Clankerusecase
MITRE ATT&CK detection coverage
 ← Back to main site
Home/ MITRE Matrix/ Execution/ T1569.002

T1569.002Service Execution

T1569.002 — Service Execution is a MITRE ATT&CK technique in the Execution tactic. Clankerusecase tracks 14 detection use cases covering it and 430 threat-intel articles citing it.

Execution
View on the matrix → Filter Detection Library MITRE official spec ↗
14Use cases
430Articles
0Sub-techniques
1Tactic
↑ Parent technique: T1569 · System Services

Use cases covering this technique (14)

Remote service execution — PsExec / SMB lateral movement Internal actions · alerting DSΣP Detect Renamed PSExec ESCU actions · hunting P Excessive Usage Of SC Service Utility ESCU actions · hunting P First Time Seen Running Windows Service ESCU actions · hunting P Linux Auditd Service Started ESCU actions · hunting P Malicious Powershell Executed As A Service ESCU actions · alerting P Windows ScManager Security Descriptor Tampering Via Sc.EXE ESCU actions · alerting P Windows Service Create SliverC2 ESCU actions · alerting P Windows Service Created with Suspicious Service Name ESCU actions · hunting P Windows Service Created with Suspicious Service Path ESCU actions · alerting P Windows Service Execution RemCom ESCU actions · alerting P Windows Snake Malware Service Create ESCU actions · alerting P [LLM] LockBit payload execution via PsExec service (PsExecSvc.exe → 1.exe/LBB.exe) Bespoke actions · alerting DSΣPDDCS [LLM] fast16 sabotage implant carrier (svcmgmt.exe) by hash / Lua-carrier behaviour Bespoke install · alerting DSΣPDDCS

Articles citing this technique (430)

high Philips and GE investigating Clop ransomware data theft claims art-22
crit Unisoc VoLTE Video Call Exploit Chain Can Give Attackers Full Android Kernel Access art-23
crit Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware art-28
crit New AmnesiaStealer macOS malware hijacks browser sessions via remote control art-33
high Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware art-40
crit APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit art-48
crit ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories art-51
high Curiouser and Curiouser art-52
high The Model Is the Malware | What Four Agentic Intrusions Tell Defenders art-57
crit Enterprise Defenses Recovered at the Edge and Collapsed Inside art-70
high DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt art-82
high Microsoft named a Leader in the 2026 IDC MarketScape for MDR/MXDR for the Enterprise art-97
crit DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure art-98
crit IT threat evolution in Q2 2026. Non-mobile statistics art-99
crit Inside the Modern SOC: The Identity Front Door art-102
crit From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide art-116
crit ChainDrop supply chain compromise: Anatomy of a self-propagating worm art-120
crit 128 Seconds to disruption: Microsoft Defender stops ransomware at QNET art-124
high Almost Half of Malware Samples Communicate Direct to IP art-132
crit An analysis of incidents at Brazilian educational institutions art-146
crit [GHSA / CRITICAL] CVE-2026-66066: Active Storage has possible arbitrary file read and remote code execution in Active Storage variant proces art-164
crit You were onto something with “It’s the Climb,” Miley art-165
crit OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia art-169
high Four incident-response decisions from the Hugging Face breach art-175
crit IR Trends Q2 2026: Phishing and weaponized remote management tools drive attack chains art-188
crit Don’t swing at everything art-213
crit Russian Global Webmail Espionage art-217
high Chaos ransomware's msaRAT: Living off the browser to build a covert C2 channel art-218
high Preview: Cisco Talos at Black Hat USA 2026 art-219
high Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis? art-223
crit AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report art-250
crit Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories art-259
crit TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development art-267
crit CISA KEV: CVE-2026-15409 — SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability art-281
crit CISA KEV: CVE-2026-15410 — SonicWall SMA1000 Appliances Code Injection Vulnerability art-282
crit [GHSA / CRITICAL] CVE-2026-54088: File Browser: Command Injection via Authentication Hook Shell Substitution (Pre-Authentication RCE) art-297
crit ESET Threat Report H1 2026 art-312
high Cyber readiness for SMBs: Getting the basics right art-322
high codfish/semantic-release-action GitHub Action has been compromised art-331
crit CISA KEV: CVE-2026-45659 — Microsoft SharePoint Server Deserialization of Untrusted Data Vulnerability art-334
high Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances art-344
crit CISA KEV: CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability art-347
high Killing me gently: Inside Gentlemen’s EDR killer framework art-366
crit CISA KEV: CVE-2026-35273 — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability art-384
crit OceanLotus: From external espionage to domestic targeting art-388
high Pythagora-io/gpt-pilot Compromised on GitHub - Shai-Hulud Credential Stealer Blocked by Python Linter art-396
