#랜섬웨어

[CVE-2010-0249] Microsoft Internet Explorer Use-After-Free Vulnerability

CISA

분석: AI가 바꾼 사이버 위협 지형 — 소프트웨어 취약점이 최대 침해 경로

버라이존 2026 DBIR에 따르면 전체 침해 사고의 31%가 소프트웨어 취약점 악용에서 시작되며, AI 기술의 발전이 공격 속도를 가속화하고 있습니다. 국내 기업은 CISA KEV 카탈로그 기반 취약점 관리, 자동화된 패치 프로세스, …

CVE-2026-34926: Trend Micro Apex One 디렉토리 트래버설 KEV 등록과 엔드포인트 보안 점검

Trend Micro Apex One 온프레미스 디렉토리 트래버설 취약점 CVE-2026-34926이 CISA KEV에 등재되었습니다. 이 취약점은 로컬 관리자 권한을 가진 공격자가 보안 에이전트에 악성 코드를 배포할 수 있어 기업 엔드포인트 보안에 심각한 …

구조적 보안 위기의 본질, 생성형 AI와 양자 시대에 대응하는 포스트 퀀텀 암호화와 자동화 기반 혁신 전략

2026-05-23 보안 인사이트

무너진 보안 경계와 확산하는 공격 표면, 기업은 정밀 방어 모델로의 전략적 전환과 보안 투자 우선순위를 과감히 재조정해야 한다.

2026-05-22 보안 인사이트

CVE-2026-41091: Microsoft Defender 링크 추적 취약점 대응 가이드

CVE-2026-41091 Microsoft Defender 링크 추적 취약점 분석: CVSS 7.8(HIGH), CWE-59, 영향 버전 및 패치 정보, 즉시 대응 조치 포함

CVE-2010-0806: Internet Explorer Peer Objects Use-After-Free 취약점 대응 가이드

CVE-2010-0806은 IE 6/7의 Peer Objects 컴포넌트에서 발생하는 Use-After-Free 취약점으로, 원격 코드 실행이 가능하며 CISA KEV 카탈로그에 포함된 지속적인 위협입니다. 즉시 대응으로 MS10-018 보안 업데이트 적용과 IE 8 이상으로 업그레이드가 필요합니다.

CVE-2009-1537: Microsoft DirectX NULL 바이트 오버라이트 취약점 분석 및 대응 가이드

Microsoft DirectX DirectShow 컴포넌트의 CVE-2009-1537 취약점 분석. QuickTime 미디어 파일을 통한 원격 코드 실행 위협과 영향받는 시스템, MS09-028 패치 및 완화 조치 안내.

CVE-2008-4250: Windows Server Service 버퍼 오버플로우 취약점 대응 가이드

CVE-2008-4250은 Windows Server Service의 치명적인 버퍼 오버플로우 취약점으로, Conficker 랜섬웨어에 악용되어 전 세계적으로 수백만 대의 시스템을 감염시켰습니다. 본 가이드는 기술적 원리, 영향 범위, 실제 공격 사례 및 기업 대응 전략을 …

오래된 KEV 취약점이 다시 위험해지는 이유: IE·DirectX·Windows 레거시 자산 점검 가이드

CISA가 2026년 5월 20일, 10년 이상 된 4가지 Microsoft 취약점을 KEV 카탈로그에 등록했다. 국내 기업 환경에서는 여전히 레거시 자산으로 운영되는 시스템이 많아 실제 보안 위험으로 남아 있다. 본 가이드는 자산 …

[CVE-2026-9082] Drupal Core SQL Injection Vulnerability

CISA

붕괴하는 디지털 경계와 공격 자동화 속에서, 아이덴티티와 공급망 무결성을 확보하여 보안을 기업 생존을 견인하는 핵심 전략 자산으로 재편하라

2026-05-20 보안 인사이트

[CVE-2025-34291] Langflow Origin Validation Error Vulnerability

CISA

[CVE-2026-34926] Trend Micro Apex One (On-Premise) Directory Traversal Vulnerability

