Clankerusecase
MITRE ATT&CK detection coverage
 ← Back to main site
Home/ MITRE Matrix/ Lateral Movement/ T1021.002

T1021.002SMB/Windows Admin Shares

T1021.002 — SMB/Windows Admin Shares is a MITRE ATT&CK technique in the Lateral Movement tactic. Clankerusecase tracks 15 detection use cases covering it and 431 threat-intel articles citing it.

Lateral Movement
View on the matrix → Filter Detection Library MITRE official spec ↗
15Use cases
431Articles
0Sub-techniques
1Tactic
↑ Parent technique: T1021 · Remote Services

Use cases covering this technique (15)

Remote service execution — PsExec / SMB lateral movement Internal actions · alerting DSΣP Detect PsExec With accepteula Flag ESCU actions · alerting P Executable File Written in Administrative SMB Share ESCU actions · alerting P Impacket Lateral Movement Commandline Parameters ESCU actions · alerting P Impacket Lateral Movement smbexec CommandLine Parameters ESCU actions · alerting P Impacket Lateral Movement WMIExec Commandline Parameters ESCU actions · alerting P Windows PUA Named Pipe ESCU actions · hunting P Windows RMM Named Pipe ESCU actions · hunting P Windows Special Privileged Logon On Multiple Hosts ESCU actions · alerting P Windows Suspicious C2 Named Pipe ESCU actions · alerting P Windows Suspicious Named Pipe ESCU actions · alerting P Windows Theme File Creation in Unusual Location ESCU actions · hunting P SMB Traffic Spike ESCU actions · hunting P SMB Traffic Spike - MLTK ESCU actions · hunting P [LLM] DynoWiper deployment from shared inetpub\pub directory (Sandworm, Poland Dec 2025) Bespoke install · alerting DSΣP

Articles citing this technique (431)

crit Toy Ghouls’ new toy: the GenieLocker ransomware art-00
high Four incident-response decisions from the Hugging Face breach art-07
crit Critical Rails Flaw Could Let Unauthenticated Attackers Read Server Files via Image Uploads art-09
crit OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach art-30
high OpenAI models used Artifactory zero-days to escape to the internet art-41
high CISA shares advice on isolating vital systems during cyberattacks art-43
crit 24,650 Internet-Exposed BMCs Disclose IPMI Password Hashes Before Login art-47
crit Nimbus Manticore Deploys NightLedger and Turns Victim Systems Into Covert Relays art-52
crit IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains art-53
crit Mirage Kitten targets Middle East and Africa region with new malware art-56
high NVIDIA Forms 37-Member Open Secure AI Alliance and Open-Sources NOOA Framework art-60
high Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable art-74
crit Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available art-75
high Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git art-76
crit CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking art-77
crit Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE art-78
crit DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts art-79
crit BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery art-99
crit Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller art-100
high ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link art-102
crit Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry art-105
crit Golden Chickens Resurfaces With Four New Malware Families and Modular Implants art-106
crit Don’t swing at everything art-107
crit Russian Global Webmail Espionage art-112
high Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel art-113
high Preview: Cisco Talos at Black Hat USA 2026 art-114
high Real world incident response: Microsoft and AXA XL strengthen cyber resilience art-118
high A new extortion cocktail: office printers, small ransoms, and BitLocker art-131
crit AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report art-148
crit HelloNet campaign: new malicious modules launched through the ViPNet update system art-153
high Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery art-158
high Turning threat intelligence into decisive action with Defender Experts art-168
crit TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development art-169
high Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities art-174
crit No Manners Here: The Ruthless Rise of The Gentlemen Ransomware art-199
crit [GHSA / CRITICAL] CVE-2026-54088: File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE) art-203
crit Winning 54% of the time art-215
crit [GHSA / CRITICAL] CVE-2026-52831: Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persisten art-221
crit ESET Threat Report H1 2026 art-222
high Threat landscape for industrial automation systems. Q1 2026 art-229
high Cyber readiness for SMBs: Getting the basics right art-250
high codfish/semantic-release-action GitHub Action has been compromised art-276
high Threat Brief: Mitigating Large-Scale Credential Attacks art-289
crit CL-STA-1062 Targets Southeast Asian Governments and Critical Infrastructure art-293
high Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances art-294
crit CISA KEV: CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability art-297
high Killing me gently: Inside Gentlemen’s EDR killer framework art-318