crit CISA KEV: CVE-2026-50751 — Check Point Security Gateway Improper Authentication Vulnerability art-404
crit CISA KEV: CVE-2026-0257 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability art-431
crit ESET APT Activity Report Q4 2025–Q1 2026 art-433
crit CISA KEV: CVE-2026-48027 — Nx Console Embedded Malicious Code Vulnerability art-439
crit CISA KEV: CVE-2026-45321 — TanStack Unspecified Vulnerability art-440
crit Webworm: New burrowing techniques art-459
crit TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack art-488
crit PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale art-492
crit CISA KEV: CVE-2026-41940 — WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability art-512
crit CISA KEV: CVE-2024-1708 — ConnectWise ScreenConnect Path Traversal Vulnerability art-518
crit CISA KEV: CVE-2024-57728 — SimpleHelp Path Traversal Vulnerability art-526
crit CISA KEV: CVE-2024-57726 — SimpleHelp Missing Authorization Vulnerability art-527
crit CISA KEV: CVE-2026-33825 — Microsoft Defender Insufficient Granularity of Access Control Vulnerability art-535
crit What the ransom note won’t say art-537
crit CISA KEV: CVE-2023-27351 — PaperCut NG/MF Improper Authentication Vulnerability art-541
crit CISA KEV: CVE-2024-27199 — JetBrains TeamCity Relative Path Traversal Vulnerability art-545
crit CISA KEV: CVE-2025-60710 — Microsoft Windows Link Following Vulnerability art-556
crit CISA KEV: CVE-2023-21529 — Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability art-557
high Securing Vibe Coding and AI Coding Agents: An End-to-End Approach with StepSecurity art-562
crit axios Compromised on npm - Malicious Versions Drop Remote Access Trojan art-568
high As breakout time accelerates, prevention-first cybersecurity takes center stage art-574
high Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT art-585
crit litellm: Credential Stealer Hidden in PyPI Wheel art-587
high Trivy Compromised a Second Time - Malicious v0.69.4 Release, aquasecurity/setup-trivy, aquasecurity/trivy-action GitHub Actions Compromised art-593
med Cloud workload security: Mind the gaps art-604
crit How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM art-605
crit EDR killers explained: Beyond the drivers art-613
crit CISA KEV: CVE-2026-20131 — Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management art-615
crit Cyber fallout from the Iran war: What to have on your radar art-626
crit CISA KEV: CVE-2025-26399 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability art-631
crit How SMBs use threat research and MDR to build a defensive edge art-634
crit Protecting education: How MDR can tip the balance in favor of schools art-640
high PromptSpy ushers in the era of Android threats using GenAI art-659
crit CISA KEV: CVE-2024-7694 — TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability art-669
crit CISA KEV: CVE-2026-1731 — BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability art-677
crit Naming and shaming: How ransomware groups tighten the screws on victims art-678
crit CISA KEV: CVE-2026-24423 — SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability art-707
crit DynoWiper update: Technical analysis and attribution art-717
crit CISA KEV: CVE-2025-52691 — SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability art-724
crit CISA KEV: CVE-2026-23760 — SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability art-725
high ServiceNow's Virtual Agent Vulnerability Shows Why AI Security Needs Traditional AppSec Foundations art-741
crit LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan art-758
crit ESET Threat Report H2 2025 art-762
high Black Hat Europe 2025: Reputation matters – even in the ransomware economy art-770
crit CISA KEV: CVE-2025-55182 — Meta React Server Components Remote Code Execution Vulnerability art-780
crit CISA KEV: CVE-2025-61884 — Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability art-836
crit CISA KEV: CVE-2025-61882 — Oracle E-Business Suite Unspecified Vulnerability art-855
crit CISA KEV: CVE-2025-10035 — Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability art-864
high Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack art-875
crit CISA KEV: CVE-2025-8088 — RARLAB WinRAR Path Traversal Vulnerability art-900
crit CISA KEV: CVE-2025-49704 — Microsoft SharePoint Code Injection Vulnerability art-922
crit CISA KEV: CVE-2025-53770 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability art-925
crit CISA KEV: CVE-2025-5777 — Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability art-928
crit CISA KEV: CVE-2019-6693 — Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability art-940
high Finding Software Flaws Early in the Development Process Provides Clear ROI art-951
crit CISA KEV: CVE-2025-42999 — SAP NetWeaver Deserialization Vulnerability art-986
crit CISA KEV: CVE-2025-3248 — Langflow Missing Authentication Vulnerability art-1001
crit CISA KEV: CVE-2025-31324 — SAP NetWeaver Unrestricted File Upload Vulnerability art-1007
crit CISA KEV: CVE-2025-29824 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability art-1021
crit CISA KEV: CVE-2025-31161 — CrushFTP Authentication Bypass Vulnerability art-1023
crit CISA KEV: CVE-2025-22457 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability art-1024
