THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗711 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2023-36847: Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability ↗
Juniper Junos OS on EX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to installAppPackage.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. K
- CISA · Added to KEV · First archived
CVE-2023-36846: Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability ↗
Juniper Junos OS on SRX Series contains a missing authentication for critical function vulnerability that allows an unauthenticated, network-based attacker to cause limited impact to the file system integrity. With a specific request to user.php that doesn't require authentication, an attacker is able to upload arbitrary files via J-Web, leading to a loss of integrity for a certain part of the file system, which may allow chaining to other vulnerabilities. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomw
- CISA · Added to KEV · First archived
CVE-2023-36845: Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability ↗
Juniper Junos OS on EX Series and SRX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control an important environment variable. Using a crafted request, which sets the variable PHPRC, an attacker is able to modify the PHP execution environment allowing the injection und execution of code. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-11-13 (not the first disclosure dat
- CISA · Added to KEV · First archived
CVE-2023-36844: Juniper Junos OS EX Series PHP External Variable Modification Vulnerability ↗
Juniper Junos OS on EX Series contains a PHP external variable modification vulnerability that allows an unauthenticated, network-based attacker to control certain, important environment variables. Using a crafted request an attacker is able to modify certain PHP environment variables, leading to partial loss of integrity, which may allow chaining to other vulnerabilities. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-11-13 (not the first disclo
- CISA · Added to KEV · First archived
CVE-2023-29552: Service Location Protocol (SLP) Denial-of-Service Vulnerability ↗
The Service Location Protocol (SLP) contains a denial-of-service (DoS) vulnerability that could allow an unauthenticated, remote attacker to register services and use spoofed UDP traffic to conduct a denial-of-service (DoS) attack with a significant amplification factor. Required action: Apply mitigations per vendor instructions or disable SLP service or port 427/UDP on all systems running on untrusted networks, including those directly connected to the Internet.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-11-08 (not the first disclosure date). Action due date: 2023
- CISA · Added to KEV · First archived
CVE-2023-22518: Atlassian Confluence Data Center and Server Improper Authorization Vulnerability ↗
Atlassian Confluence Data Center and Server contain an improper authorization vulnerability that can result in significant data loss when exploited by an unauthenticated attacker. There is no impact on confidentiality since the attacker cannot exfiltrate any data. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-11-07 (not the first disclosure date). Action due date: 2023-11-28.
- CISA · Added to KEV · First archived
CVE-2023-46604: Apache ActiveMQ Deserialization of Untrusted Data Vulnerability ↗
Apache ActiveMQ contains a deserialization of untrusted data vulnerability that may allow a remote attacker with network access to a broker to run shell commands by manipulating serialized class types in the OpenWire protocol to cause the broker to instantiate any class on the classpath. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-11-02 (not the first disclosure date). Action due date: 2023-11-23.
- CISA · Added to KEV · First archived
CVE-2023-46748: F5 BIG-IP Configuration Utility SQL Injection Vulnerability ↗
F5 BIG-IP Configuration utility contains an SQL injection vulnerability that may allow an authenticated attacker with network access through the BIG-IP management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46747. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-10-31 (not the first disclosure date). Action due date: 2023-11-21.
- CISA · Added to KEV · First archived
CVE-2023-46747: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability ↗
F5 BIG-IP Configuration utility contains an authentication bypass using an alternate path or channel vulnerability due to undisclosed requests that may allow an unauthenticated attacker with network access to the BIG-IP system through the management port and/or self IP addresses to execute system commands. This vulnerability can be used in conjunction with CVE-2023-46748. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2023-10-31 (not the first disclosur
- CISA · Added to KEV · First archived
CVE-2023-5631: Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability ↗
Roundcube Webmail contains a persistent cross-site scripting (XSS) vulnerability that allows a remote attacker to run malicious JavaScript code. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2023-10-26 (not the first disclosure date). Action due date: 2023-11-16.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.