THE INTERNET IS THINKING
Earlier sources: Security
Digital security protects systems, software, accounts, and information from misuse. Explore cybersecurity, vulnerabilities, threat intelligence, cryptography, privacy, and identity, with links to the underlying advisories and research.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗722 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2024-32113: Apache OFBiz Path Traversal Vulnerability ↗
Apache OFBiz contains a path traversal vulnerability that could allow for remote code execution. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-08-07 (not the first disclosure date). Action due date: 2024-08-28.
- CISA · Added to KEV · First archived
CVE-2018-0824: Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability ↗
Microsoft COM for Windows contains a deserialization of untrusted data vulnerability that allows for privilege escalation and remote code execution via a specially crafted file or script. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-08-05 (not the first disclosure date). Action due date: 2024-08-26.
- CISA · Added to KEV · First archived
CVE-2024-37085: VMware ESXi Authentication Bypass Vulnerability ↗
VMware ESXi contains an authentication bypass vulnerability. A malicious actor with sufficient Active Directory (AD) permissions can gain full access to an ESXi host that was previously configured to use AD for user management by re-creating the configured AD group ('ESXi Admins' by default) after it was deleted from AD. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2024-07-30 (not the first disclosure date). Action due date: 2024-08-20.
- CISA · Added to KEV · First archived
CVE-2024-5217: ServiceNow Incomplete List of Disallowed Inputs Vulnerability ↗
ServiceNow Washington DC, Vancouver, and earlier Now Platform releases contain an incomplete list of disallowed inputs vulnerability in the GlideExpression script. An unauthenticated user could exploit this vulnerability to execute code remotely. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-07-29 (not the first disclosure date). Action due date: 2024-08-19.
- CISA · Added to KEV · First archived
CVE-2024-4879: ServiceNow Improper Input Validation Vulnerability ↗
ServiceNow Utah, Vancouver, and Washington DC Now Platform releases contain a jelly template injection vulnerability in UI macros. An unauthenticated user could exploit this vulnerability to execute code remotely. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-07-29 (not the first disclosure date). Action due date: 2024-08-19.
- CISA · Added to KEV · First archived
CVE-2023-45249: Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability ↗
Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-07-29 (not the first disclosure date). Action due date: 2024-08-19.
- CISA · Added to KEV · First archived
CVE-2024-39891: Twilio Authy Information Disclosure Vulnerability ↗
Twilio Authy contains an information disclosure vulnerability in its API that allows an unauthenticated endpoint to accept a request containing a phone number and respond with information about whether the phone number was registered with Authy. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-07-23 (not the first disclosure date). Action due date: 2024-08-13.
- CISA · Added to KEV · First archived
CVE-2012-4792: Microsoft Internet Explorer Use-After-Free Vulnerability ↗
Microsoft Internet Explorer contains a use-after-free vulnerability that allows a remote attacker to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object. Required action: The impacted product is end-of-life and should be disconnected if still in use.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-07-23 (not the first disclosure date). Action due date: 2024-08-13.
- CISA · Added to KEV · First archived
CVE-2024-28995: SolarWinds Serv-U Path Traversal Vulnerability ↗
SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-07-17 (not the first disclosure date). Action due date: 2024-08-07.
- CISA · Added to KEV · First archived
CVE-2022-22948: VMware vCenter Server Incorrect Default File Permissions Vulnerability ↗
VMware vCenter Server contains an incorrect default file permissions vulnerability that allows a remote, privileged attacker to gain access to sensitive information. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-07-17 (not the first disclosure date). Action due date: 2024-08-07.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Security
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.