crit CISA KEV: CVE-2025-24472 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability art-1042
crit CISA KEV: CVE-2025-26633 — Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability art-1057
crit CISA KEV: CVE-2025-22225 — VMware ESXi Arbitrary Write Vulnerability art-1067
crit CISA KEV: CVE-2018-8639 — Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability art-1071
crit CISA KEV: CVE-2024-53704 — SonicWall SonicOS SSLVPN Improper Authentication Vulnerability art-1088
crit CISA KEV: CVE-2024-57727 — SimpleHelp Path Traversal Vulnerability art-1089
crit CISA KEV: CVE-2020-29574 — CyberoamOS (CROS) SQL Injection Vulnerability art-1100
crit CISA KEV: CVE-2025-23006 — SonicWall SMA1000 Appliances Deserialization Vulnerability art-1112
crit CISA KEV: CVE-2024-55591 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability art-1125
crit CISA KEV: CVE-2023-48365 — Qlik Sense HTTP Tunneling Vulnerability art-1126
crit CISA KEV: CVE-2025-0282 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability art-1130
crit CISA KEV: CVE-2024-55550 — Mitel MiCollab Path Traversal Vulnerability art-1132
crit CISA KEV: CVE-2024-55956 — Cleo Multiple Products Unauthenticated File Upload Vulnerability art-1144
crit CISA KEV: CVE-2024-50623 — Cleo Multiple Products Unrestricted File Upload Vulnerability art-1147
crit CISA KEV: CVE-2024-51378 — CyberPanel Incorrect Default Permissions Vulnerability art-1153
crit CISA KEV: CVE-2024-11667 — Zyxel Multiple Firewalls Path Traversal Vulnerability art-1156
crit CISA KEV: CVE-2023-28461 — Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability art-1162
crit CISA KEV: CVE-2024-9474 — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability art-1171
crit CISA KEV: CVE-2024-0012 — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability art-1172
high Understanding command injection vulnerabilities in Go art-1174
crit CISA KEV: CVE-2024-49039 — Microsoft Windows Task Scheduler Privilege Escalation Vulnerability art-1184
crit CISA KEV: CVE-2024-51567 — CyberPanel Incorrect Default Permissions Vulnerability art-1186
crit CISA KEV: CVE-2024-38094 — Microsoft SharePoint Deserialization Vulnerability art-1201
crit CISA KEV: CVE-2024-40711 — Veeam Backup and Replication Deserialization Vulnerability art-1206
crit CISA KEV: CVE-2024-9680 — Mozilla Firefox Use-After-Free Vulnerability art-1209
crit CISA KEV: CVE-2024-30088 — Microsoft Windows Kernel TOCTOU Race Condition Vulnerability art-1210
med Promise queues and batching concurrent tasks in Deno art-1232
crit CISA KEV: CVE-2020-0618 — Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability art-1240
crit CISA KEV: CVE-2024-6670 — Progress WhatsUp Gold SQL Injection Vulnerability art-1248
crit CISA KEV: CVE-2024-40766 — SonicWall SonicOS Improper Access Control Vulnerability art-1255
crit CISA KEV: CVE-2017-1000253 — Linux Kernel PIE Stack Buffer Corruption Vulnerability art-1256
crit CISA KEV: CVE-2024-23897 — Jenkins Command Line Interface (CLI) Path Traversal Vulnerability art-1277
crit CISA KEV: CVE-2024-37085 — VMware ESXi Authentication Bypass Vulnerability art-1298
crit CISA KEV: CVE-2024-23692 — Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability art-1314
crit CISA KEV: CVE-2024-26169 — Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability art-1331
crit CISA KEV: CVE-2024-4577 — PHP-CGI OS Command Injection Vulnerability art-1335
crit CISA KEV: CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability art-1344
crit CISA KEV: CVE-2024-24919 — Check Point Quantum Security Gateways Information Disclosure Vulnerability art-1345
crit CISA KEV: CVE-2023-43208 — NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability art-1355
crit CISA KEV: CVE-2024-30051 — Microsoft DWM Core Library Privilege Escalation Vulnerability art-1361
crit CISA KEV: CVE-2024-3400 — Palo Alto Networks PAN-OS Command Injection Vulnerability art-1385
crit CISA KEV: CVE-2023-24955 — Microsoft SharePoint Server Code Injection Vulnerability art-1395
crit CISA KEV: CVE-2021-44529 — Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability art-1397
crit CISA KEV: CVE-2023-48788 — Fortinet FortiClient EMS SQL Injection Vulnerability art-1398
crit CISA KEV: CVE-2024-27198 — JetBrains TeamCity Authentication Bypass Vulnerability art-1404
crit Snyk Learn and the NIST Cybersecurity Framework (CSF) art-1405
crit CISA KEV: CVE-2024-21338 — Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability art-1412
crit CISA KEV: CVE-2024-1709 — ConnectWise ScreenConnect Authentication Bypass Vulnerability art-1419
crit CISA KEV: CVE-2020-3259 — Cisco ASA and FTD Information Disclosure Vulnerability art-1423
crit CISA KEV: CVE-2024-21412 — Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability art-1428
crit CISA KEV: CVE-2024-21762 — Fortinet FortiOS Out-of-Bound Write Vulnerability art-1432
crit CISA KEV: CVE-2024-21893 — Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability art-1437
crit CISA KEV: CVE-2023-22527 — Atlassian Confluence Data Center and Server Template Injection Vulnerability art-1439
crit CISA KEV: CVE-2023-35082 — Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability art-1446