CISA

AI 자율 공격과 양자 컴퓨팅으로 무너지는 보안 경계, 자율형 SOC와 신원 기반 보안을 통한 선제적 방어 진화와 투자 재조정의 시점

2026-05-19 보안 인사이트

[CVE-2008-4250] Microsoft Windows Buffer Overflow Vulnerability

CISA

[CVE-2009-1537] Microsoft DirectX NULL Byte Overwrite Vulnerability

CISA

[CVE-2009-3459] Adobe Acrobat and Reader Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2010-0806] Microsoft Internet Explorer Use-After-Free Vulnerability

CISA

[CVE-2026-41091] Microsoft Defender Link Following Vulnerability

CISA

[CVE-2026-45498] Microsoft Defender Denial of Service Vulnerability

CISA

공급망과 물리적 인프라로 위협이 확산되는 지금, 제로 트러스트와 거버넌스 고도화가 기업 생존을 위한 핵심 전략이 되어야 한다.

2026-05-18 보안 인사이트

WooCommerce 결제 스키밍으로 악용 중인 Funnel Builder 취약점 대응 체크리스트

Funnel Builder 플러그인 3.15.0.3 이전 버전의 취약점이 Magecart 스타일의 결제 스키밍 공격에 활용되고 있습니다. 40,000개 이상의 WooCommerce 스토어가 영향받을 수 있으며, 즉시 플러그인 업데이트와 외부 스크립트 검사가 필요합니다.

붕괴된 경계 기반 방어를 제로 트러스트와 지속적 위협 관리로 혁신하고 비즈니스 연속성을 위한 통제권을 확보해야 합니다.

2026-05-14 보안 인사이트

구글 보고서로 본 중국·북한·러시아의 AI 기반 사이버 공격 고도화

구글 GTIG 보고서 분석: 중국·북한·러시아가 AI를 활용해 제로데이 공격 자동화, 2FA 우회, 악성코드 자율 운영 등 사이버 공격을 산업화 단계로 진입시킴. 기업 보안 담당자는 AI 기반 방어 체계 구축이 필수.

[CVE-2026-42897] Microsoft Exchange Server Cross-Site Scripting Vulnerability

CISA

디지털을 넘어 물리적 공급망으로 확장된 위협에 맞서 법적 리스크를 차단할 자율형 AI 방어 체계와 데이터 주권 확보가 기업의 최우선 과제다.

2026-05-13 보안 인사이트

9월 시행 중벌적 과징금: 중대한 보안사고 매출 10% 제재 대비 체크리스트

개인정보보호위원회가 2026년 9월 시행을 목표로 추진 중인 '예방 중심 개인정보 관리체계 전환 계획'의 핵심 내용은 반복적이거나 중대한 개인정보보호법 위반에 대해 연 매출액의 최대 10% 과징금 부과입니다. 본 체크리스트는 기업 규모별, …

[CVE-2026-20182] Cisco Catalyst SD-WAN Controller Authentication Bypass Vulnerability

CISA

AI와 양자 위협에 무력화된 구형 방어, 거버넌스 혁신과 차세대 암호 도입으로 보안 복원력을 확보하라

2026-05-12 보안 인사이트

엔비디아 "지포스 나우" 게이머 개인정보 대거 유출: 클라우드 게임 공급망 보안 리스크

2026년 5월, 엔비디아의 클라우드 게임 서비스 지포스 나우의 아르메니아 제휴사 GFN.AM에서 대규모 개인정보 유출 사건 발생. 3월 9일 침해 발생 후 54일간 탐지되지 않음. 유출 정보는 이메일, 전화번호, 생년월일 등 …

AI 에이전트가 사이버 공격 도구로 진화하는 방식과 방어 전략

AI 에이전트가 사이버 공격의 전 과정을 자동화하며 공격 속도가 시간 단위로 단축되고 있다. 이에 대응하기 위해 기업은 지속적 검증, 외부 위협 인텔리전스 통합, 자율형 SOC 구축, AI 기반 취약점 분석 …

Palo Alto Networks PAN-OS CVE-2026-0300 메모리 손상 취약점 대응 전략

CVE-2026-0300은 PAN-OS 방화벽의 Captive Portal에 있는 치명적인 버퍼 오버플로우 취약점으로, CISA KEV 카탈로그에 등재되어 활발히 악용 중입니다. 5월 9일 CISA 완화 기한 전에 Captive Portal 인터넷 노출 차단이 필수적입니다.

