WaratekVRT Sign in
Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Vendor openbsd✕
Overview 20 matches · 0 in Waratek scope · 0 protected · 2 exploited · 1 CISA KEV · 4 public PoC · 4 EPSS ≥ 0.5
20matches 0in Waratek scope0.0% 0protected0.0% 2exploited10.0% 1CISA KEV5.0% 4public PoC20.0% 4EPSS ≥ 0.520.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 20 100.0% Withdrawn CVE 0 0.0%
Critical 20 100.0% High 0 0.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 20 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 10.0% Working exploit published 2 10.0% Proof of concept only 0 0.0% Forecast only 1 5.0% No public exploit 15 75.0%
split by peak 4 / year
Not applicable: 20 Critical: 20 not blocked: 20 No public exploit: 15Forecast only: 1Working exploit published: 2Exploited: 2
20023 Not applicable3 Critical3 not blocked3 Working exploit published1 Forecast only1 No public exploit1 20031 Not applicable1 Critical1 not blocked1 Working exploit published1 20040 20050 20060 20070 20080 20090 20101 Not applicable1 Critical1 not blocked1 No public exploit1 20110 20120 20130 20140 20150 20160 20173 Not applicable3 Critical3 not blocked3 No public exploit3 20180 20192 Not applicable2 Critical2 not blocked2 No public exploit2 20203 Not applicable3 Critical3 not blocked3 Exploited1 No public exploit2 20210 20220 20234 Not applicable4 Critical4 not blocked4 Exploited1 No public exploit3 20242 Not applicable2 Critical2 not blocked2 No public exploit2 20250 20261 Not applicable1 Critical1 not blocked1 No public exploit1
2002200420062008201020122014201620182020202220242026
20 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2026-60002 Critical 2026-07-08 Not applicable No public exploit ssh in OpenSSH before 10.4 can have a use-after-free when a server changes its host key during a key re-exchange. (This outcome occurs only on the client side.)
CVE-2024-10934 Critical 2024-11-15 Not applicable No public exploit In OpenBSD 7.5 before errata 008 and OpenBSD 7.4 before errata 021, avoid possible mbuf double free in NFS client and server implementation, do not use uninitialized variable in error handling of NFS server.
CVE-2024-29937 Critical 2024-04-11 Not applicable No public exploit NFS in a BSD derived codebase, as used in OpenBSD through 7.4 and FreeBSD through 14.0-RELEASE, allows remote attackers to execute arbitrary code via a bug that is unrelated to memory corruption.
CVE-2023-38408 Critical 2023-07-20 Not applicable Exploited The PKCS#11 feature in ssh-agent in OpenSSH before 9.3p2 has an insufficiently trustworthy search path, leading to remote code execution if an agent is forwarded to an attacker-controlled system. (Code in /usr/lib is not necessarily safe for loading into ssh-agent.) NOTE: this issue exists because of an incomplete fix for CVE-2016-10009.
CVE-2023-35784 Critical 2023-06-16 Not applicable No public exploit A double free or use after free could occur after SSL_clear in OpenBSD 7.2 before errata 026 and 7.3 before errata 004, and in LibreSSL before 3.6.3 and 3.7.x before 3.7.3. NOTE: OpenSSL is not affected.
CVE-2021-46880 Critical 2023-04-15 Not applicable No public exploit x509/x509_verify.c in LibreSSL before 3.4.2, and OpenBSD before 7.0 errata 006, allows authentication bypass because an error for an unverified certificate chain is sometimes discarded.
CVE-2023-28531 Critical 2023-03-17 Not applicable No public exploit ssh-add in OpenSSH before 9.3 adds smartcard keys to ssh-agent without the intended per-hop destination constraints. The earliest affected version is 8.9.
CVE-2020-16088 Critical 2020-07-28 Not applicable No public exploit iked in OpenIKED, as used in OpenBSD through 6.7, allows authentication bypass because ca.c has the wrong logic for checking whether a public key matches.