crit Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE art-327
crit Inside the Modern SOC: The 72-Minute Race art-330
crit CISA KEV: CVE-2026-35273 — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability art-338
crit OceanLotus: From external espionage to domestic targeting art-342
high Pythagora-io/gpt-pilot Compromised on GitHub - Shai-Hulud Credential Stealer Blocked by Python Linter art-350
crit CISA KEV: CVE-2026-50751 — Check Point Security Gateway Improper Authentication Vulnerability art-358
crit CISA KEV: CVE-2026-0257 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability art-385
crit ESET APT Activity Report Q4 2025–Q1 2026 art-387
crit CISA KEV: CVE-2026-48027 — Nx Console Embedded Malicious Code Vulnerability art-393
crit CISA KEV: CVE-2026-45321 — TanStack Unspecified Vulnerability art-394
crit Webworm: New burrowing techniques art-413
crit TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack art-442
crit PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale art-446
high elementary-data Compromised on PyPI and GHCR: Forged Release Pushed via GitHub Actions Script Injection art-457
crit CISA KEV: CVE-2026-41940 — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability art-467
crit CISA KEV: CVE-2024-1708 — ConnectWise ScreenConnect Path Traversal Vulnerability art-473
crit CISA KEV: CVE-2024-57728 — SimpleHelp Path Traversal Vulnerability art-481
crit CISA KEV: CVE-2024-57726 — SimpleHelp Missing Authorization Vulnerability art-482
crit CISA KEV: CVE-2026-33825 — Microsoft Defender Insufficient Granularity of Access Control Vulnerability art-490
crit What the ransom note won’t say art-492
crit CISA KEV: CVE-2023-27351 — PaperCut NG/MF Improper Authentication Vulnerability art-496
crit CISA KEV: CVE-2024-27199 — JetBrains TeamCity Relative Path Traversal Vulnerability art-500
crit CISA KEV: CVE-2023-21529 — Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability art-512
high Securing Vibe Coding and AI Coding Agents: An End-to-End Approach with StepSecurity art-517
crit axios Compromised on npm - Malicious Versions Drop Remote Access Trojan art-523
high As breakout time accelerates, prevention-first cybersecurity takes center stage art-530
high Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT art-542
crit litellm: Credential Stealer Hidden in PyPI Wheel art-545
high Trivy Compromised a Second Time - Malicious v0.69.4 Release, aquasecurity/setup-trivy, aquasecurity/trivy-action GitHub Actions Compromised art-552
med Cloud workload security: Mind the gaps art-564
crit How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM art-565
high CanisterWorm Gets Teeth: TeamPCP's Kubernetes Wiper Targets Iran art-566
crit EDR killers explained: Beyond the drivers art-577
crit CISA KEV: CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management art-579
crit Cyber fallout from the Iran war: What to have on your radar art-593
crit Sednit reloaded: Back in the trenches art-596
crit How SMBs use threat research and MDR to build a defensive edge art-601
crit Protecting education: How MDR can tip the balance in favor of schools art-607
high PromptSpy ushers in the era of Android threats using GenAI art-626
crit CISA KEV: CVE-2024-7694 — TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability art-636
crit CISA KEV: CVE-2026-1731 — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability art-644
crit Naming and shaming: How ransomware groups tighten the screws on victims art-645
crit CISA KEV: CVE-2026-24423 — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability art-674
crit DynoWiper update: Technical analysis and attribution art-684
crit CISA KEV: CVE-2025-52691 — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability art-692
crit CISA KEV: CVE-2026-23760 — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability art-693
high ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025 art-696
high ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations art-710
crit LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan art-728
crit ESET Threat Report H2 2025 art-732
high Black Hat Europe 2025: Reputation matters – even in the ransomware economy art-740
crit CISA KEV: CVE-2025-55182 — Meta React Server Components Remote Code Execution Vulnerability art-750
high In memoriam: David Harley art-791
crit ESET APT Activity Report Q2 2025–Q3 2025 art-793
crit CISA KEV: CVE-2025-33073 — Microsoft Windows SMB Client Improper Access Control Vulnerability art-812
crit CISA KEV: CVE-2025-61884 — Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability art-813
crit CISA KEV: CVE-2025-61882 — Oracle E-Business Suite Unspecified Vulnerability art-832
crit CISA KEV: CVE-2025-10035 — Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability art-841
high Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack art-852
crit CISA KEV: CVE-2025-49704 — Microsoft SharePoint Code Injection Vulnerability art-899
crit CISA KEV: CVE-2025-53770 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability art-902
crit CISA KEV: CVE-2025-5777 — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability art-905