crit CISA KEV: CVE-2023-29357 — Microsoft SharePoint Server Privilege Escalation Vulnerability art-1453
crit CISA KEV: CVE-2023-46805 — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability art-1454
crit CISA KEV: CVE-2023-29300 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability art-1460
crit CISA KEV: CVE-2023-38203 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability art-1461
crit CISA KEV: CVE-2023-41266 — Qlik Sense Path Traversal Vulnerability art-1482
crit CISA KEV: CVE-2023-41265 — Qlik Sense HTTP Tunneling Vulnerability art-1483
crit CISA KEV: CVE-2023-47246 — SysAid Server Path Traversal Vulnerability art-1522
crit CISA KEV: CVE-2023-22518 — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability art-1534
crit CISA KEV: CVE-2023-46604 — Apache ActiveMQ Deserialization of Untrusted Data Vulnerability art-1539
crit CISA KEV: CVE-2023-46748 — F5 BIG-IP Configuration Utility SQL Injection Vulnerability art-1541
crit CISA KEV: CVE-2023-4966 — Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability art-1554
crit CISA KEV: CVE-2023-22515 — Atlassian Confluence Data Center and Server Broken Access Control Vulnerability art-1569
crit CISA KEV: CVE-2023-40044 — Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability art-1570
crit CISA KEV: CVE-2023-42793 — JetBrains TeamCity Authentication Bypass Vulnerability art-1575
crit CISA KEV: CVE-2017-6884 — Zyxel EMG2926 Routers Command Injection Vulnerability art-1596
crit CISA KEV: CVE-2021-3129 — Laravel Ignition File Upload Vulnerability art-1597
crit CISA KEV: CVE-2023-20269 — Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability art-1603
crit CISA KEV: CVE-2023-38831 — RARLAB WinRAR Code Execution Vulnerability art-1621
crit CISA KEV: CVE-2023-38035 — Ivanti Sentry Authentication Bypass Vulnerability art-1625
crit CISA KEV: CVE-2023-27532 — Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability art-1626
crit CISA KEV: CVE-2023-35078 — Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability art-1653
crit CISA KEV: CVE-2023-3519 — Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability art-1660
crit CISA KEV: CVE-2023-36884 — Microsoft Windows Search Remote Code Execution Vulnerability art-1664
crit CISA KEV: CVE-2022-31199 — Netwrix Auditor Insecure Object Deserialization Vulnerability art-1674
crit CISA KEV: CVE-2023-27997 — Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability art-1710
med A day in the life of an ethical hacker art-1720
crit CISA KEV: CVE-2023-34362 — Progress MOVEit Transfer SQL Injection Vulnerability art-1724
high A quick primer on LDAP injection art-1726
crit Data loss prevention for developers art-1733
crit CISA KEV: CVE-2021-45046 — Apache Log4j2 Deserialization of Untrusted Data Vulnerability art-1770
crit CISA KEV: CVE-2023-27350 — PaperCut MF/NG Improper Access Control Vulnerability art-1778
crit CISA KEV: CVE-2023-28252 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability art-1793
crit CISA KEV: CVE-2021-27876 — Veritas Backup Exec Agent File Access Vulnerability art-1798
crit CISA KEV: CVE-2021-27877 — Veritas Backup Exec Agent Improper Authentication Vulnerability art-1799
crit CISA KEV: CVE-2021-27878 — Veritas Backup Exec Agent Command Execution Vulnerability art-1800
crit CISA KEV: CVE-2019-1388 — Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability art-1801
crit CISA KEV: CVE-2017-7494 — Samba Remote Code Execution Vulnerability art-1816
high Securing the web (forward) art-1826
high Securing the digital future: Reviewing the Biden-Harris administration's National Cybersecurity Strategy art-1829
crit CISA KEV: CVE-2023-24880 — Microsoft Windows SmartScreen Security Feature Bypass Vulnerability art-1835
crit CISA KEV: CVE-2022-36537 — ZK Framework AuUploader Unspecified Vulnerability art-1852
crit CISA KEV: CVE-2022-47986 — IBM Aspera Faspex Code Execution Vulnerability art-1857
crit CISA KEV: CVE-2022-41223 — Mitel MiVoice Connect Code Injection Vulnerability art-1858
crit CISA KEV: CVE-2022-40765 — Mitel MiVoice Connect Command Injection Vulnerability art-1859
crit CISA KEV: CVE-2023-23376 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability art-1866
crit CISA KEV: CVE-2015-2291 — Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability art-1869
crit CISA KEV: CVE-2022-24990 — TerraMaster OS Remote Command Execution Vulnerability art-1870
crit CISA KEV: CVE-2023-0669 — Fortra GoAnywhere MFT Remote Code Execution Vulnerability art-1871
crit CISA KEV: CVE-2022-21587 — Oracle E-Business Suite Unspecified Vulnerability art-1877
crit CISA KEV: CVE-2017-11357 — Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability art-1882
crit Snyk enhances ServiceNow with comprehensive insights into vulnerabilities in open source software art-1883
crit CISA KEV: CVE-2022-47966 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability art-1884
crit CISA KEV: CVE-2022-41080 — Microsoft Exchange Server Privilege Escalation Vulnerability art-1892
crit CISA KEV: CVE-2022-42475 — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability art-1912
crit CISA KEV: CVE-2022-44698 — Microsoft Defender SmartScreen Security Feature Bypass Vulnerability art-1913
crit CISA KEV: CVE-2022-26500 — Veeam Backup & Replication Remote Code Execution Vulnerability art-1915
