THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗762 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2020-11899: Treck TCP/IP stack Out-of-Bounds Read Vulnerability ↗
The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-17.
- CISA · Added to KEV · First archived
CVE-2019-16928: Exim Out-of-bounds Write Vulnerability ↗
Exim contains an out-of-bounds write vulnerability which can allow for remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-17.
- CISA · Added to KEV · First archived
CVE-2019-1652: Cisco Small Business Routers Improper Input Validation Vulnerability ↗
A vulnerability in the web-based management interface of Cisco Small Business RV320 and RV325 Dual Gigabit WAN VPN Routers could allow an authenticated, remote attacker with administrative privileges on an affected device to execute arbitrary commands. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-17.
- CISA · Added to KEV · First archived
CVE-2019-1297: Microsoft Excel Remote Code Execution Vulnerability ↗
A remote code execution vulnerability exists in Microsoft Excel when the software fails to properly handle objects in memory. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-17.
- CISA · Added to KEV · First archived
CVE-2018-8581: Microsoft Exchange Server Privilege Escalation Vulnerability ↗
A privilege escalation vulnerability exists in Microsoft Exchange Server. An attacker who successfully exploited this vulnerability could attempt to impersonate any other user of the Exchange server. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-17.
- CISA · Added to KEV · First archived
CVE-2018-8298: ChakraCore Scripting Engine Type Confusion Vulnerability ↗
The ChakraCore scripting engine contains a type confusion vulnerability which can allow for remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-17.
- CISA · Added to KEV · First archived
CVE-2018-0180: Cisco IOS Software Denial-of-Service Vulnerability ↗
A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-17.
- CISA · Added to KEV · First archived
CVE-2018-0179: Cisco IOS Software Denial-of-Service Vulnerability ↗
A vulnerability in the Login Enhancements (Login Block) feature of Cisco IOS Software could allow an unauthenticated, remote attacker to trigger a reload of an affected system, resulting in a denial of service (DoS) condition. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-17.
- CISA · Added to KEV · First archived
CVE-2018-0175: Cisco IOS, XR, and XE Software Buffer Overflow Vulnerability ↗
Format string vulnerability in the Link Layer Discovery Protocol (LLDP) subsystem of Cisco IOS Software, Cisco IOS XE Software, and Cisco IOS XR Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition or execute arbitrary code with elevated privileges on an affected device. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-17.
- CISA · Added to KEV · First archived
CVE-2018-0174: Cisco IOS Software and Cisco IOS XE Software Improper Input Validation Vulnerability ↗
A vulnerability in the DHCP option 82 encapsulation functionality of Cisco IOS Software and Cisco IOS XE Software could allow for denial-of-service (DoS). Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-03 (not the first disclosure date). Action due date: 2022-03-17.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.