crit CISA KEV: CVE-2019-6693 — Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability art-917
high Finding Software Flaws Early in the Development Process Provides Clear ROI art-928
crit CISA KEV: CVE-2025-3248 — Langflow Missing Authentication Vulnerability art-978
crit CISA KEV: CVE-2025-31324 — SAP NetWeaver Unrestricted File Upload Vulnerability art-984
crit CISA KEV: CVE-2025-29824 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability art-998
crit CISA KEV: CVE-2025-31161 — CrushFTP Authentication Bypass Vulnerability art-1000
crit CISA KEV: CVE-2025-22457 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability art-1001
crit CISA KEV: CVE-2025-24472 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability art-1019
crit CISA KEV: CVE-2025-26633 — Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability art-1034
crit CISA KEV: CVE-2025-22225 — VMware ESXi Arbitrary Write Vulnerability art-1044
crit CISA KEV: CVE-2018-8639 — Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability art-1048
crit CISA KEV: CVE-2024-53704 — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability art-1065
crit CISA KEV: CVE-2024-57727 — SimpleHelp Path Traversal Vulnerability art-1066
crit CISA KEV: CVE-2025-23006 — SonicWall SMA1000 Appliances Deserialization Vulnerability art-1089
crit CISA KEV: CVE-2024-55591 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability art-1102
crit CISA KEV: CVE-2023-48365 — Qlik Sense HTTP Tunneling Vulnerability art-1103
crit CISA KEV: CVE-2025-0282 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability art-1107
crit CISA KEV: CVE-2024-55550 — Mitel MiCollab Path Traversal Vulnerability art-1109
crit CISA KEV: CVE-2024-55956 — Cleo Multiple Products Unauthenticated File Upload Vulnerability art-1121
crit CISA KEV: CVE-2024-50623 — Cleo Multiple Products Unrestricted File Upload Vulnerability art-1124
crit CISA KEV: CVE-2024-51378 — CyberPanel Incorrect Default Permissions Vulnerability art-1130
crit CISA KEV: CVE-2024-11667 — Zyxel Multiple Firewalls Path Traversal Vulnerability art-1133
crit CISA KEV: CVE-2023-28461 — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability art-1139
crit CISA KEV: CVE-2024-9474 — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability art-1148
crit CISA KEV: CVE-2024-0012 — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability art-1149
high Understanding command injection vulnerabilities in Go art-1151
crit CISA KEV: CVE-2024-49039 — Microsoft Windows Task Scheduler Privilege Escalation Vulnerability art-1161
crit CISA KEV: CVE-2024-51567 — CyberPanel Incorrect Default Permissions Vulnerability art-1163
crit CISA KEV: CVE-2024-38094 — Microsoft SharePoint Deserialization Vulnerability art-1178
crit CISA KEV: CVE-2024-40711 — Veeam Backup and Replication Deserialization Vulnerability art-1183
crit CISA KEV: CVE-2024-9680 — Mozilla Firefox Use-After-Free Vulnerability art-1186
crit CISA KEV: CVE-2024-30088 — Microsoft Windows Kernel TOCTOU Race Condition Vulnerability art-1187
med Promise queues and batching concurrent tasks in Deno art-1209
crit CISA KEV: CVE-2024-6670 — Progress WhatsUp Gold SQL Injection Vulnerability art-1225
crit CISA KEV: CVE-2024-40766 — SonicWall SonicOS Improper Access Control Vulnerability art-1232
crit CISA KEV: CVE-2017-1000253 — Linux Kernel PIE Stack Buffer Corruption Vulnerability art-1233
crit CISA KEV: CVE-2024-23897 — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability art-1254
crit CISA KEV: CVE-2024-37085 — VMware ESXi Authentication Bypass Vulnerability art-1275
crit CISA KEV: CVE-2024-26169 — Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability art-1308
crit CISA KEV: CVE-2024-4577 — PHP-CGI OS Command Injection Vulnerability art-1312
crit CISA KEV: CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability art-1321
crit CISA KEV: CVE-2024-24919 — Check Point Quantum Security Gateways Information Disclosure Vulnerability art-1322
crit CISA KEV: CVE-2023-43208 — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability art-1332
crit CISA KEV: CVE-2024-30051 — Microsoft DWM Core Library Privilege Escalation Vulnerability art-1338
crit CISA KEV: CVE-2024-3400 — Palo Alto Networks PAN-OS Command Injection Vulnerability art-1362
crit CISA KEV: CVE-2023-24955 — Microsoft SharePoint Server Code Injection Vulnerability art-1372
crit CISA KEV: CVE-2021-44529 — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability art-1374
crit CISA KEV: CVE-2023-48788 — Fortinet FortiClient EMS SQL Injection Vulnerability art-1375
crit CISA KEV: CVE-2024-27198 — JetBrains TeamCity Authentication Bypass Vulnerability art-1381
crit Snyk Learn and the NIST Cybersecurity Framework (CSF) art-1382
crit CISA KEV: CVE-2024-21338 — Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability art-1389
crit CISA KEV: CVE-2024-1709 — ConnectWise ScreenConnect Authentication Bypass Vulnerability art-1396
crit CISA KEV: CVE-2020-3259 — Cisco ASA and FTD Information Disclosure Vulnerability art-1400
crit CISA KEV: CVE-2024-21412 — Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability art-1405