crit CISA KEV: CVE-2022-26501 — Veeam Backup & Replication Remote Code Execution Vulnerability art-1916
crit CISA KEV: CVE-2022-41091 — Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability art-1953
crit CISA KEV: CVE-2022-41073 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability art-1954
crit Key points from Google and Accenture's ransomware white paper art-1958
crit Secure Python URL validation art-1960
crit Understanding DNS attacks: Identifying and patching vulnerabilities art-1972
crit CISA KEV: CVE-2020-3433 — Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability art-1977
crit CISA KEV: CVE-2020-3153 — Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability art-1978
crit CISA KEV: CVE-2018-19323 — GIGABYTE Multiple Products Privilege Escalation Vulnerability art-1979
crit CISA KEV: CVE-2018-19322 — GIGABYTE Multiple Products Code Execution Vulnerability art-1980
crit CISA KEV: CVE-2018-19321 — GIGABYTE Multiple Products Privilege Escalation Vulnerability art-1981
crit CISA KEV: CVE-2018-19320 — GIGABYTE Multiple Products Unspecified Vulnerability art-1982
med Cloud security fundamentals part 2: Prevention and secure design art-1995
crit CISA KEV: CVE-2022-40684 — Fortinet Multiple Products Authentication Bypass Vulnerability art-2001
crit CISA KEV: CVE-2022-41082 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2014
med How Onna Technologies uses Snyk & Sysdig to secure the SDLC while saving time and money art-2039
crit CISA KEV: CVE-2022-27593 — QNAP Photo Station Externally Controlled Reference Vulnerability art-2043
crit CISA KEV: CVE-2018-6530 — D-Link Multiple Routers OS Command Injection Vulnerability art-2047
crit CISA KEV: CVE-2018-13374 — Fortinet FortiOS and FortiADC Improper Access Control Vulnerability art-2049
crit CISA KEV: CVE-2022-26352 — dotCMS Unrestricted Upload of File Vulnerability art-2067
crit CISA KEV: CVE-2022-2294 — WebRTC Heap Buffer Overflow Vulnerability art-2071
crit CISA KEV: CVE-2022-27925 — Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability art-2098
crit CISA KEV: CVE-2022-30333 — RARLAB UnRAR Directory Traversal Vulnerability art-2102
high Securing PHP containers art-2105
crit CISA KEV: CVE-2022-27924 — Synacor Zimbra Collaboration Suite (ZCS) Command Injection Vulnerability art-2107
crit CISA KEV: CVE-2022-29499 — Mitel MiVoice Connect Data Validation Vulnerability art-2132
crit CISA KEV: CVE-2021-4034 — Red Hat Polkit Out-of-Bounds Read and Write Vulnerability art-2134
crit CISA KEV: CVE-2022-30190 — Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability art-2144
crit CISA KEV: CVE-2019-7195 — QNAP Photo Station Path Traversal Vulnerability art-2151
crit CISA KEV: CVE-2019-7194 — QNAP Photo Station Path Traversal Vulnerability art-2152
crit CISA KEV: CVE-2019-7193 — QNAP QTS Improper Input Validation Vulnerability art-2153
crit CISA KEV: CVE-2019-7192 — QNAP Photo Station Improper Access Control Vulnerability art-2154
crit CISA KEV: CVE-2022-26134 — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability art-2188
crit CISA KEV: CVE-2016-0034 — Microsoft Silverlight Runtime Remote Code Execution Vulnerability art-2197
crit CISA KEV: CVE-2013-3993 — IBM InfoSphere BigInsights Invalid Input Vulnerability art-2216
crit CISA KEV: CVE-2013-0431 — Oracle JRE Sandbox Bypass Vulnerability art-2219
crit CISA KEV: CVE-2013-0422 — Oracle JRE Remote Code Execution Vulnerability art-2220
crit CISA KEV: CVE-2013-0074 — Microsoft Silverlight Double Dereference Vulnerability art-2221
crit CISA KEV: CVE-2012-1710 — Oracle Fusion Middleware Unspecified Vulnerability art-2222
crit CISA KEV: CVE-2010-1428 — Red Hat JBoss Information Disclosure Vulnerability art-2223
crit CISA KEV: CVE-2010-0738 — Red Hat JBoss Authentication Bypass Vulnerability art-2225
crit CISA KEV: CVE-2018-19953 — QNAP NAS File Station Cross-Site Scripting Vulnerability art-2228
crit CISA KEV: CVE-2018-19949 — QNAP NAS File Station Command Injection Vulnerability art-2229
crit CISA KEV: CVE-2018-19943 — QNAP NAS File Station Cross-Site Scripting Vulnerability art-2230
crit CISA KEV: CVE-2017-0147 — Microsoft Windows SMBv1 Information Disclosure Vulnerability art-2231
crit CISA KEV: CVE-2017-18362 — Kaseya VSA SQL Injection Vulnerability art-2238
crit CISA KEV: CVE-2016-3351 — Microsoft Internet Explorer and Edge Information Disclosure Vulnerability art-2240
crit CISA KEV: CVE-2020-0638 — Microsoft Update Notification Manager Privilege Escalation Vulnerability art-2252
crit CISA KEV: CVE-2019-1385 — Microsoft Windows AppX Deployment Extensions Privilege Escalation Vulnerability art-2264
crit CISA KEV: CVE-2019-1130 — Microsoft Windows AppX Deployment Service Privilege Escalation Vulnerability art-2265
crit CISA KEV: CVE-2022-1388 — F5 BIG-IP Missing Authentication Vulnerability art-2277
crit CISA KEV: CVE-2022-29464 — WSO2 Multiple Products Unrestrictive Upload of File Vulnerability art-2305
crit CISA KEV: CVE-2018-6882 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability art-2317
crit CISA KEV: CVE-2019-16057 — D-Link DNS-320 Remote Code Execution Vulnerability art-2324
crit CISA KEV: CVE-2022-22954 — VMware Workspace ONE Access and Identity Manager Server-Side Template Injection Vulnerability art-2330
