit29 200836 Outside Waratek scope1 Not applicable35 High18 Medium15 Low3 not blocked36 Working exploit published6 No public exploit30 200927 Not applicable27 Critical1 High14 Medium9 Low3 not blocked27 Exploited4 Working exploit published2 No public exploit21 201026 Not applicable26 Critical3 High13 Medium8 Low2 not blocked26 Working exploit published3 No public exploit23 201124 Not applicable24 High3 Medium16 Low5 not blocked24 Working exploit published1 Proof of concept only1 No public exploit22 2012115 No exploit published1 Outside Waratek scope4 Not applicable110 Critical3 High66 Medium41 Low5 not blocked115 Exploited5 Working exploit published5 Proof of concept only1 No public exploit104 201397 Protected by Waratek1 Outside Waratek scope4 Not applicable92 Critical6 High46 Medium40 Low5 blocked by ARMR today1 not blocked96 Exploited7 Working exploit published4 No public exploit86 2014139 Outside Waratek scope12 Not applicable127 Critical12 High38 Medium68 Low21 not blocked139 Exploited7 Proof of concept only1 Forecast only3 No public exploit128 2015191 No exploit published4 Outside Waratek scope12 Not applicable175 Critical11 High71 Medium91 Low18 not blocked191 Exploited14 Working exploit published5 Forecast only1 No public exploit171 2016228 Protected by Waratek2 No exploit published3 Outside Waratek scope5 Not applicable218 Critical24 High120 Medium76 Low8 blocked by ARMR today2 not blocked226 Exploited9 Working exploit published24 Proof of concept only1 Forecast only5 No public exploit189 2017302 Protected by Waratek17 No exploit published6 Outside Waratek scope48 Not applicable231 Critical49 High141 Medium104 Low8 blocked by ARMR today15 partly blocked2 not blocked285 Exploited9 Working exploit published23 Proof of concept only2 Forecast only1 No public exploit267 2018639 Protected by Waratek27 No exploit published2 Outside Waratek scope48 Not applicable562 Critical132 High246 Medium252 Low9 blocked by ARMR today27 not blocked612 Exploited13 Working exploit published26 Proof of concept only2 Forecast only2 No public exploit596 2019315 Protected by Waratek14 No exploit published8 Outside Waratek scope32 Not applicable261 Critical29 High145 Medium124 Low17 blocked by ARMR today14 not blocked301 Exploited6 Working exploit published14 Proof of concept only2 Forecast only3 No public exploit290 202080 Protected by Waratek6 No exploit published1 Outside Waratek scope2 Not applicable71 Critical1 High44 Medium27 Low8 blocked by ARMR today6 not blocked74 Exploited1 Working exploit published1 Forecast only1 No public exploit77 202115 Outside Waratek scope3 Not applicable12 Critical1 High7 Medium7 not blocked15 Exploited2 No public exploit13 202232 Outside Waratek scope2 Not applicable30 High18 Medium14 not blocked32 Exploited3 Proof of concept only1 No public exploit28 202354 Not applicable54 Critical1 High31 Medium22 not blocked54 Exploited1 Proof of concept only2 Forecast only1 No public exploit50 202423 Not applicable23 Critical8 High10 Medium5 not blocked23 Exploited4 Proof of concept only1 No public exploit18 20255 Not applicable5 Critical1 High2 Medium2 not blocked5 Exploited2 Proof of concept only2 No public exploit1 20261 Not applicable1 High1 not blocked1 Exploited1
1999200220052008201120142017202020232026
2,478 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 1 of 25 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2026-31431 High 2026-04-22 Not applicable Exploited In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly.
CVE-2025-8612 High 2025-08-20 Not applicable No public exploit AOMEI Backupper Workstation Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of AOMEI Backupper Workstation. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. User interaction on the part of an administrator is needed additionally. The specific flaw exists within the restore functionality. By creating a junction, an attacker can abuse the service to create arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-27059.
CVE-2025-3981 Medium 2025-04-27 Not applicable Proof of concept only A vulnerability, which was classified as problematic, has been found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0. This issue affects some unknown processing of the file /v1/prescription/details/. The manipulation leads to improper authorization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-3980 Medium 2025-04-27 Not applicable Proof of concept only A vulnerability classified as problematic was found in wowjoy 浙江湖州华卓信息科技有限公司 Internet Doctor Workstation System 1.0. This vulnerability affects unknown code of the file /v1/prescription/list. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVE-2025-22226 High 2025-03-04 Not applicable Exploited VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability due to an out-of-bounds read in HGFS. A malicious actor with administrative privileges to a virtual machine may be able to exploit this issue to leak memory from the vmx process.
