THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗715 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2022-41328: Fortinet FortiOS Path Traversal Vulnerability ↗
Fortinet FortiOS contains a path traversal vulnerability that may allow a local privileged attacker to read and write files via crafted CLI commands. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-03-14 (not the first disclosure date). Action due date: 2023-04-04.
- CISA · Added to KEV · First archived
CVE-2021-39144: XStream Remote Code Execution Vulnerability ↗
XStream contains a remote code execution vulnerability that allows an attacker to manipulate the processed input stream and replace or inject objects that result in the execution of a local command on the server. This vulnerability can affect multiple products, including but not limited to VMware Cloud Foundation. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-03-10 (not the first disclosure date). Action due date: 2023-03-31.
- CISA · Added to KEV · First archived
CVE-2020-5741: Plex Media Server Remote Code Execution Vulnerability ↗
Plex Media Server contains a remote code execution vulnerability that allows an attacker with access to the server administrator's Plex account to upload a malicious file via the Camera Upload feature and have the media server execute it. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-03-10 (not the first disclosure date). Action due date: 2023-03-31.
- CISA · Added to KEV · First archived
CVE-2022-35914: Teclib GLPI Remote Code Execution Vulnerability ↗
Teclib GLPI contains a remote code execution vulnerability in the third-party library, htmlawed. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-03-07 (not the first disclosure date). Action due date: 2023-03-28.
- CISA · Added to KEV · First archived
CVE-2022-33891: Apache Spark Command Injection Vulnerability ↗
Apache Spark contains a command injection vulnerability via Spark User Interface (UI) when Access Control Lists (ACLs) are enabled. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-03-07 (not the first disclosure date). Action due date: 2023-03-28.
- CISA · Added to KEV · First archived
CVE-2022-28810: Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability ↗
Zoho ManageEngine ADSelfService Plus contains an unspecified vulnerability allowing for remote code execution when performing a password change or reset. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-03-07 (not the first disclosure date). Action due date: 2023-03-28.
- CISA · Added to KEV · First archived
CVE-2022-36537: ZK Framework AuUploader Unspecified Vulnerability ↗
ZK Framework AuUploader servlets contain an unspecified vulnerability that could allow an attacker to retrieve the content of a file located in the web context. The ZK Framework is an open-source Java framework. This vulnerability can impact multiple products, including but not limited to ConnectWise R1Soft Server Backup Manager. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-02-27 (not the first disclosure date). Action due date: 2023-03-20.
- CISA · Added to KEV · First archived
CVE-2022-47986: IBM Aspera Faspex Code Execution Vulnerability ↗
IBM Aspera Faspex could allow a remote attacker to execute code on the system, caused by a YAML deserialization flaw. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-02-21 (not the first disclosure date). Action due date: 2023-03-14.
- CISA · Added to KEV · First archived
CVE-2022-41223: Mitel MiVoice Connect Code Injection Vulnerability ↗
The Director component in Mitel MiVoice Connect allows an authenticated attacker with internal network access to execute code within the context of the application. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-02-21 (not the first disclosure date). Action due date: 2023-03-14.
- CISA · Added to KEV · First archived
CVE-2022-40765: Mitel MiVoice Connect Command Injection Vulnerability ↗
The Mitel Edge Gateway component of MiVoice Connect allows an authenticated attacker with internal network access to execute commands within the context of the system. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-02-21 (not the first disclosure date). Action due date: 2023-03-14.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.