crit CISA KEV: CVE-2024-21762 — Fortinet FortiOS Out-of-Bound Write Vulnerability art-1409
crit CISA KEV: CVE-2024-21893 — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability art-1414
crit CISA KEV: CVE-2023-22527 — Atlassian Confluence Data Center and Server Template Injection Vulnerability art-1416
crit CISA KEV: CVE-2023-35082 — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability art-1423
crit CISA KEV: CVE-2023-29357 — Microsoft SharePoint Server Privilege Escalation Vulnerability art-1430
crit CISA KEV: CVE-2023-46805 — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability art-1431
crit CISA KEV: CVE-2023-29300 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability art-1437
crit CISA KEV: CVE-2023-38203 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability art-1438
crit CISA KEV: CVE-2023-41266 — Qlik Sense Path Traversal Vulnerability art-1459
crit CISA KEV: CVE-2023-41265 — Qlik Sense HTTP Tunneling Vulnerability art-1460
crit CISA KEV: CVE-2023-47246 — SysAid Server Path Traversal Vulnerability art-1499
crit CISA KEV: CVE-2023-22518 — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability art-1511
crit CISA KEV: CVE-2023-46604 — Apache ActiveMQ Deserialization of Untrusted Data Vulnerability art-1516
crit CISA KEV: CVE-2023-46748 — F5 BIG-IP Configuration Utility SQL Injection Vulnerability art-1518
crit CISA KEV: CVE-2023-4966 — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability art-1531
crit CISA KEV: CVE-2023-22515 — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability art-1546
crit CISA KEV: CVE-2023-40044 — Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability art-1547
crit CISA KEV: CVE-2023-42793 — JetBrains TeamCity Authentication Bypass Vulnerability art-1552
crit CISA KEV: CVE-2017-6884 — Zyxel EMG2926 Routers Command Injection Vulnerability art-1573
crit CISA KEV: CVE-2021-3129 — Laravel Ignition File Upload Vulnerability art-1574
crit CISA KEV: CVE-2023-20269 — Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability art-1580
crit CISA KEV: CVE-2023-38831 — RARLAB WinRAR Code Execution Vulnerability art-1598
crit CISA KEV: CVE-2023-38035 — Ivanti Sentry Authentication Bypass Vulnerability art-1602
crit CISA KEV: CVE-2023-27532 — Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability art-1603
crit CISA KEV: CVE-2023-35078 — Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability art-1630
crit CISA KEV: CVE-2023-3519 — Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability art-1637
crit CISA KEV: CVE-2023-36884 — Microsoft Windows Search Remote Code Execution Vulnerability art-1641
crit CISA KEV: CVE-2022-31199 — Netwrix Auditor Insecure Object Deserialization Vulnerability art-1651
crit CISA KEV: CVE-2023-27997 — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability art-1687
med A day in the life of an ethical hacker art-1697
crit CISA KEV: CVE-2023-34362 — Progress MOVEit Transfer SQL Injection Vulnerability art-1701
high A quick primer on LDAP injection art-1703
crit Data loss prevention for developers art-1710
crit CISA KEV: CVE-2021-45046 — Apache Log4j2 Deserialization of Untrusted Data Vulnerability art-1747
crit CISA KEV: CVE-2023-27350 — PaperCut MF/NG Improper Access Control Vulnerability art-1755
crit CISA KEV: CVE-2023-28252 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability art-1770
crit CISA KEV: CVE-2021-27876 — Veritas Backup Exec Agent File Access Vulnerability art-1775
crit CISA KEV: CVE-2021-27877 — Veritas Backup Exec Agent Improper Authentication Vulnerability art-1776
crit CISA KEV: CVE-2021-27878 — Veritas Backup Exec Agent Command Execution Vulnerability art-1777
crit CISA KEV: CVE-2019-1388 — Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability art-1778
crit CISA KEV: CVE-2017-7494 — Samba Remote Code Execution Vulnerability art-1793
high Securing the web (forward) art-1803
high Securing the digital future: Reviewing the Biden-Harris administration's National Cybersecurity Strategy art-1806
crit CISA KEV: CVE-2023-24880 — Microsoft Windows SmartScreen Security Feature Bypass Vulnerability art-1812
crit CISA KEV: CVE-2022-36537 — ZK Framework AuUploader Unspecified Vulnerability art-1829
crit CISA KEV: CVE-2022-47986 — IBM Aspera Faspex Code Execution Vulnerability art-1834
crit CISA KEV: CVE-2022-41223 — Mitel MiVoice Connect Code Injection Vulnerability art-1835
crit CISA KEV: CVE-2022-40765 — Mitel MiVoice Connect Command Injection Vulnerability art-1836
crit CISA KEV: CVE-2023-23376 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability art-1843
crit CISA KEV: CVE-2015-2291 — Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability art-1846
crit CISA KEV: CVE-2022-24990 — TerraMaster OS Remote Command Execution Vulnerability art-1847
crit CISA KEV: CVE-2023-0669 — Fortra GoAnywhere MFT Remote Code Execution Vulnerability art-1848
crit CISA KEV: CVE-2022-21587 — Oracle E-Business Suite Unspecified Vulnerability art-1854
crit CISA KEV: CVE-2017-11357 — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability art-1859