CVE-2025-22224 Critical 2025-03-04 Not applicable Exploited VMware ESXi, and Workstation contain a TOCTOU (Time-of-Check Time-of-Use) vulnerability that leads to an out-of-bounds write. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
CVE-2024-50489 Critical 2024-10-28 Not applicable Proof of concept only Authentication Bypass Using an Alternate Path or Channel vulnerability in realtyworkstation Realty Workstation realty-workstation allows Authentication Bypass.This issue affects Realty Workstation: from n/a through <= 1.0.45.
CVE-2022-27540 High 2024-06-28 Not applicable No public exploit A potential Time-of-Check to Time-of Use (TOCTOU) vulnerability has been identified in the HP BIOS for certain HP PC products, which might allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.
CVE-2022-37020 Medium 2024-06-10 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS for certain HP PC products, which might allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.
CVE-2022-37019 Medium 2024-06-10 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS for certain HP PC products which may allow escalation of privileges and code execution. HP is releasing firmware updates to mitigate the potential vulnerabilities.
CVE-2024-22273 High 2024-05-21 Not applicable No public exploit The storage controllers on VMware ESXi, Workstation, and Fusion have out-of-bounds read/write vulnerability. A malicious actor with access to a virtual machine with storage controllers enabled may exploit this issue to create a denial of service condition or execute code on the hypervisor from a virtual machine in conjunction with other issues.
CVE-2024-22270 High 2024-05-14 Not applicable No public exploit VMware Workstation and Fusion contain an information disclosure vulnerability in the Host Guest File Sharing (HGFS) functionality. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.
CVE-2024-22269 High 2024-05-14 Not applicable No public exploit VMware Workstation and Fusion contain an information disclosure vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.
CVE-2024-22268 High 2024-05-14 Not applicable No public exploit VMware Workstation and Fusion contain a heap buffer-overflow vulnerability in the Shader functionality. A malicious actor with non-administrative access to a virtual machine with 3D graphics enabled may be able to exploit this vulnerability to create a denial of service condition.
CVE-2024-22267 Critical 2024-05-14 Not applicable No public exploit VMware Workstation and Fusion contain a use-after-free vulnerability in the vbluetooth device. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host.
CVE-2024-22255 High 2024-03-05 Not applicable Exploited VMware ESXi, Workstation, and Fusion contain an information disclosure vulnerability in the UHCI USB controller. A malicious actor with administrative access to a virtual machine may be able to exploit this issue to leak memory from the vmx process.  
CVE-2024-22253 Critical 2024-03-05 Not applicable Exploited VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the UHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
CVE-2024-22252 Critical 2024-03-05 Not applicable Exploited VMware ESXi, Workstation, and Fusion contain a use-after-free vulnerability in the XHCI USB controller. A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
CVE-2024-22251 Medium 2024-02-29 Not applicable No public exploit VMware Workstation and Fusion contain an out-of-bounds read vulnerability in the USB CCID (chip card interface device). A malicious actor with local administrative privileges on a virtual machine may trigger an out-of-bounds read leading to information disclosure.
CVE-2023-6138 High 2024-02-14 Not applicable No public exploit A potential security vulnerability has been identified in the system BIOS for certain HP Workstation PCs, which might allow escalation of privilege, arbitrary code execution, or denial of service. HP is releasing mitigation for the potential vulnerability.
CVE-2024-1086 High 2024-01-31 Not applicable Exploited A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation. The nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT. We recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.
CVE-2024-23622 Critical 2024-01-26 Not applicable No public exploit A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution with SYSTEM privileges.
CVE-2024-23621 Critical 2024-01-26 Not applicable No public exploit A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution.
CVE-2024-23620 High 2024-01-26 Not applicable No public exploit An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileges to SYSTEM.
CVE-2024-23619 Critical 2024-01-26 Not applicable No public exploit A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution.
CVE-2024-0409 High 2024-01-18 Not applicable No public exploit A flaw was found in the X.Org server. The cursor code in both Xephyr and Xwayland uses the wrong type of private at creation. It uses the cursor bits type with the cursor as private, and when initiating the cursor, that overwrites the XSELINUX context.
CVE-2024-0408 Medium 2024-01-18 Not applicable No public exploit A flaw was found in the X.Org server. The GLX PBuffer code does not call the XACE hook when creating the buffer, leaving it unlabeled. When the client issues another request to access that resource (as with a GetGeometry) or when it creates another resource that needs to access that buffer, such as a GC, the XSELINUX code will try to use an object that was never labeled and crash because the SID is NULL.