[CVE-2026-42208] BerriAI LiteLLM SQL Injection Vulnerability

CISA

FBI가 경고한 화물 절도형 사이버 범죄: 물류 시스템이 공격 표면이 되는 방식

FBI IC3 경고(2026-04-30)에 따르면 사이버 기반 화물 절도가 급증 중. 평균 피해 $273,990, 2025년 총 $725 million 피해. 이메일 스푸핑, BEC, 로드보드 해킹, RMM 도구 악용 등 다단계 공격 수법 …

[CVE-2026-6973] Ivanti Endpoint Manager Mobile (EPMM) Improper Input Validation Vulnerability

CISA

[CVE-2026-0300] Palo Alto Networks PAN-OS Out-of-bounds Write Vulnerability

CISA

[CVE-2026-31431] Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability

CISA

암호화 트래픽 분석 기술과 보안

현대 보안 환경에서 암호화 트래픽 해독 없이 위협을 탐지하는 메타데이터 분석, 행동 패턴 인식, 머신러닝 기술의 중요성이 대두되고 있습니다. RITA, Malcolm, TLS-Malware-Detection-with-Machine-Learning 등 오픈소스 도구와 99% 정확도의 Hybrid-CNN-BiLSTM 아키텍처를 활용하여 …

[CVE-2026-41940] WebPros cPanel & WHM and WP2 (WordPress Squared) Missing Authentication for Critical Function Vulnerability

CISA

취약 드라이버를 내장한 Reynolds 랜섬웨어

SK쉴더스

암호화폐 탈취 랜섬웨어 '스파크캣' 변종 분석 - 안드로이드·구글플레이 보안 우회 기법

안드로이드·구글플레이 보안 우회 기법을 활용한 암호화폐 탈취 랜섬웨어 '스파크캣' 변종의 기술적 작동 원리와 탈취 메커니즘 분석. 접근성 서비스 악용, 키로깅, 클립보드 조작 등 다양한 위협 벡터와 대응 방안 제시. 사용자 …

재해복구와 서비스 연속성 - 데이터 보존의 진화

하이브리드 클라우드 환경에서 랜섬웨어 공격의 진화로 인해 전통적인 백업 전략의 한계가 드러나고 있습니다. 불변성과 에어갭을 포함한 3-2-1+ 백업 규칙, 자동화된 장애조치 시스템, 그리고 지속적인 DR 테스트가 현대적 데이터 보존 전략의 …

스마트 항만 보안: 물류 인프라 위협과 보안 강화 방안

스마트 항만의 디지털 전환에 따른 사이버 보안 위협을 분석하고, IT/OT 통합 보안, 네트워크 분리, 공급망 보안 강화 방안을 제시합니다. 물류 시스템 공격 벡터와 최근 보안 사례를 바탕으로, 실무자를 위한 체크리스트와 …

[CVE-2024-1708] ConnectWise ScreenConnect Path Traversal Vulnerability

CISA

[CVE-2026-32202] Microsoft Windows Protection Mechanism Failure Vulnerability

CISA

CVE-2026-5752: Cohere AI Terrarium 샌드박스 탈출 취약점 분석

CVE-2026-5752는 Cohere AI Terrarium 샌드박스의 치명적인 탈출 취약점으로 CVSS 9.3점(Critical)입니다. 공격자가 루트 권한으로 임의 코드를 실행할 수 있으며, v1.0.1로 패치되었습니다. mock document 객체의 Object.prototype 상속 문제로 인해 발생했습니다.