CVE-2020-7247 Critical 2020-01-29 Not applicable Exploited smtp_mailaddr in smtp_session.c in OpenSMTPD 6.6, as used in OpenBSD 6.6 and other products, allows remote attackers to execute arbitrary commands as root via a crafted SMTP session, as demonstrated by shell metacharacters in a MAIL FROM field. This affects the "uncommented" default configuration. The issue exists because of an incorrect return value upon failure of input validation.
CVE-2015-5334 Critical 2020-01-23 Not applicable No public exploit Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (program crash) or possible execute arbitrary code via a crafted X.509 certificate, which triggers a stack-based buffer overflow. Note: this vulnerability exists because of an incorrect fix for CVE-2014-3508.
CVE-2012-1577 Critical 2019-12-10 Not applicable No public exploit lib/libc/stdlib/random.c in OpenBSD returns 0 when seeded with 0.
CVE-2019-19521 Critical 2019-12-05 Not applicable No public exploit libc in OpenBSD 6.6 allows authentication bypass via the -schallenge username, as demonstrated by smtpd, ldapd, or radiusd. This is related to gen/auth_subr.c and gen/authenticate.c in libc (and login/login.c and xenocara/app/xenodm/greeter/verify.c).
CVE-2015-7687 Critical 2017-10-16 Not applicable No public exploit Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via vectors involving req_ca_vrfy_smtp and req_ca_vrfy_mta.
CVE-2017-1000372 Critical 2017-06-19 Not applicable No public exploit A flaw exists in OpenBSD's implementation of the stack guard page that allows attackers to bypass it resulting in arbitrary code execution using setuid binaries such as /usr/bin/at. This affects OpenBSD 6.1 and possibly earlier versions.
CVE-2016-1908 Critical 2017-04-11 Not applicable No public exploit The client in OpenSSH before 7.2 mishandles failed cookie generation for untrusted X11 forwarding and relies on the local X11 server for access-control decisions, which allows remote X11 clients to trigger a fallback and obtain trusted X11 forwarding privileges by leveraging configuration issues on this X11 server, as demonstrated by lack of the SECURITY extension on this X11 server.
CVE-2010-4478 Critical 2010-12-06 Not applicable No public exploit OpenSSH 5.6 and earlier, when J-PAKE is enabled, does not properly validate the public parameters in the J-PAKE protocol, which allows remote attackers to bypass the need for knowledge of the shared secret, and successfully authenticate, by sending crafted values in each round of the protocol, a related issue to CVE-2010-4252.
CVE-2003-0466 Critical 2003-08-27 Not applicable Working exploit published Off-by-one error in the fb_realpath() function, as derived from the realpath function in BSD, may allow attackers to execute arbitrary code, as demonstrated in wu-ftpd 2.5.0 through 2.6.2 via commands that cause pathnames of length MAXPATHLEN+1 to trigger a buffer overflow, including (1) STOR, (2) RETR, (3) APPE, (4) DELE, (5) MKD, (6) RMD, (7) STOU, or (8) RNTO.
CVE-2002-0391 Critical 2002-08-12 Not applicable Forecast only Integer overflow in xdr_array function in RPC servers for operating systems that use libc, glibc, or other code based on SunRPC including dietlibc, allows remote attackers to execute arbitrary code by passing a large number of arguments to xdr_array through RPC services such as rpc.cmsd and dmispd.
CVE-2002-0639 Critical 2002-07-03 Not applicable No public exploit Integer overflow in sshd in OpenSSH 2.9.9 through 3.3 allows remote attackers to execute arbitrary code during challenge response authentication (ChallengeResponseAuthentication) when OpenSSH is using SKEY or BSD_AUTH authentication.
CVE-2002-0083 Critical 2002-03-15 Not applicable Working exploit published Off-by-one error in the channel code of OpenSSH 2.0 through 3.0.2 allows local users or remote malicious servers to gain privileges.