crit CISA KEV: CVE-2022-24521 — Microsoft Windows CLFS Driver Privilege Escalation Vulnerability art-2332
crit CISA KEV: CVE-2018-7602 — Drupal Core Remote Code Execution Vulnerability art-2333
crit CISA KEV: CVE-2018-20753 — Kaseya VSA Remote Code Execution Vulnerability art-2334
crit CISA KEV: CVE-2021-42287 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability art-2344
crit CISA KEV: CVE-2021-42278 — Microsoft Active Directory Domain Services Privilege Escalation Vulnerability art-2345
crit CISA KEV: CVE-2017-0148 — Microsoft SMBv1 Server Remote Code Execution Vulnerability art-2356
crit Alert: LaughTilYouCry ransomware sabotages npm package (with puns) art-2365
crit CISA KEV: CVE-2021-28799 — QNAP NAS Improper Authorization Vulnerability art-2372
crit CISA KEV: CVE-2018-10562 — Dasan GPON Routers Command Injection Vulnerability art-2374
crit CISA KEV: CVE-2021-38646 — Microsoft Office Access Connectivity Engine Remote Code Execution Vulnerability art-2380
crit CISA KEV: CVE-2021-26085 — Atlassian Confluence Server Pre-Authorization Arbitrary File Read Vulnerability art-2382
crit CISA KEV: CVE-2021-20028 — SonicWall Secure Remote Access (SRA) SQL Injection Vulnerability art-2383
crit CISA KEV: CVE-2018-8440 — Microsoft Windows Privilege Escalation Vulnerability art-2385
crit CISA KEV: CVE-2018-8406 — Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability art-2386
crit CISA KEV: CVE-2018-8405 — Microsoft DirectX Graphics Kernel Privilege Escalation Vulnerability art-2387
crit CISA KEV: CVE-2017-0213 — Microsoft Windows Privilege Escalation Vulnerability art-2388
crit CISA KEV: CVE-2016-0189 — Microsoft Internet Explorer Memory Corruption Vulnerability art-2393
crit CISA KEV: CVE-2016-0151 — Microsoft Windows CSRSS Security Feature Bypass Vulnerability art-2394
crit CISA KEV: CVE-2013-2551 — Microsoft Internet Explorer Use-After-Free Vulnerability art-2401
crit CISA KEV: CVE-2013-2465 — Oracle Java SE Unspecified Vulnerability art-2402
crit CISA KEV: CVE-2022-21999 — Microsoft Windows Print Spooler Privilege Escalation Vulnerability art-2412
crit CISA KEV: CVE-2021-42237 — Sitecore XP Remote Command Execution Vulnerability art-2413
crit CISA KEV: CVE-2021-22941 — Citrix ShareFile Improper Access Control Vulnerability art-2414
crit CISA KEV: CVE-2020-2021 — Palo Alto Networks PAN-OS Authentication Bypass Vulnerability art-2421
crit CISA KEV: CVE-2019-15107 — Webmin Command Injection Vulnerability art-2427
crit CISA KEV: CVE-2019-11043 — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability art-2430
crit CISA KEV: CVE-2018-1273 — VMware Tanzu Spring Data Commons Property Binder Vulnerability art-2438
crit CISA KEV: CVE-2018-11138 — Quest KACE System Management Appliance Remote Command Execution Vulnerability art-2439
crit CISA KEV: CVE-2017-12615 — Apache Tomcat on Windows Remote Code Execution Vulnerability art-2446
crit CISA KEV: CVE-2017-0146 — Microsoft Windows SMB Remote Code Execution Vulnerability art-2447
crit CISA KEV: CVE-2010-2861 — Adobe ColdFusion Directory Traversal Vulnerability art-2471
crit CISA KEV: CVE-2019-1405 — Microsoft Windows Universal Plug and Play (UPnP) Service Privilege Escalation Vulnerability art-2486
crit CISA KEV: CVE-2019-1322 — Microsoft Windows Privilege Escalation Vulnerability art-2487
crit CISA KEV: CVE-2019-1315 — Microsoft Windows Error Reporting Manager Privilege Escalation Vulnerability art-2488
crit CISA KEV: CVE-2019-1253 — Microsoft Windows AppX Deployment Server Privilege Escalation Vulnerability art-2489
crit CISA KEV: CVE-2019-1129 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability art-2491
crit CISA KEV: CVE-2019-1069 — Microsoft Task Scheduler Privilege Escalation Vulnerability art-2492
crit CISA KEV: CVE-2019-1064 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability art-2493
crit CISA KEV: CVE-2019-0841 — Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability art-2494
crit CISA KEV: CVE-2019-0543 — Microsoft Windows Privilege Escalation Vulnerability art-2495
crit CISA KEV: CVE-2018-8120 — Microsoft Win32k Privilege Escalation Vulnerability art-2496
crit CISA KEV: CVE-2017-0101 — Microsoft Windows Transaction Manager Privilege Escalation Vulnerability art-2497
crit CISA KEV: CVE-2016-3309 — Microsoft Windows Kernel Privilege Escalation Vulnerability art-2498
crit CISA KEV: CVE-2015-2546 — Microsoft Win32k Memory Corruption Vulnerability art-2499
crit CISA KEV: CVE-2009-3960 — Adobe BlazeDS Information Disclosure Vulnerability art-2518
crit CISA KEV: CVE-2021-41379 — Microsoft Windows Installer Privilege Escalation Vulnerability art-2527
crit CISA KEV: CVE-2018-8581 — Microsoft Exchange Server Privilege Escalation Vulnerability art-2533
crit CISA KEV: CVE-2016-1019 — Adobe Flash Player Arbitrary Code Execution Vulnerability art-2578
crit CISA KEV: CVE-2016-0099 — Microsoft Windows Secondary Logon Service Privilege Escalation Vulnerability art-2579
crit CISA KEV: CVE-2015-7645 — Adobe Flash Player Arbitrary Code Execution Vulnerability art-2580
crit CISA KEV: CVE-2015-1701 — Microsoft Win32k Privilege Escalation Vulnerability art-2588
crit CISA KEV: CVE-2012-4681 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability art-2600