crit Snyk enhances ServiceNow with comprehensive insights into vulnerabilities in open source software art-1860
crit CISA KEV: CVE-2022-47966 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability art-1861
crit CISA KEV: CVE-2022-41080 — Microsoft Exchange Server Privilege Escalation Vulnerability art-1869
crit CISA KEV: CVE-2022-42475 — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability art-1889
crit CISA KEV: CVE-2022-44698 — Microsoft Defender SmartScreen Security Feature Bypass Vulnerability art-1890
crit CISA KEV: CVE-2022-26500 — Veeam Backup & Replication Remote Code Execution Vulnerability art-1892
crit CISA KEV: CVE-2022-26501 — Veeam Backup & Replication Remote Code Execution Vulnerability art-1893
crit CISA KEV: CVE-2022-41091 — Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability art-1930
crit CISA KEV: CVE-2022-41073 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability art-1931
crit Key points from Google and Accenture's ransomware white paper art-1935
crit Secure Python URL validation art-1937
crit Understanding DNS attacks: Identifying and patching vulnerabilities art-1949
crit CISA KEV: CVE-2020-3433 — Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability art-1954
crit CISA KEV: CVE-2020-3153 — Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability art-1955
crit CISA KEV: CVE-2018-19323 — GIGABYTE Multiple Products Privilege Escalation Vulnerability art-1956
crit CISA KEV: CVE-2018-19322 — GIGABYTE Multiple Products Code Execution Vulnerability art-1957
crit CISA KEV: CVE-2018-19321 — GIGABYTE Multiple Products Privilege Escalation Vulnerability art-1958
crit CISA KEV: CVE-2018-19320 — GIGABYTE Multiple Products Unspecified Vulnerability art-1959
med Cloud security fundamentals part 2: Prevention and secure design art-1972
crit CISA KEV: CVE-2022-40684 — Fortinet Multiple Products Authentication Bypass Vulnerability art-1978
crit CISA KEV: CVE-2022-41082 — Microsoft Exchange Server Remote Code Execution Vulnerability art-1991
med How Onna Technologies uses Snyk & Sysdig to secure the SDLC while saving time and money art-2016
crit CISA KEV: CVE-2022-27593 — QNAP Photo Station Externally Controlled Reference Vulnerability art-2020
crit CISA KEV: CVE-2018-6530 — D-Link Multiple Routers OS Command Injection Vulnerability art-2024
crit CISA KEV: CVE-2018-13374 — Fortinet FortiOS and FortiADC Improper Access Control Vulnerability art-2026
crit CISA KEV: CVE-2022-26352 — dotCMS Unrestricted Upload of File Vulnerability art-2044
crit CISA KEV: CVE-2022-2294 — WebRTC Heap Buffer Overflow Vulnerability art-2048
crit CISA KEV: CVE-2022-27925 — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability art-2075
crit CISA KEV: CVE-2022-30333 — RARLAB UnRAR Directory Traversal Vulnerability art-2079
high Securing PHP containers art-2082
crit CISA KEV: CVE-2022-27924 — Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability art-2084
crit CISA KEV: CVE-2022-29499 — Mitel MiVoice Connect Data Validation Vulnerability art-2109
crit CISA KEV: CVE-2022-30190 — Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability art-2121
crit CISA KEV: CVE-2019-7195 — QNAP Photo Station Path Traversal Vulnerability art-2128
crit CISA KEV: CVE-2019-7194 — QNAP Photo Station Path Traversal Vulnerability art-2129
crit CISA KEV: CVE-2019-7193 — QNAP QTS Improper Input Validation Vulnerability art-2130
crit CISA KEV: CVE-2019-7192 — QNAP Photo Station Improper Access Control Vulnerability art-2131
crit CISA KEV: CVE-2022-26134 — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability art-2165
crit CISA KEV: CVE-2016-0034 — Microsoft Silverlight Runtime Remote Code Execution Vulnerability art-2174
crit CISA KEV: CVE-2013-3993 — IBM InfoSphere BigInsights Invalid Input Vulnerability art-2193
crit CISA KEV: CVE-2013-0431 — Oracle JRE Sandbox Bypass Vulnerability art-2196
crit CISA KEV: CVE-2013-0422 — Oracle JRE Remote Code Execution Vulnerability art-2197
crit CISA KEV: CVE-2013-0074 — Microsoft Silverlight Double Dereference Vulnerability art-2198
crit CISA KEV: CVE-2012-1710 — Oracle Fusion Middleware Unspecified Vulnerability art-2199
crit CISA KEV: CVE-2010-1428 — Red Hat JBoss Information Disclosure Vulnerability art-2200
crit CISA KEV: CVE-2010-0738 — Red Hat JBoss Authentication Bypass Vulnerability art-2202
crit CISA KEV: CVE-2018-19953 — QNAP NAS File Station Cross-Site Scripting Vulnerability art-2205
crit CISA KEV: CVE-2018-19949 — QNAP NAS File Station Command Injection Vulnerability art-2206
crit CISA KEV: CVE-2018-19943 — QNAP NAS File Station Cross-Site Scripting Vulnerability art-2207
crit CISA KEV: CVE-2017-0147 — Microsoft Windows SMBv1 Information Disclosure Vulnerability art-2208
crit CISA KEV: CVE-2017-18362 — Kaseya VSA SQL Injection Vulnerability art-2215
crit CISA KEV: CVE-2016-3351 — Microsoft Internet Explorer and Edge Information Disclosure Vulnerability art-2217
crit CISA KEV: CVE-2020-0638 — Microsoft Update Notification Manager Privilege Escalation Vulnerability art-2229
crit CISA KEV: CVE-2019-0703 — Microsoft Windows SMB Information Disclosure Vulnerability art-2234
