THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗761 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2020-3952: VMware vCenter Server Information Disclosure Vulnerability ↗
VMware vCenter Server contains an information disclosure vulnerability in the VMware Directory Service (vmdir) when the Platform Services Controller (PSC) does not correctly implement access controls. Successful exploitation allows an attacker with network access to port 389 to extract sensitive information. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2020-3950: VMware Multiple Products Privilege Escalation Vulnerability ↗
VMware Fusion, Remote Console (VMRC) for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2020-3580: Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability ↗
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an insufficient input validation vulnerability for user-supplied input by the web services interface. Successful exploitation could allow an attacker to perform cross-site scripting (XSS) in the context of the interface or access sensitive browser-based information. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2020-3569: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability ↗
Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2020-3566: Cisco IOS XR Software DVMRP Memory Exhaustion Vulnerability ↗
Cisco IOS XR Distance Vector Multicast Routing Protocol (DVMRP) incorrectly handles Internet Group Management Protocol (IGMP) packets. Exploitation could allow an unauthenticated, remote attacker to immediately crash the IGMP process or make it consume available memory and eventually crash. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2020-3452: Cisco ASA and FTD Read-Only Path Traversal Vulnerability ↗
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosur
- CISA · Added to KEV · First archived
CVE-2020-3161: Cisco IP Phones Web Server Remote Code Execution and Denial-of-Service Vulnerability ↗
Cisco IP Phones contain an improper input validation vulnerability for HTTP requests. Exploitation could allow an attacker to execute code remotely with root privileges or cause a denial-of-service (DoS) condition. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2020-3118: Cisco IOS XR Software Discovery Protocol Format String Vulnerability ↗
Cisco IOS XR improperly validates string input from certain fields in Cisco Discovery Protocol messages. Exploitation could allow an unauthenticated, adjacent attacker to execute code with administrative privileges or cause a reload on an affected device. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2020-29583: Zyxel Multiple Products Use of Hard-Coded Credentials Vulnerability ↗
Zyxel firewalls (ATP, USG, VM) and AP Controllers (NXC2500 and NXC5500) contain a use of hard-coded credentials vulnerability in an undocumented account ("zyfwp") with an unchangeable password. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
- CISA · Added to KEV · First archived
CVE-2020-29557: D-Link DIR-825 R1 Devices Buffer Overflow Vulnerability ↗
D-Link DIR-825 R1 devices contain a buffer overflow vulnerability in the web interface that may allow for remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2021-11-03 (not the first disclosure date). Action due date: 2022-05-03.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.