CVE-2023-6816 Critical 2024-01-18 Not applicable No public exploit A flaw was found in X.Org server. Both DeviceFocusEvent and the XIQueryPointer reply contain a bit for each logical button currently down. Buttons can be arbitrarily mapped to any value up to 255, but the X.Org Server was only allocating space for the device's particular number of buttons, leading to a heap overflow if a bigger value was used.
CVE-2023-5455 Medium 2024-01-10 Not applicable No public exploit A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt.
CVE-2023-5869 High 2023-12-10 Not applicable No public exploit A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value modification. This issue exists due to an integer overflow during array modification where a remote user can trigger the overflow by providing specially crafted data. This enables the execution of arbitrary code on the target system, allowing users to write arbitrary bytes to memory and extensively read the server's memory.
CVE-2023-45079 Medium 2023-11-08 Not applicable No public exploit A memory leakage vulnerability was reported in the NvmramSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
CVE-2023-45078 Medium 2023-11-08 Not applicable No public exploit A memory leakage vulnerability was reported in the DustFilterAlertSmm SMM driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
CVE-2023-45077 Medium 2023-11-08 Not applicable No public exploit A memory leakage vulnerability was reported in the 534D0740 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
CVE-2023-45076 Medium 2023-11-08 Not applicable No public exploit A memory leakage vulnerability was reported in the 534D0140 DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
CVE-2023-45075 Medium 2023-11-08 Not applicable No public exploit A memory leakage vulnerability was reported in the SWSMI_Shadow DXE driver that may allow a local attacker with elevated privileges to write to NVRAM variables.
CVE-2023-43581 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the Update_WMI module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-43580 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the SmuV11DxeVMR module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-43579 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the SmuV11Dxe driver in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-43578 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the SmiFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-43577 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the ReFlash module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-43576 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the WMISwSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-43575 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the UltraFunctionTable module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-43574 Medium 2023-11-08 Not applicable No public exploit A buffer over-read was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
CVE-2023-43573 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the LEMALLDriversConnectedEventHook module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-43572 Medium 2023-11-08 Not applicable No public exploit A buffer over-read was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
CVE-2023-43571 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the BiosExtensionLoader module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-43570 Medium 2023-11-08 Not applicable No public exploit A potential vulnerability was reported in the SMI callback function of the OemSmi driver that may allow a local attacker with elevated permissions to execute arbitrary code.
CVE-2023-43569 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the OemSmi module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code. 
CVE-2023-43568 Medium 2023-11-08 Not applicable No public exploit A buffer over-read was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to disclose sensitive information.
CVE-2023-43567 Medium 2023-11-08 Not applicable No public exploit A buffer overflow was reported in the LemSecureBootForceKey module in some Lenovo Desktop products that may allow a local attacker with elevated privileges to execute arbitrary code.
CVE-2023-46847 High 2023-11-03 Not applicable Forecast only Squid is vulnerable to a Denial of Service, where a remote attacker can perform buffer overflow attack by writing up to 2 MB of arbitrary data to heap memory when Squid is configured to accept HTTP Digest Authentication.
CVE-2023-5367 High 2023-10-25 Not applicable No public exploit A out-of-bounds write flaw was found in the xorg-x11-server. This issue occurs due to an incorrect calculation of a buffer offset when copying data stored in the heap in the XIChangeDeviceProperty function in Xi/xiproperty.c and in RRChangeOutputProperty function in randr/rrproperty.c, allowing for possible escalation of privileges or denial of service.
CVE-2023-34044 High 2023-10-20 Not applicable No public exploit VMware Workstation( 17.x prior to 17.5) and Fusion(13.x prior to 13.5) contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine. A malicious actor with local administrative privileges on a virtual machine may be able to read privileged information contained in hypervisor memory from a virtual machine.
CVE-2023-26300 High 2023-10-18 Not applicable No public exploit A potential security vulnerability has been identified in the system BIOS for certain HP PC products which might allow escalation of privilege. HP is releasing firmware updates to mitigate the potential vulnerability.
CVE-2023-3899 High 2023-08-23 Not applicable No public exploit A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the com.redhat.RHSM1.Config.SetAll() method, a low-privileged local user could tamper with the state of the registration, by unregistering the system or by changing the current entitlements. This flaw allows an attacker to set arbitrary configuration directives for /etc/rhsm/rhsm.conf, which can be abused to cause a local privilege escalation to an unconfined root.
CVE-2023-26299 High 2023-06-30 Not applicable No public exploit A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in certain HP PC products using AMI UEFI Firmware (system BIOS), which might allow arbitrary code execution. AMI has released updates to mitigate the potential vulnerability.