crit CISA KEV: CVE-2019-1385 — Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability art-2241
crit CISA KEV: CVE-2019-1130 — Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability art-2242
crit CISA KEV: CVE-2022-1388 — F5 BIG-IP Missing Authentication Vulnerability art-2254
crit CISA KEV: CVE-2022-29464 — WSO2 Multiple Products Unrestrictive Upload of File Vulnerability art-2282
crit CISA KEV: CVE-2018-6882 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability art-2294
crit CISA KEV: CVE-2019-16057 — D-Link DNS-320 Remote Code Execution Vulnerability art-2301
crit CISA KEV: CVE-2022-22954 — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability art-2307
crit CISA KEV: CVE-2022-24521 — Microsoft Windows CLFS Driver Privilege Escalation Vulnerability art-2309
crit CISA KEV: CVE-2018-7602 — Drupal Core Remote Code Execution Vulnerability art-2310
crit CISA KEV: CVE-2018-20753 — Kaseya VSA Remote Code Execution Vulnerability art-2311
crit CISA KEV: CVE-2021-42287 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability art-2321
crit CISA KEV: CVE-2021-42278 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability art-2322
crit CISA KEV: CVE-2017-0148 — Microsoft SMBv1 Server Remote Code Execution Vulnerability art-2333
crit Alert: LaughTilYouCry ransomware sabotages npm package (with puns) art-2342
crit CISA KEV: CVE-2021-28799 — QNAP NAS Improper Authorization Vulnerability art-2349
crit CISA KEV: CVE-2018-10562 — Dasan GPON Routers Command Injection Vulnerability art-2351
crit CISA KEV: CVE-2021-38646 — Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability art-2357
crit CISA KEV: CVE-2021-26085 — Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability art-2359
crit CISA KEV: CVE-2021-20028 — SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability art-2360
crit CISA KEV: CVE-2018-8440 — Microsoft Windows Privilege Escalation Vulnerability art-2362
crit CISA KEV: CVE-2018-8406 — Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability art-2363
crit CISA KEV: CVE-2018-8405 — Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability art-2364
crit CISA KEV: CVE-2017-0213 — Microsoft Windows Privilege Escalation Vulnerability art-2365
crit CISA KEV: CVE-2016-0151 — Microsoft Windows CSRSS Security Feature Bypass Vulnerability art-2371
crit CISA KEV: CVE-2013-2551 — Microsoft Internet Explorer Use-After-Free Vulnerability art-2378
crit CISA KEV: CVE-2013-2465 — Oracle Java SE Unspecified Vulnerability art-2379
crit CISA KEV: CVE-2022-21999 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability art-2389
crit CISA KEV: CVE-2021-42237 — Sitecore XP Remote Command Execution Vulnerability art-2390
crit CISA KEV: CVE-2021-22941 — Citrix ShareFile Improper Access Control Vulnerability art-2391
crit CISA KEV: CVE-2020-2021 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability art-2398
crit CISA KEV: CVE-2019-15107 — Webmin Command Injection Vulnerability art-2404
crit CISA KEV: CVE-2019-11043 — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability art-2407
crit CISA KEV: CVE-2018-1273 — VMware Tanzu Spring Data Commons Property Binder Vulnerability art-2415
crit CISA KEV: CVE-2018-11138 — Quest KACE System Management Appliance Remote Command Execution Vulnerability art-2416
crit CISA KEV: CVE-2017-12615 — Apache Tomcat on Windows Remote Code Execution Vulnerability art-2423
crit CISA KEV: CVE-2017-0146 — Microsoft Windows SMB Remote Code Execution Vulnerability art-2424
crit CISA KEV: CVE-2010-2861 — Adobe ColdFusion Directory Traversal Vulnerability art-2448
crit CISA KEV: CVE-2019-1405 — Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability art-2463
crit CISA KEV: CVE-2019-1322 — Microsoft Windows Privilege Escalation Vulnerability art-2464
crit CISA KEV: CVE-2019-1315 — Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability art-2465
crit CISA KEV: CVE-2019-1253 — Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability art-2466
crit CISA KEV: CVE-2019-1129 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability art-2468
crit CISA KEV: CVE-2019-1069 — Microsoft Task Scheduler Privilege Escalation Vulnerability art-2469
crit CISA KEV: CVE-2019-1064 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability art-2470
crit CISA KEV: CVE-2019-0841 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability art-2471
crit CISA KEV: CVE-2019-0543 — Microsoft Windows Privilege Escalation Vulnerability art-2472
crit CISA KEV: CVE-2018-8120 — Microsoft Win32k Privilege Escalation Vulnerability art-2473
crit CISA KEV: CVE-2017-0101 — Microsoft Windows Transaction Manager Privilege Escalation Vulnerability art-2474
crit CISA KEV: CVE-2016-3309 — Microsoft Windows Kernel Privilege Escalation Vulnerability art-2475
crit CISA KEV: CVE-2015-2546 — Microsoft Win32k Memory Corruption Vulnerability art-2476
crit CISA KEV: CVE-2009-3960 — Adobe BlazeDS Information Disclosure Vulnerability art-2495
crit CISA KEV: CVE-2021-41379 — Microsoft Windows Installer Privilege Escalation Vulnerability art-2504
crit CISA KEV: CVE-2018-8581 — Microsoft Exchange Server Privilege Escalation Vulnerability art-2510
