THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗758 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2019-16057: D-Link DNS-320 Remote Code Execution Vulnerability ↗
The login_mgr.cgi script in D-Link DNS-320 is vulnerable to remote code execution. Required action: The impacted product is end-of-life and should be disconnected if still in use.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-04-15 (not the first disclosure date). Action due date: 2022-05-06.
- CISA · Added to KEV · First archived
CVE-2018-7841: Schneider Electric U.motion Builder SQL Injection Vulnerability ↗
A SQL Injection vulnerability exists in U.motion Builder software which could cause unwanted code execution when an improper set of characters is entered. Required action: The impacted product is end-of-life and should be disconnected if still in use.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-04-15 (not the first disclosure date). Action due date: 2022-05-06.
- CISA · Added to KEV · First archived
CVE-2016-4523: Trihedral VTScada (formerly VTS) Denial-of-Service Vulnerability ↗
The WAP interface in Trihedral VTScada (formerly VTS) allows remote attackers to cause a denial-of-service (DoS). Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-04-15 (not the first disclosure date). Action due date: 2022-05-06.
- CISA · Added to KEV · First archived
CVE-2014-0780: InduSoft Web Studio NTWebServer Directory Traversal Vulnerability ↗
InduSoft Web Studio NTWebServer contains a directory traversal vulnerability that allows remote attackers to read administrative passwords in APP files, allowing for remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-04-15 (not the first disclosure date). Action due date: 2022-05-06.
- CISA · Added to KEV · First archived
CVE-2010-5330: Ubiquiti AirOS Command Injection Vulnerability ↗
Certain Ubiquiti devices contain a command injection vulnerability via a GET request to stainfo.cgi. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-04-15 (not the first disclosure date). Action due date: 2022-05-06.
- CISA · Added to KEV · First archived
CVE-2007-3010: Alcatel OmniPCX Enterprise Remote Code Execution Vulnerability ↗
masterCGI in the Unified Maintenance Tool in Alcatel OmniPCX Enterprise Communication Server allows remote attackers to execute arbitrary commands. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2022-04-15 (not the first disclosure date). Action due date: 2022-05-06.
- CISA · Added to KEV · First archived
CVE-2022-22954: VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability ↗
VMware Workspace ONE Access and Identity Manager allow for remote code execution due to server-side template injection. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-04-14 (not the first disclosure date). Action due date: 2022-05-05.
- CISA · Added to KEV · First archived
CVE-2022-24521: Microsoft Windows CLFS Driver Privilege Escalation Vulnerability ↗
Microsoft Windows Common Log File System (CLFS) Driver contains an unspecified vulnerability that allows for privilege escalation. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-04-13 (not the first disclosure date). Action due date: 2022-05-04.
- CISA · Added to KEV · First archived
CVE-2018-7602: Drupal Core Remote Code Execution Vulnerability ↗
A remote code execution vulnerability exists within multiple subsystems of Drupal that can allow attackers to exploit multiple attack vectors on a Drupal site. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-04-13 (not the first disclosure date). Action due date: 2022-05-04.
- CISA · Added to KEV · First archived
CVE-2018-20753: Kaseya VSA Remote Code Execution Vulnerability ↗
Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2022-04-13 (not the first disclosure date). Action due date: 2022-05-04.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.