THE INTERNET IS THINKING
Earlier sources: Software
Software turns computational ideas into tools and services. This region follows open source projects, developer tools, programming languages, databases, operating systems, and web and cloud platforms.
SYMTRI organizes observations from public sources into a living map. Connections reflect shared subject matter; they do not establish causation or endorse a source.
Open in the map ↗2289 classified signals in the fourteen-day window. Recent momentum: steady. These counts include signals awaiting readable evidence.
Earlier sources
Up to ten sources with readable evidence, ordered by their feed timestamp. These archive sources can be older than the live fourteen-day window. This list is a sample, not a measure of total activity. Dates distinguish paper publication, repository creation, model/dataset activity, Hacker News posts, and KEV catalog additions. “First archived” records when SYMTRI first stored the signal.
- CISA · Added to KEV · First archived
CVE-2024-53197: Linux Kernel Out-of-Bounds Access Vulnerability ↗
Linux Kernel contains an out-of-bounds access vulnerability in the USB-audio driver that allows an attacker with physical access to the system to use a malicious USB device to potentially manipulate system memory, escalate privileges, or execute arbitrary code. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-04-09 (not the first disclosure date). Action due date: 2025-04-30.
- CISA · Added to KEV · First archived
CVE-2024-53150: Linux Kernel Out-of-Bounds Read Vulnerability ↗
Linux Kernel contains an out-of-bounds read vulnerability in the USB-audio driver that allows a local, privileged attacker to obtain potentially sensitive information. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-04-09 (not the first disclosure date). Action due date: 2025-04-30.
- CISA · Added to KEV · First archived
CVE-2025-25181: Advantive VeraCore SQL Injection Vulnerability ↗
Advantive VeraCore contains a SQL injection vulnerability in timeoutWarning.asp that allows a remote attacker to execute arbitrary SQL commands via the PmSess1 parameter. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-03-10 (not the first disclosure date). Action due date: 2025-03-31.
- CISA · Added to KEV · First archived
CVE-2024-50302: Linux Kernel Use of Uninitialized Resource Vulnerability ↗
The Linux kernel contains a use of uninitialized resource vulnerability that allows an attacker to leak kernel memory via a specially crafted HID report. Required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-03-04 (not the first disclosure date). Action due date: 2025-03-25.
- CISA · Added to KEV · First archived
CVE-2024-53104: Linux Kernel Out-of-Bounds Write Vulnerability ↗
Linux kernel contains an out-of-bounds write vulnerability in the uvc_parse_streaming component of the USB Video Class (UVC) driver that could allow for physical escalation of privilege. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2025-02-05 (not the first disclosure date). Action due date: 2025-02-26.
- CISA · Added to KEV · First archived
CVE-2023-48365: Qlik Sense HTTP Tunneling Vulnerability ↗
Qlik Sense contains an HTTP tunneling vulnerability that allows an attacker to escalate privileges and execute HTTP requests on the backend server hosting the software. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Known. Added to the KEV catalog: 2025-01-13 (not the first disclosure date). Action due date: 2025-02-03.
- CISA · Added to KEV · First archived
CVE-2024-9465: Palo Alto Networks Expedition SQL Injection Vulnerability ↗
Palo Alto Networks Expedition contains a SQL injection vulnerability that allows an unauthenticated attacker to reveal Expedition database contents, such as password hashes, usernames, device configurations, and device API keys. With this, attackers can also create and read arbitrary files on the Expedition system. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-11-14 (not the first disclosure date). Action due date: 2024-12-05.
- CISA · Added to KEV · First archived
CVE-2024-9380: Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability ↗
Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS. Required action: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-10-09 (not the first disclosure date). Action due date: 2024-10-30.
- CISA · Added to KEV · First archived
CVE-2024-9379: Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability ↗
Ivanti Cloud Services Appliance (CSA) contains a SQL injection vulnerability in the admin web console in versions prior to 5.0.2, which can allow a remote attacker authenticated as administrator to run arbitrary SQL statements. Required action: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-10-09 (not the first disclosure date). Action due date: 2024-10-30.
- CISA · Added to KEV · First archived
CVE-2019-0344: SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability ↗
SAP Commerce Cloud (formerly known as Hybris) contains a deserialization of untrusted data vulnerability within the mediaconversion and virtualjdbc extension that allows for code injection. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.. Known ransomware campaign use: Unknown. Added to the KEV catalog: 2024-09-30 (not the first disclosure date). Action due date: 2024-10-21.
Live window recorded . This is the ingestion observation time, not the publication or discovery date of each source.
How to assess evidence about Software
Check each original source for its methods, release status, limitations, and supporting data. A repository announcement, a preprint, and a published study provide different kinds of evidence. SYMTRI’s subject classification helps discovery; it does not independently validate the source’s claims.
See the collection and counting methodology ↗ · Read the weekly synthesis ↗
Follow a thread
Explore related regions
These navigation suggestions are part of the map’s editorial structure, rather than measured evidence of a connection.