Trigona 랜섬웨어의 커스텀 데이터 추출 도구 심층 분석

Trigona 랜섬웨어 그룹이 데이터 탈취 공격에 사용하는 커스텀 개발 도구가 발견

SentinelOne 2026 Annual Threat Report: 현대 공격자의 8단계 침투 전술

SentinelOne 2026 Annual Threat Report를 분석하여 현대 공격자의 8단계 침투 전술을 소개합니다. 신원 탈취, CI/CD 파이프라인 침투, 엣지 디바이스 악용 등 새로운 공격 패턴과 이에 대한 대응 방안을 제시합니다.

[CVE-2025-29635] D-Link DIR-823X Command Injection Vulnerability

CISA

[CVE-2024-7399] Samsung MagicINFO 9 Server Path Traversal Vulnerability

CISA

[CVE-2024-57728] SimpleHelp Path Traversal Vulnerability

CISA

[CVE-2024-57726] SimpleHelp Missing Authorization Vulnerability

CISA

[CVE-2026-39987] Marimo Remote Code Execution Vulnerability

CISA

[CVE-2026-33825] Microsoft Defender Insufficient Granularity of Access Control Vulnerability

CISA

랜섬웨어 대응, 어디까지 준비되어 있나요? 중소기업이 놓치기 쉬운 대응 체계!

SK쉴더스

Supply Chain Attack - 소프트웨어 공급망 보안 위협과 대응 전략

소프트웨어 공급망 공격(Supply Chain Attack)은 공격자가 최종 소비자에게 도달하기 전에 제품이나 제품 배달 메커니즘을 조작하여 데이터나 시스템을 탈취하는 정교한 공격 방식입니다. 이 Deep Dive에서는 SolarWinds, Codecov, Kaseya, 3CX 등 실제 …

[CVE-2026-20122] Cisco Catalyst SD-WAN Manager Incorrect Use of Privileged APIs Vulnerability

CISA

[CVE-2026-20133] Cisco Catalyst SD-WAN Manager Exposure of Sensitive Information to an Unauthorized Actor Vulnerability

CISA

[CVE-2025-2749] Kentico Xperience Path Traversal Vulnerability

CISA

[CVE-2023-27351] PaperCut NG/MF Improper Authentication Vulnerability

CISA

[CVE-2025-48700] Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

CISA

[CVE-2026-20128] Cisco Catalyst SD-WAN Manager Storing Passwords in a Recoverable Format Vulnerability

CISA

[CVE-2025-32975] Quest KACE Systems Management Appliance (SMA) Improper Authentication Vulnerability

CISA

[CVE-2024-27199] JetBrains TeamCity Relative Path Traversal Vulnerability

CISA

AI 위협으로 무력화된 수동적 방어 체계를 넘어, 보안을 기술 주권과 핵심 경쟁력으로 재정립하는 제로 트러스트 전략을 수립하십시오.

2026-04-17 보안 인사이트

CVE-2026-34621: Acrobat Prototype Pollution 취약점 메커니즘

CVE-2026-34621 취약점은 Adobe Acrobat과 Reader의 Prototype Pollution 오류로, 현재 악용 중인 Critical 레벨 보안 문제입니다. 악성 PDF 열면 원격 코드 실행 가능, 즉시 업데이트 필요.

AI 초지능 위협과 양자 시대, 제로 트러스트 기반 자율 방어 체계로 보안을 핵심 생존 전략으로 혁신하십시오.

2026-04-15 보안 인사이트

Deep Dive: CVE-2020-9715 - Adobe Acrobat Use-After-Free 취약점

Adobe Acrobat과 Reader의 Use-After-Free 취약점 CVE-2020-9715에 대한 상세 분석. 조작된 PDF 파일을 통해 임의 코드 실행이 가능하며, CISA KEV 카탈로그에 포함되어 실제 악용이 확인됨.

[CVE-2026-34197] Apache ActiveMQ Improper Input Validation Vulnerability

CISA

초개인화 위협과 규제의 파고 앞에서, 자율 복원력과 통합 거버넌스를 기반으로 한 전략적 보안 경영만이 기업 생존의 답이다.