crit CISA KEV: CVE-2016-1019 — Adobe Flash Player Arbitrary Code Execution Vulnerability art-2555
crit CISA KEV: CVE-2016-0099 — Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability art-2556
crit CISA KEV: CVE-2015-7645 — Adobe Flash Player Arbitrary Code Execution Vulnerability art-2557
crit CISA KEV: CVE-2015-1701 — Microsoft Win32k Privilege Escalation Vulnerability art-2565
crit CISA KEV: CVE-2012-4681 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability art-2577
crit CISA KEV: CVE-2012-1723 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability art-2579
crit CISA KEV: CVE-2012-0507 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability art-2581
crit CISA KEV: CVE-2010-0188 — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability art-2587
crit CISA KEV: CVE-2008-2992 — Adobe Reader and Acrobat Input Validation Vulnerability art-2591
crit CISA KEV: CVE-2022-24682 — Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability art-2599
crit CISA KEV: CVE-2019-0752 — Microsoft Internet Explorer Type Confusion Vulnerability art-2618
crit CISA KEV: CVE-2018-8174 — Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability art-2619
crit CISA KEV: CVE-2018-20250 — WinRAR Absolute Path Traversal Vulnerability art-2620
crit CISA KEV: CVE-2018-15982 — Adobe Flash Player Use-After-Free Vulnerability art-2621
crit CISA KEV: CVE-2020-0796 — Microsoft SMBv3 Remote Code Execution Vulnerability art-2631
crit CISA KEV: CVE-2017-10271 — Oracle Corporation WebLogic Server Remote Code Execution Vulnerability art-2635
crit CISA KEV: CVE-2017-0145 — Microsoft SMBv1 Remote Code Execution Vulnerability art-2638
crit CISA KEV: CVE-2017-0144 — Microsoft SMBv1 Remote Code Execution Vulnerability art-2639
crit CISA KEV: CVE-2021-20038 — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability art-2656
crit CISA KEV: CVE-2020-0787 — Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability art-2658
crit CISA KEV: CVE-2018-8453 — Microsoft Win32k Privilege Escalation Vulnerability art-2669
crit CISA KEV: CVE-2021-21975 — VMware Server Side Request Forgery in vRealize Operations Manager API art-2680
crit CISA KEV: CVE-2019-1458 — Microsoft Win32k Privilege Escalation Vulnerability art-2697
crit CISA KEV: CVE-2019-2725 — Oracle WebLogic Server, Injection art-2699
crit CISA KEV: CVE-2018-13382 — Fortinet FortiOS and FortiProxy Improper Authorization art-2701
crit CISA KEV: CVE-2018-13383 — Fortinet FortiOS and FortiProxy Out-of-bounds Write art-2702
crit CISA KEV: CVE-2019-1579 — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability art-2703
crit CISA KEV: CVE-2021-43890 — Microsoft Windows AppX Installer Spoofing Vulnerability art-2729
crit CISA KEV: CVE-2017-12149 — Red Hat JBoss Application Server Remote Code Execution Vulnerability art-2744
crit CISA KEV: CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability art-2749
crit CISA KEV: CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF) art-2756
crit CISA KEV: CVE-2021-40449 — Microsoft Windows Win32k Privilege Escalation Vulnerability art-2764
crit CISA KEV: CVE-2021-42321 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2765
crit CISA KEV: CVE-2021-27104 — Accellion FTA OS Command Injection Vulnerability art-2780
crit CISA KEV: CVE-2021-27102 — Accellion FTA OS Command Injection Vulnerability art-2781
crit CISA KEV: CVE-2021-27101 — Accellion FTA SQL Injection Vulnerability art-2782
crit CISA KEV: CVE-2021-27103 — Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability art-2783
crit CISA KEV: CVE-2018-4878 — Adobe Flash Player Use-After-Free Vulnerability art-2788
crit CISA KEV: CVE-2021-42013 — Apache HTTP Server Path Traversal Vulnerability art-2792
crit CISA KEV: CVE-2017-5638 — Apache Struts Remote Code Execution Vulnerability art-2797
crit CISA KEV: CVE-2021-26084 — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability art-2827
crit CISA KEV: CVE-2019-11580 — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability art-2828
crit CISA KEV: CVE-2019-3396 — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability art-2829
crit CISA KEV: CVE-2021-42258 — BQE BillQuick Web Suite SQL Injection Vulnerability art-2830
crit CISA KEV: CVE-2020-3580 — Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability art-2832
crit CISA KEV: CVE-2019-13608 — Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability art-2842
crit CISA KEV: CVE-2019-19781 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability art-2846
crit CISA KEV: CVE-2019-11634 — Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability art-2847
crit CISA KEV: CVE-2017-9822 — DotNetNuke (DNN) Remote Code Execution Vulnerability art-2851
crit CISA KEV: CVE-2018-7600 — Drupal Core Remote Code Execution Vulnerability art-2854
crit CISA KEV: CVE-2021-22205 — GitLab Community and Enterprise Editions Remote Code Execution Vulnerability art-2855
crit CISA KEV: CVE-2018-6789 — Exim Buffer Overflow Vulnerability art-2856
crit CISA KEV: CVE-2020-5902 — F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability art-2859
crit CISA KEV: CVE-2021-22986 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability art-2860
