Overview 7 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 1 public PoC · 0 EPSS ≥ 0.5
7matches
0in Waratek scope0.0%
0protected0.0%
1exploited14.3%
0CISA KEV0.0%
1public PoC14.3%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
7
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
7
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
14.3%
Working exploit published
0
0.0%
Proof of concept only
3
42.9%
Forecast only
0
0.0%
No public exploit
3
42.9%
split by
peak 2 / year
20021
Not applicable1
Medium1
not blocked1
No public exploit1
20030
20040
20051
Not applicable1
Medium1
not blocked1
No public exploit1
20060
20070
20080
20091
Not applicable1
Medium1
not blocked1
Exploited1
20100
20110
20120
20130
20140
20150
20160
20170
20180
20190
20200
20210
20220
20231
Not applicable1
Medium1
not blocked1
Proof of concept only1
20241
Not applicable1
Medium1
not blocked1
No public exploit1
20250
20262
Not applicable2
Medium2
not blocked2
Proof of concept only2
2002200420062008201020122014201620182020202220242026
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-27171 | Medium | 2026-02-18 | Not applicable | Proof of concept only | zlib before 1.3.2 allows CPU consumption via crc32_combine64 and crc32_combine_gen64 because x2nmodp can do right shifts within a loop that has no termination condition. |
| CVE-2026-22184 | Medium | 2026-01-07 | Not applicable | Proof of concept only | zlib versions up to and including 1.3.1.2 include a global buffer overflow in the untgz utility located under contrib/untgz. The vulnerability is limited to the standalone demonstration utility and does not affect the core zlib compression library. The flaw occurs when a user executes the untgz command with an excessively long archive name supplied via the command line, leading to an out-of-bounds write in a fixed-size global buffer. |
| CVE-2023-6992 | Medium | 2024-01-04 | Not applicable | No public exploit | Cloudflare version of zlib library was found to be vulnerable to memory corruption issues affecting the deflation algorithm implementation (deflate.c). The issues resulted from improper input validation and heap-based buffer overflow. A local attacker could exploit the problem during compression using a crafted malicious file potentially leading to denial of service of the software. Patches: The issue has been patched in commit 8352d10 https://github.com/cloudflare/zlib/commit/8352d108c05db1bdc5ac3bdf834dad641694c13c . The upstream repository is not affected. |
| CVE-2023-0892 | Medium | 2023-05-15 | Not applicable | Proof of concept only | The BizLibrary WordPress plugin through 1.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) |
| CVE-2009-1391 | Medium | 2009-06-16 | Not applicable | Exploited | Off-by-one error in the inflate function in Zlib.xs in Compress::Raw::Zlib Perl module before 2.017, as used in AMaViS, SpamAssassin, and possibly other products, allows context-dependent attackers to cause a denial of service (hang or crash) via a crafted zlib compressed stream that triggers a heap-based buffer overflow, as exploited in the wild by Trojan.Downloader-71014 in June 2009. |
| CVE-2005-1849 | Medium | 2005-07-26 | Not applicable | No public exploit | inftrees.h in zlib 1.2.2 allows remote attackers to cause a denial of service (application crash) via an invalid file that causes a large dynamic tree to be produced. |
| CVE-2002-2102 | Medium | 2002-12-31 | Not applicable | No public exploit | InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data. |