THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗718 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2023-25717: Multiple Ruckus Wireless Products CSRF and RCE Vulnerability ↗
Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs. Required action: Apply updates per vendor instructions or disconnect product if it is end-of-life.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-05-12 (not the first disclosure date). Action due date: 2023-06-02.
- CISA · Added to KEV · First archived
CVE-2021-3560: Red Hat Polkit Incorrect Authorization Vulnerability ↗
Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-05-12 (not the first disclosure date). Action due date: 2023-06-02.
- CISA · Added to KEV · First archived
CVE-2016-8735: Apache Tomcat Remote Code Execution Vulnerability ↗
Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-05-12 (not the first disclosure date). Action due date: 2023-06-02.
- CISA · Added to KEV · First archived
CVE-2016-3427: Oracle Java SE and JRockit Unspecified Vulnerability ↗
Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown.
- CISA · Added to KEV · First archived
CVE-2015-5317: Jenkins User Interface (UI) Information Disclosure Vulnerability ↗
Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the "Fingerprints" pages. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-05-12 (not the first disclosure date). Action due date: 2023-06-02.
- CISA · Added to KEV · First archived
CVE-2014-0196: Linux Kernel Race Condition Vulnerability ↗
Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings. Required action: The impacted product is end-of-life and should be disconnected if still in use.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-05-12 (not the first disclosure date). Action due date: 2023-06-02.
- CISA · Added to KEV · First archived
CVE-2010-3904: Linux Kernel Improper Input Validation Vulnerability ↗
Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls. Required action: The impacted product is end-of-life and should be disconnected if still in use.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-05-12 (not the first disclosure date). Action due date: 2023-06-02.
- CISA · Added to KEV · First archived
CVE-2023-29336: Microsoft Win32K Privilege Escalation Vulnerability ↗
Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-05-09 (not the first disclosure date). Action due date: 2023-05-30.
- CISA · Added to KEV · First archived
CVE-2023-21839: Oracle WebLogic Server Unspecified Vulnerability ↗
Oracle WebLogic Server contains an unspecified vulnerability that allows an unauthenticated attacker with network access via T3, IIOP, to compromise Oracle WebLogic Server. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-05-01 (not the first disclosure date). Action due date: 2023-05-22.
- CISA · Added to KEV · First archived
CVE-2023-1389: TP-Link Archer AX-21 Command Injection Vulnerability ↗
TP-Link Archer AX-21 contains a command injection vulnerability that allows for remote code execution. Required action: Apply updates per vendor instructions.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-05-01 (not the first disclosure date). Action due date: 2023-05-22.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.