crit CISA KEV: CVE-2021-35464 — ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability art-2861
crit CISA KEV: CVE-2020-12812 — Fortinet FortiOS SSL VPN Improper Authentication Vulnerability art-2863
crit CISA KEV: CVE-2018-13379 — Fortinet FortiOS SSL VPN Path Traversal Vulnerability art-2864
crit CISA KEV: CVE-2021-30116 — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability art-2893
crit CISA KEV: CVE-2014-1812 — Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability art-2898
crit CISA KEV: CVE-2021-38647 — Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability art-2899
crit CISA KEV: CVE-2016-0167 — Microsoft Win32k Privilege Escalation Vulnerability art-2900
crit CISA KEV: CVE-2020-0878 — Microsoft Edge and Internet Explorer Memory Corruption Vulnerability art-2901
crit CISA KEV: CVE-2021-34523 — Microsoft Exchange Server Privilege Escalation Vulnerability art-2919
crit CISA KEV: CVE-2020-0688 — Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability art-2923
crit CISA KEV: CVE-2017-0143 — Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability art-2924
crit CISA KEV: CVE-2019-0708 — Microsoft Remote Desktop Services Remote Code Execution Vulnerability art-2926
crit CISA KEV: CVE-2021-34473 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2927
crit CISA KEV: CVE-2021-1732 — Microsoft Win32k Privilege Escalation Vulnerability art-2929
crit CISA KEV: CVE-2021-34527 — Microsoft Windows Print Spooler Remote Code Execution Vulnerability art-2930
crit CISA KEV: CVE-2021-31207 — Microsoft Exchange Server Security Feature Bypass Vulnerability art-2931
crit CISA KEV: CVE-2021-26411 — Microsoft Internet Explorer Memory Corruption Vulnerability art-2936
crit CISA KEV: CVE-2021-40444 — Microsoft MSHTML Remote Code Execution Vulnerability art-2938
crit CISA KEV: CVE-2021-36942 — Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability art-2942
crit CISA KEV: CVE-2019-1215 — Microsoft Windows Privilege Escalation Vulnerability art-2943
crit CISA KEV: CVE-2017-11882 — Microsoft Office Memory Corruption Vulnerability art-2949
crit CISA KEV: CVE-2019-1367 — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability art-2952
crit CISA KEV: CVE-2017-0199 — Microsoft Office and WordPad Remote Code Execution Vulnerability art-2953
crit CISA KEV: CVE-2020-1472 — Microsoft Netlogon Privilege Escalation Vulnerability art-2958
crit CISA KEV: CVE-2021-26855 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2959
crit CISA KEV: CVE-2021-26858 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2960
crit CISA KEV: CVE-2021-27065 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2961
crit CISA KEV: CVE-2021-1675 — Microsoft Windows Print Spooler Remote Code Execution Vulnerability art-2963
crit CISA KEV: CVE-2019-0604 — Microsoft SharePoint Remote Code Execution Vulnerability art-2966
crit CISA KEV: CVE-2021-26857 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2969
crit CISA KEV: CVE-2021-36955 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability art-2974
crit CISA KEV: CVE-2019-18935 — Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability art-2989
crit CISA KEV: CVE-2021-22893 — Ivanti Pulse Connect Secure Use-After-Free Vulnerability art-2990
crit CISA KEV: CVE-2019-11510 — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability art-2996
crit CISA KEV: CVE-2019-11539 — Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability art-2997
crit CISA KEV: CVE-2018-2380 — SAP Customer Relationship Management (CRM) Path Traversal Vulnerability art-3006
crit CISA KEV: CVE-2021-35211 — SolarWinds Serv-U Remote Code Execution Vulnerability art-3014
crit CISA KEV: CVE-2021-20021 — SonicWall Email Security Improper Privilege Management Vulnerability art-3017
crit CISA KEV: CVE-2019-7481 — SonicWall SMA100 SQL Injection Vulnerability art-3018
crit CISA KEV: CVE-2021-20016 — SonicWall SSLVPN SMA100 SQL Injection Vulnerability art-3019
crit CISA KEV: CVE-2020-12271 — Sophos SFOS SQL Injection Vulnerability art-3020
crit CISA KEV: CVE-2019-5544 — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability art-3040
crit CISA KEV: CVE-2020-3992 — VMware ESXi OpenSLP Use-After-Free Vulnerability art-3041
crit CISA KEV: CVE-2021-22005 — VMware vCenter Server File Upload Vulnerability art-3043
crit CISA KEV: CVE-2021-21972 — VMware vCenter Server Remote Code Execution Vulnerability art-3045
crit CISA KEV: CVE-2021-21985 — VMware vCenter Server Improper Input Validation Vulnerability art-3046
crit CISA KEV: CVE-2021-40539 — Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability art-3052
high Call for nominations: The Snykie awards for Secure Development art-3082
high Understanding the software supply chain security requirements in the cybersecurity Executive Order art-3146
crit What is typosquatting and how typosquatting attacks are responsible for malicious modules in npm art-3226
high A technical analysis of the Capital One cloud misconfiguration breach art-3495
high Launching the State of Open Source Security Survey art-3635
high Snyk is available on the GOV.UK Digital Marketplace! art-3643