Overview 33 matches · 0 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 10 public PoC · 1 EPSS ≥ 0.5
33matches
0in Waratek scope0.0%
0protected0.0%
1exploited3.0%
0CISA KEV0.0%
10public PoC30.3%
1EPSS ≥ 0.53.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
1
3.0%
Not applicable
32
97.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
33
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
1
3.0%
Working exploit published
9
27.3%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
23
69.7%
split by
peak 10 / quarter
Q3 001
Not applicable1
High1
not blocked1
Working exploit published1
Q4 002
Not applicable2
High2
not blocked2
Working exploit published1
No public exploit1
Q1 013
Not applicable3
High3
not blocked3
Working exploit published2
No public exploit1
Q2 011
Not applicable1
High1
not blocked1
No public exploit1
Q3 014
Not applicable4
High4
not blocked4
Exploited1
Working exploit published1
No public exploit2
Q4 010
Q1 020
Q2 020
Q3 020
Q4 020
Q1 030
Q2 030
Q3 031
Not applicable1
High1
not blocked1
Working exploit published1
Q4 030
Q1 040
Q2 040
Q3 044
Not applicable4
High4
not blocked4
Working exploit published1
No public exploit3
Q4 045
Not applicable5
High5
not blocked5
No public exploit5
Q1 0510
Outside Waratek scope1
Not applicable9
High10
not blocked10
Working exploit published2
No public exploit8
Q2 051
Not applicable1
High1
not blocked1
No public exploit1
Q3 050
Q4 051
Not applicable1
High1
not blocked1
No public exploit1
Q4 00Q2 01Q4 01Q2 02Q4 02Q2 03Q4 03Q2 04Q4 04Q2 05Q4 05
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2005-3625 | High | 2005-12-31 | Not applicable | No public exploit | Xpdf, as used in products such as gpdf, kpdf, pdftohtml, poppler, teTeX, CUPS, libextractor, and others, allows attackers to cause a denial of service (infinite loop) via streams that end prematurely, as demonstrated using the (1) CCITTFaxDecode and (2) DCTDecode streams, aka "Infinite CPU spins." |
| CVE-2005-0754 | High | 2005-04-22 | Not applicable | No public exploit | Kommander in KDE 3.2 through KDE 3.4.0 executes data files without confirmation from the user, which allows remote attackers to execute arbitrary code. |
| CVE-2005-0750 | High | 2005-03-27 | Not applicable | Working exploit published | The bluez_sock_create function in the Bluetooth stack for Linux kernel 2.4.6 through 2.4.30-rc1 and 2.6 through 2.6.11.5 allows local users to gain privileges via (1) socket or (2) socketpair call with a negative protocol value. |
| CVE-2005-0699 | High | 2005-03-08 | Not applicable | No public exploit | Multiple buffer overflows in the dissect_a11_radius function in the CDMA A11 (3G-A11) dissector (packet-3g-a11.c) for Ethereal 0.10.9 and earlier allow remote attackers to execute arbitrary code via RADIUS authentication packets with large length values. |
| CVE-2004-1029 | High | 2005-03-01 | Outside Waratek scope | Working exploit published | The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages. |
| CVE-2004-0903 | High | 2005-01-27 | Not applicable | No public exploit | Stack-based buffer overflow in the writeGroup function in nsVCardObj.cpp for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allows remote attackers to execute arbitrary code via malformed VCard attachments that are not properly handled when previewing a message. |
| CVE-2004-0902 | High | 2005-01-27 | Not applicable | No public exploit | Multiple heap-based buffer overflows in Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via (1) the "Send page" functionality, (2) certain responses from a malicious POP3 server, or (3) a link containing a non-ASCII hostname. |
| CVE-2004-0884 | High | 2005-01-27 | Not applicable | No public exploit | The (1) libsasl and (2) libsasl2 libraries in Cyrus-SASL 2.1.18 and earlier trust the SASL_PATH environment variable to find all available SASL plug-ins, which allows local users to execute arbitrary code by modifying the SASL_PATH to point to malicious programs. |
| CVE-2004-0882 | High | 2005-01-27 | Not applicable | No public exploit | Buffer overflow in the QFILEPATHINFO request handler in Samba 3.0.x through 3.0.7 may allow remote attackers to execute arbitrary code via a TRANSACT2_QFILEPATHINFO request with a small "maximum data bytes" value. |
| CVE-2004-1013 | High | 2005-01-10 | Not applicable | No public exploit | The argument parser of the FETCH command in Cyrus IMAP Server 2.2.x through 2.2.8 allows remote authenticated users to execute arbitrary code via certain commands such as (1) "body[p", (2) "binary[p", or (3) "binary[p") that cause an index increment error that leads to an out-of-bounds memory corruption. |
| CVE-2004-1012 | High | 2005-01-10 | Not applicable | No public exploit | The argument parser of the PARTIAL command in Cyrus IMAP Server 2.2.6 and earlier allows remote authenticated users to execute arbitrary code via a certain command ("body[p") that is treated as a different command ("body.peek") and causes an index increment error that leads to an out-of-bounds memory corruption. |