crit CISA KEV: CVE-2012-1723 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability art-2602
crit CISA KEV: CVE-2012-0507 — Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability art-2604
crit CISA KEV: CVE-2010-0188 — Adobe Reader and Acrobat Arbitrary Code Execution Vulnerability art-2610
crit CISA KEV: CVE-2008-2992 — Adobe Reader and Acrobat Input Validation Vulnerability art-2614
crit CISA KEV: CVE-2022-24682 — Synacor Zimbra Collaborate Suite (ZCS) Cross-Site Scripting Vulnerability art-2622
crit CISA KEV: CVE-2019-0752 — Microsoft Internet Explorer Type Confusion Vulnerability art-2641
crit CISA KEV: CVE-2018-8174 — Microsoft Windows VBScript Engine Out-of-Bounds Write Vulnerability art-2642
crit CISA KEV: CVE-2018-20250 — WinRAR Absolute Path Traversal Vulnerability art-2643
crit CISA KEV: CVE-2018-15982 — Adobe Flash Player Use-After-Free Vulnerability art-2644
crit CISA KEV: CVE-2020-0796 — Microsoft SMBv3 Remote Code Execution Vulnerability art-2654
crit CISA KEV: CVE-2017-10271 — Oracle Corporation WebLogic Server Remote Code Execution Vulnerability art-2658
crit CISA KEV: CVE-2017-0145 — Microsoft SMBv1 Remote Code Execution Vulnerability art-2661
crit CISA KEV: CVE-2017-0144 — Microsoft SMBv1 Remote Code Execution Vulnerability art-2662
crit CISA KEV: CVE-2022-21882 — Microsoft Win32k Privilege Escalation Vulnerability art-2673
crit CISA KEV: CVE-2021-20038 — SonicWall SMA 100 Appliances Stack-Based Buffer Overflow Vulnerability art-2679
crit CISA KEV: CVE-2020-0787 — Microsoft Windows Background Intelligent Transfer Service (BITS) Improper Privilege Management Vulnerability art-2681
crit CISA KEV: CVE-2018-8453 — Microsoft Win32k Privilege Escalation Vulnerability art-2692
crit CISA KEV: CVE-2021-21975 — VMware Server Side Request Forgery in vRealize Operations Manager API art-2703
crit CISA KEV: CVE-2019-1458 — Microsoft Win32k Privilege Escalation Vulnerability art-2720
crit CISA KEV: CVE-2019-2725 — Oracle WebLogic Server, Injection art-2722
crit CISA KEV: CVE-2018-13382 — Fortinet FortiOS and FortiProxy Improper Authorization art-2724
crit CISA KEV: CVE-2018-13383 — Fortinet FortiOS and FortiProxy Out-of-bounds Write art-2725
crit CISA KEV: CVE-2019-1579 — Palo Alto Networks PAN-OS Remote Code Execution Vulnerability art-2726
crit CISA KEV: CVE-2021-43890 — Microsoft Windows AppX Installer Spoofing Vulnerability art-2752
crit CISA KEV: CVE-2017-12149 — Red Hat JBoss Application Server Remote Code Execution Vulnerability art-2767
crit CISA KEV: CVE-2021-44228 — Apache Log4j2 Remote Code Execution Vulnerability art-2772
crit CISA KEV: CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF) art-2779
crit CISA KEV: CVE-2021-40449 — Microsoft Windows Win32k Privilege Escalation Vulnerability art-2787
crit CISA KEV: CVE-2021-42321 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2788
crit CISA KEV: CVE-2021-27104 — Accellion FTA OS Command Injection Vulnerability art-2803
crit CISA KEV: CVE-2021-27102 — Accellion FTA OS Command Injection Vulnerability art-2804
crit CISA KEV: CVE-2021-27101 — Accellion FTA SQL Injection Vulnerability art-2805
crit CISA KEV: CVE-2021-27103 — Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability art-2806
crit CISA KEV: CVE-2018-4878 — Adobe Flash Player Use-After-Free Vulnerability art-2811
crit CISA KEV: CVE-2021-42013 — Apache HTTP Server Path Traversal Vulnerability art-2815
crit CISA KEV: CVE-2017-5638 — Apache Struts Remote Code Execution Vulnerability art-2820
crit CISA KEV: CVE-2021-26084 — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability art-2850
crit CISA KEV: CVE-2019-11580 — Atlassian Crowd and Crowd Data Center Remote Code Execution Vulnerability art-2851
crit CISA KEV: CVE-2019-3396 — Atlassian Confluence Server and Data Center Server-Side Template Injection Vulnerability art-2852
crit CISA KEV: CVE-2021-42258 — BQE BillQuick Web Suite SQL Injection Vulnerability art-2853
crit CISA KEV: CVE-2020-3580 — Cisco ASA and FTD Cross-Site Scripting (XSS) Vulnerability art-2855
crit CISA KEV: CVE-2019-13608 — Citrix StoreFront Server XML External Entity (XXE) Processing Vulnerability art-2865
crit CISA KEV: CVE-2019-19781 — Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability art-2869
crit CISA KEV: CVE-2019-11634 — Citrix Workspace Application and Receiver for Windows Remote Code Execution Vulnerability art-2870
crit CISA KEV: CVE-2017-9822 — DotNetNuke (DNN) Remote Code Execution Vulnerability art-2874
crit CISA KEV: CVE-2018-7600 — Drupal Core Remote Code Execution Vulnerability art-2877
crit CISA KEV: CVE-2021-22205 — GitLab Community and Enterprise Editions Remote Code Execution Vulnerability art-2878
crit CISA KEV: CVE-2018-6789 — Exim Buffer Overflow Vulnerability art-2879
crit CISA KEV: CVE-2020-5902 — F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability art-2882
crit CISA KEV: CVE-2021-22986 — F5 BIG-IP and BIG-IQ Centralized Management iControl REST Remote Code Execution Vulnerability art-2883
crit CISA KEV: CVE-2021-35464 — ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability art-2884
crit CISA KEV: CVE-2019-5591 — Fortinet FortiOS Default Configuration Vulnerability art-2885
crit CISA KEV: CVE-2020-12812 — Fortinet FortiOS SSL VPN Improper Authentication Vulnerability art-2886