CVE-2023-1329 Critical 2023-06-14 Not applicable No public exploit A potential security vulnerability has been identified for certain HP multifunction printers (MFPs). The vulnerability may lead to Buffer Overflow and/or Remote Code Execution when running HP Workpath solutions on potentially affected products.
CVE-2022-31646 High 2023-06-14 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31645 High 2023-06-14 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31644 High 2023-06-14 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31639 High 2023-06-13 Not applicable No public exploit Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31638 High 2023-06-13 Not applicable No public exploit Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31637 High 2023-06-13 Not applicable No public exploit Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31636 High 2023-06-13 Not applicable No public exploit Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-31635 High 2023-06-13 Not applicable No public exploit Potential time-of-check to time-of-use (TOCTOU) vulnerabilities have been identified in the BIOS for certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure.
CVE-2022-43778 High 2023-06-12 Not applicable No public exploit Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVE-2022-43777 High 2023-06-12 Not applicable No public exploit Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVE-2022-27541 High 2023-06-12 Not applicable No public exploit Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVE-2022-27539 High 2023-06-12 Not applicable No public exploit Potential Time-of-Check to Time-of Use (TOCTOU) vulnerabilities have been identified in the HP BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure.
CVE-2023-30768 High 2023-05-12 Not applicable No public exploit Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access.
CVE-2023-20872 High 2023-04-25 Not applicable Proof of concept only VMware Workstation and Fusion contain an out-of-bounds read/write vulnerability in SCSI CD/DVD device emulation.
CVE-2023-20870 Medium 2023-04-25 Not applicable No public exploit VMware Workstation and Fusion contain an out-of-bounds read vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.
CVE-2023-20869 High 2023-04-25 Not applicable No public exploit VMware Workstation (17.x) and VMware Fusion (13.x) contain a stack-based buffer-overflow vulnerability that exists in the functionality for sharing host Bluetooth devices with the virtual machine.
CVE-2023-0494 High 2023-03-27 Not applicable No public exploit A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo() and ProcXkbGetDeviceInfo() to read and write into freed memory. This can lead to local privilege elevation on systems where the X server runs privileged and remote code execution for ssh X forwarding sessions.
CVE-2019-8720 High 2023-03-06 Not applicable Exploited A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.
CVE-2023-20854 High 2023-02-03 Not applicable No public exploit VMware Workstation contains an arbitrary file deletion vulnerability. A malicious actor with local user privileges on the victim's machine may exploit this vulnerability to delete arbitrary files from the file system of the machine on which Workstation is installed.
CVE-2022-4254 High 2023-02-01 Not applicable Proof of concept only sssd: libsss_certmap fails to sanitise certificate data used in LDAP filters
CVE-2022-27538 High 2023-02-01 Not applicable No public exploit A potential Time-of-Check to Time-of-Use (TOCTOU) vulnerability has been identified in the BIOS for certain HP PC products which may allow arbitrary code execution, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate the potential vulnerability.
CVE-2022-27537 High 2023-02-01 Not applicable No public exploit Potential vulnerabilities have been identified in the system BIOS of certain HP PC products, which might allow arbitrary code execution, escalation of privilege, denial of service, and information disclosure. HP is releasing BIOS updates to mitigate these potential vulnerabilities.
CVE-2021-3809 High 2023-02-01 Not applicable No public exploit Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.
CVE-2021-3808 High 2023-02-01 Not applicable No public exploit Potential security vulnerabilities have been identified in the BIOS (UEFI Firmware) for certain HP PC products, which might allow arbitrary code execution. HP is releasing firmware updates to mitigate these potential vulnerabilities.
CVE-2021-3439 High 2023-02-01 Not applicable No public exploit HP has identified a potential vulnerability in BIOS firmware of some Workstation products. Firmware updates are being released to mitigate these potential vulnerabilities.
CVE-2022-40137 Medium 2023-01-30 Not applicable No public exploit A buffer overflow in the WMI SMI Handler in some Lenovo models may allow an attacker with local access and elevated privileges to execute arbitrary code.
CVE-2022-31705 High 2022-12-14 Not applicable Proof of concept only VMware ESXi, Workstation, and Fusion contain a heap out-of-bounds write vulnerability in the USB 2.0 controller (EHCI). A malicious actor with local administrative privileges on a virtual machine may exploit this issue to execute code as the virtual machine's VMX process running on the host. On ESXi, the exploitation is contained within the VMX sandbox whereas, on Workstation and Fusion, this may lead to code execution on the machine where Workstation or Fusion is installed.