| CVE-2004-1011 | High | 2005-01-10 | Not applicable | No public exploit | Stack-based buffer overflow in Cyrus IMAP Server 2.2.4 through 2.2.8, with the imapmagicplus option enabled, allows remote attackers to execute arbitrary code via a long (1) PROXY or (2) LOGIN command, a different vulnerability than CVE-2004-1015. |
| CVE-2004-0904 | High | 2004-12-31 | Not applicable | No public exploit | Integer overflow in the bitmap (BMP) decoder for Mozilla Firefox before the Preview Release, Mozilla before 1.7.3, and Thunderbird before 0.8 allow remote attackers to execute arbitrary code via wide bitmap files that trigger heap-based buffer overflows. |
| CVE-2004-0817 | High | 2004-12-31 | Not applicable | No public exploit | Multiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to execute arbitrary code via a crafted BMP file. |
| CVE-2004-1337 | High | 2004-12-23 | Not applicable | No public exploit | The POSIX Capability Linux Security Module (LSM) for Linux kernel 2.6 does not properly handle the credentials of a process that is launched before the module is loaded, which allows local users to gain privileges. |
| CVE-2004-1307 | High | 2004-12-21 | Not applicable | No public exploit | Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a heap-based buffer overflow. |
| CVE-2005-0373 | High | 2004-10-07 | Not applicable | No public exploit | Buffer overflow in digestmd5.c CVS release 1.170 (also referred to as digestmda5.c), as used in the DIGEST-MD5 SASL plugin for Cyrus-SASL but not in any official releases, allows remote attackers to execute arbitrary code. |
| CVE-2004-0827 | High | 2004-09-16 | Not applicable | No public exploit | Multiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6.0.6.2, allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via malformed (1) AVI, (2) BMP, or (3) DIB files. |
| CVE-2004-0801 | High | 2004-09-16 | Not applicable | No public exploit | Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands. |
| CVE-2004-0557 | High | 2004-08-06 | Not applicable | Working exploit published | Multiple buffer overflows in the st_wavstartread function in wav.c for Sound eXchange (SoX) 12.17.2 through 12.17.4 allow remote attackers to execute arbitrary code via certain WAV file header fields. |
| CVE-2004-0495 | High | 2004-08-06 | Not applicable | No public exploit | Multiple unknown vulnerabilities in Linux kernel 2.4 and 2.6 allow local users to gain privileges or access kernel memory, as found by the Sparse source code checking tool. |
| CVE-2003-0780 | High | 2003-09-22 | Not applicable | Working exploit published | Buffer overflow in get_salt_from_password from sql_acl.cc for MySQL 4.0.14 and earlier, and 3.23.x, allows attackers with ALTER TABLE privileges to execute arbitrary code via a long Password field. |
| CVE-2001-0690 | High | 2001-09-20 | Not applicable | Exploited | Format string vulnerability in exim (3.22-10 in Red Hat, 3.12 in Debian and 3.16 in Conectiva) in batched SMTP mode allows a remote attacker to execute arbitrary code via format strings in SMTP mail headers. |
| CVE-2001-1374 | High | 2001-07-19 | Not applicable | No public exploit | expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges via a Trojan horse library that is accessed by mkpasswd. |
| CVE-2001-0440 | High | 2001-07-02 | Not applicable | Working exploit published | Buffer overflow in logging functions of licq before 1.0.3 allows remote attackers to cause a denial of service, and possibly execute arbitrary commands. |
| CVE-2001-0439 | High | 2001-07-02 | Not applicable | No public exploit | licq before 1.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in a URL. |
| CVE-2001-0473 | High | 2001-06-27 | Not applicable | No public exploit | Format string vulnerability in Mutt before 1.2.5 allows a remote malicious IMAP server to execute arbitrary commands. |
| CVE-2001-0128 | High | 2001-03-12 | Not applicable | No public exploit | Zope before 2.2.4 does not properly compute local roles, which could allow users to bypass specified access restrictions and gain privileges. |
| CVE-2000-1134 | High | 2001-01-09 | Not applicable | Working exploit published | Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack. |
| CVE-2000-1095 | High | 2001-01-09 | Not applicable | Working exploit published | modprobe in the modutils 2.3.x package on Linux systems allows a local user to execute arbitrary commands via shell metacharacters. |
| CVE-2000-0844 | High | 2000-11-14 | Not applicable | Working exploit published | Some functions that implement the locale subsystem on Unix do not properly cleanse user-injected format strings, which allows local attackers to execute arbitrary commands via functions such as gettext and catopen. |
| CVE-2000-0747 | High | 2000-10-20 | Not applicable | No public exploit | The logrotate script for OpenLDAP before 1.2.11 in Conectiva Linux sends an improper signal to the kernel log daemon (klogd) and kills it. |
| CVE-2000-0666 | High | 2000-07-16 | Not applicable | Working exploit published | rpc.statd in the nfs-utils package in various Linux distributions does not properly cleanse untrusted format strings, which allows remote attackers to gain root privileges. |