crit CISA KEV: CVE-2018-13379 — Fortinet FortiOS SSL VPN Path Traversal Vulnerability art-2887
crit CISA KEV: CVE-2021-30116 — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability art-2916
crit CISA KEV: CVE-2014-1812 — Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability art-2921
crit CISA KEV: CVE-2021-38647 — Microsoft Open Management Infrastructure (OMI) Remote Code Execution Vulnerability art-2922
crit CISA KEV: CVE-2016-0167 — Microsoft Win32k Privilege Escalation Vulnerability art-2923
crit CISA KEV: CVE-2020-0878 — Microsoft Edge and Internet Explorer Memory Corruption Vulnerability art-2924
crit CISA KEV: CVE-2021-34523 — Microsoft Exchange Server Privilege Escalation Vulnerability art-2942
crit CISA KEV: CVE-2020-0688 — Microsoft Exchange Server Validation Key Remote Code Execution Vulnerability art-2946
crit CISA KEV: CVE-2017-0143 — Microsoft Windows Server Message Block (SMBv1) Remote Code Execution Vulnerability art-2947
crit CISA KEV: CVE-2019-0708 — Microsoft Remote Desktop Services Remote Code Execution Vulnerability art-2949
crit CISA KEV: CVE-2021-34473 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2950
crit CISA KEV: CVE-2021-1732 — Microsoft Win32k Privilege Escalation Vulnerability art-2952
crit CISA KEV: CVE-2021-34527 — Microsoft Windows Print Spooler Remote Code Execution Vulnerability art-2953
crit CISA KEV: CVE-2021-31207 — Microsoft Exchange Server Security Feature Bypass Vulnerability art-2954
crit CISA KEV: CVE-2019-0803 — Microsoft Win32k Privilege Escalation Vulnerability art-2955
crit CISA KEV: CVE-2021-26411 — Microsoft Internet Explorer Memory Corruption Vulnerability art-2959
crit CISA KEV: CVE-2021-40444 — Microsoft MSHTML Remote Code Execution Vulnerability art-2961
crit CISA KEV: CVE-2021-36942 — Microsoft Windows Local Security Authority (LSA) Spoofing Vulnerability art-2965
crit CISA KEV: CVE-2019-1215 — Microsoft Windows Privilege Escalation Vulnerability art-2966
crit CISA KEV: CVE-2018-0798 — Microsoft Office Memory Corruption Vulnerability art-2967
crit CISA KEV: CVE-2017-11882 — Microsoft Office Memory Corruption Vulnerability art-2972
crit CISA KEV: CVE-2019-1367 — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability art-2975
crit CISA KEV: CVE-2017-0199 — Microsoft Office and WordPad Remote Code Execution Vulnerability art-2976
crit CISA KEV: CVE-2020-0968 — Microsoft Internet Explorer Scripting Engine Memory Corruption Vulnerability art-2980
crit CISA KEV: CVE-2020-1472 — Microsoft Netlogon Privilege Escalation Vulnerability art-2981
crit CISA KEV: CVE-2021-26855 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2982
crit CISA KEV: CVE-2021-26858 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2983
crit CISA KEV: CVE-2021-27065 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2984
crit CISA KEV: CVE-2021-1675 — Microsoft Windows Print Spooler Remote Code Execution Vulnerability art-2986
crit CISA KEV: CVE-2019-0604 — Microsoft SharePoint Remote Code Execution Vulnerability art-2989
crit CISA KEV: CVE-2021-26857 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2992
crit CISA KEV: CVE-2021-36955 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability art-2997
crit CISA KEV: CVE-2019-18935 — Progress Telerik UI for ASP.NET AJAX Deserialization of Untrusted Data Vulnerability art-3012
crit CISA KEV: CVE-2021-22893 — Ivanti Pulse Connect Secure Use-After-Free Vulnerability art-3013
crit CISA KEV: CVE-2019-11510 — Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability art-3019
crit CISA KEV: CVE-2019-11539 — Ivanti Pulse Connect Secure and Policy Secure Command Injection Vulnerability art-3020
crit CISA KEV: CVE-2018-2380 — SAP Customer Relationship Management (CRM) Path Traversal Vulnerability art-3029
crit CISA KEV: CVE-2021-35211 — SolarWinds Serv-U Remote Code Execution Vulnerability art-3037
crit CISA KEV: CVE-2021-20021 — SonicWall Email Security Improper Privilege Management Vulnerability art-3040
crit CISA KEV: CVE-2019-7481 — SonicWall SMA100 SQL Injection Vulnerability art-3041
crit CISA KEV: CVE-2021-20016 — SonicWall SSLVPN SMA100 SQL Injection Vulnerability art-3042
crit CISA KEV: CVE-2020-12271 — Sophos SFOS SQL Injection Vulnerability art-3043
crit CISA KEV: CVE-2019-5544 — VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability art-3063
crit CISA KEV: CVE-2020-3992 — VMware ESXi OpenSLP Use-After-Free Vulnerability art-3064
crit CISA KEV: CVE-2021-22005 — VMware vCenter Server File Upload Vulnerability art-3066
crit CISA KEV: CVE-2021-21972 — VMware vCenter Server Remote Code Execution Vulnerability art-3068
crit CISA KEV: CVE-2021-21985 — VMware vCenter Server Improper Input Validation Vulnerability art-3069
crit CISA KEV: CVE-2021-40539 — Zoho ManageEngine ADSelfService Plus Authentication Bypass Vulnerability art-3075
high Call for nominations: The Snykie awards for Secure Development art-3105
high Understanding the software supply chain security requirements in the cybersecurity Executive Order art-3169
high A technical analysis of the Capital One cloud misconfiguration breach art-3518
high Launching the State of Open Source Security Survey art-3658
high Snyk is available on the GOV.UK Digital Marketplace! art-3666