CVE-2015-1931 Medium 2022-09-29 Outside Waratek scope No public exploit IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16 FP7, and 5.0 before SR16 FP13 stores plaintext information in memory dumps, which allows local users to obtain sensitive information by reading a file.
CVE-2014-0148 Medium 2022-09-29 Not applicable No public exploit Qemu before 2.0 block driver for Hyper-V VHDX Images is vulnerable to infinite loops and other potential issues when calculating BAT entries, due to missing bounds checks for block_size and logical_sector_size variables. These are used to derive other fields like 'sectors_per_block' etc. A user able to alter the Qemu disk image could ise this flaw to crash the Qemu instance resulting in DoS.
CVE-2014-0147 Medium 2022-09-29 Not applicable No public exploit Qemu before 1.6.2 block diver for the various disk image formats used by Bochs and for the QCOW version 2 format, are vulnerable to a possible crash caused by signed data types or a logic error while creating QCOW2 snapshots, which leads to incorrectly calling update_refcount() routine.
CVE-2014-0144 High 2022-09-29 Not applicable No public exploit QEMU before 2.0.0 block drivers for CLOOP, QCOW2 version 2 and various other image formats are vulnerable to potential memory corruptions, integer/buffer overflows or crash caused by missing input validations which could allow a remote user to execute arbitrary code on the host with the privileges of the QEMU process.
CVE-2022-2739 Medium 2022-09-01 Not applicable No public exploit The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-14370, which was previously fixed via RHSA-2020:5056. This issue could possibly allow an attacker to gain access to sensitive information stored in environment variables.
CVE-2022-2738 High 2022-09-01 Not applicable No public exploit The version of podman as released for Red Hat Enterprise Linux 7 Extras via RHSA-2022:2190 advisory included an incorrect version of podman missing the fix for CVE-2020-8945, which was previously fixed via RHSA-2020:2117. This issue could possibly be used to crash or cause potential code execution in Go applications that use the Go GPGME wrapper library, under certain conditions, during GPG signature verification.
CVE-2022-37953 Medium 2022-08-25 Not applicable No public exploit An HTTP response splitting vulnerability exists in the AM Gateway Challenge-Response dialog of WorkstationST (<v07.09.15) and could allow an attacker to compromise a victim's browser/session. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantly higher than if the attack were conducted on the software in isolation. WorkstationST v07.09.15 can be found in ControlST v07.09.07 SP8 and greater.
CVE-2022-37952 Medium 2022-08-25 Not applicable No public exploit A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an attacker to compromise a victim's browser. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantly higher than if the attack were conducted on the software in isolation. WorkstationST v07.09.15 can be found in ControlST v07.09.07 SP8 and greater.
CVE-2022-22983 Medium 2022-08-10 Not applicable No public exploit VMware Workstation (16.x prior to 16.2.4) contains an unprotected storage of credentials vulnerability. A malicious actor with local user privileges to the victim machine may exploit this vulnerability leading to the disclosure of user passwords of the remote server connected through VMware Workstation.
CVE-2022-1691 Medium 2022-06-08 Not applicable No public exploit The Realty Workstation WordPress plugin before 1.0.15 does not sanitise and escape the trans_edit parameter before using it in a SQL statement when an agent edit a transaction, leading to an SQL injection
CVE-2022-1118 High 2022-05-17 Not applicable Exploited Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 though v6.6.9), and Safety Instrumented System Workstation (v1.2 and prior (for Trusted Controllers)) do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if opened by a local user in Connected Components Workbench, may result in arbitrary code execution. This vulnerability requires user interaction to be successfully exploited
CVE-2022-1227 High 2022-04-29 Not applicable No public exploit A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victim, the vulnerability is triggered after a user runs the 'podman top' command. This action gives the attacker access to the host filesystem, leading to information disclosure or denial of service.
CVE-2022-1018 Medium 2022-04-01 Not applicable No public exploit When opening a malicious solution file provided by an attacker, the application suffers from an XML external entity vulnerability due to an unsafe call within a dynamic link library file. An attacker could exploit this to pass data from local files to a remote web server, leading to a loss of confidentiality.
CVE-2022-0330 High 2022-03-25 Not applicable No public exploit A random memory access flaw was found in the Linux kernel's GPU i915 kernel driver functionality in the way a user may run malicious code on the GPU. This flaw allows a local user to crash the system or escalate their privileges on the system.
CVE-2021-3656 High 2022-03-04 Outside Waratek scope No public exploit A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the "virt_ext" field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape.
CVE-2021-44142 High 2022-02-21 Not applicable Exploited The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide "...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver." Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.
‹ prev page 1 of 25 next ›