THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗754 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2020-25223: Sophos SG UTM Remote Code Execution Vulnerability ↗
A remote code execution vulnerability exists in the WebAdmin of Sophos SG UTM. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2020-2506: QNAP Helpdesk Improper Access Control Vulnerability ↗
QNAP Helpdesk contains an improper access control vulnerability which could allow an attacker to gain privileges or to read sensitive information. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2020-2021: Palo Alto Networks PAN-OS Authentication Bypass Vulnerability ↗
Palo Alto Networks PAN-OS contains a vulnerability in SAML which allows an attacker to bypass authentication. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2020-1956: Apache Kylin OS Command Injection Vulnerability ↗
Apache Kylin contains an OS command injection vulnerability which could permit an attacker to perform remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2020-1631: Juniper Junos OS Path Traversal Vulnerability ↗
A path traversal vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Zero Touch Provisioning (ZTP) allows an unauthenticated attacker to perform remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2019-6340: Drupal Core Remote Code Execution Vulnerability ↗
In Drupal Core, some field types do not properly sanitize data from non-form sources. This can lead to arbitrary PHP code execution in some cases. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2019-2616: Oracle BI Publisher Unauthorized Access Vulnerability ↗
Oracle BI Publisher, formerly XML Publisher, contains an unspecified vulnerability that allows for various unauthorized actions. Open-source reporting attributes this vulnerability to allowing for authentication bypass. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2019-16920: D-Link Multiple Routers Command Injection Vulnerability ↗
Multiple D-Link routers contain a command injection vulnerability which can allow attackers to achieve full system compromise. Required action: The impacted product is end-of-life and should be disconnected if still in use.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2019-15107: Webmin Command Injection Vulnerability ↗
An issue was discovered in Webmin. The parameter old in password_change.cgi contains a command injection vulnerability. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
- CISA · Added to KEV · First archived
CVE-2019-12991: Citrix SD-WAN and NetScaler Command Injection Vulnerability ↗
Authenticated Command Injection in Citrix SD-WAN Appliance and NetScaler SD-WAN Appliance. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-03-25 (not the first disclosure date). Action due date: 2022-04-15.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.