2026-04-14 보안 인사이트

[CVE-2009-0238] Microsoft Office Remote Code Execution

CISA

[CVE-2026-32201] Microsoft SharePoint Server Improper Input Validation Vulnerability

CISA

[CVE-2012-1854] Microsoft Visual Basic for Applications Insecure Library Loading Vulnerability

CISA

[CVE-2025-60710] Microsoft Windows Link Following Vulnerability

CISA

[CVE-2023-21529] Microsoft Exchange Server Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-36424] Microsoft Windows Out-of-Bounds Read Vulnerability

CISA

[CVE-2020-9715] Adobe Acrobat Use-After-Free Vulnerability

CISA

[CVE-2026-21643] Fortinet SQL Injection Vulnerability

CISA

[CVE-2026-34621] Adobe Acrobat and Reader Prototype Pollution Vulnerability

CISA

보안 패러다임 근본적 전환 시대, 양자내성암호 기반 주권 방어와 하이브리드 거버넌스 구축이 경쟁 우위의 핵심 열쇠

2026-04-10 보안 인사이트

CVE-2026-1340: Ivanti Endpoint Manager Mobile (EPMM) 코드 인젝 취약점 심층 분석

Ivanti Endpoint Manager Mobile (EPMM)의 CVE-2026-1340 코드 인젝 취약점(CVSS 9.8 CRITICAL)에 대한 심층 분석. 취약점 개요, 기술적 세부사항, 영향 분석, 공격 시나리오, 즉시 대응 전략, 중장기 대응 방안, 벤치마크 등을 …

초국가적 AI 공격 시대, 기술 소유를 넘어선 신뢰 기반 보안이 디지털 패권 경쟁의 유일한 생존 전략이다.

2026-04-09 보안 인사이트

CVE-2026-3502: TrueConf Client Download of Code Without Integrity Check Vulnerability 심층 분석

CVE-2026-3502는 TrueConf Client의 업데이트 무결성 검사 결함으로 발생한 높은 위험도 취약점. Operation TrueChaos 캠페인을 통해 실제 악용되어 동남아시아 정부 기관 타겟팅. 2026-04-16까지 패치 필수.

CVE-2025-53521: F5 BIG-IP Stack-Based Buffer Overflow 심층 분석

F5 BIG-IP APM의 스택 기반 버퍼 오버플로우 취약점으로 원격 코드 실행이 가능합니다. CVSS 4.0 최상위 점수와 CISA KEV 포함으로 인해 즉각적인 패치가 필요합니다.

산업로봇의 사이버 위협 대응 전략

산업로봇 보안에 관한 심층 분석으로 IEC 62443, NIST SP 800-82, ISO 27001 기반 보안 표준 준수 방안 제시. ROS 보안 취약점, 사이버 위협 패턴, 네트워크 분리, 통신 암호화, 로봇 제어 …

[CVE-2026-1340] Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA

기존 보안 모델의 붕괴와 구조적 변화, 비즈니스 설계부터 내재화된 데이터 중심 자율 거버넌스가 유일한 생존 전략이다

2026-04-06 보안 인사이트

CVE-2026-35616: Fortinet FortiClient EMS "EMS-Evasion" 심층 분석

Fortinet FortiClient EMS에서 발견된 사전 인증 API 우회 취약점 CVE-2026-35616은 CVSS 9.1의 심각도로 평가되며, 인증 없이 원격 코드 실행이 가능한다. 이 취약점은 2026년 4월 4일에 공개되었으나, 이미 3월 31일부터 실제 …

Citrix ShareFile 취약점 - 인증되지 않은 RCE 사슬 공격

CVE-2024-43035/36/37 취약점 분석 보고서입니다. Citrix ShareFile StorageZones Controller의 3단계 공격 체인(세션 ID 우회 → XXE → RCE)으로 인증 없이 원격 코드 실행이 가능하며, CVSS 점수 9.8(Critical) 등급입니다. 실제 와일드 악용이 …

IoT 봇넷 해체 - Aisuru/Kimwolf/JackSkid/Mossad

Aisuru, Kimwolf, JackSkid, Mossad 4개 IoT 봇넷의 기술적 분석 완료. Mirai 기반 봇넷의 취약점 악용 패턴과 DDoS 공격 벡터 식별. 지리적 분포 및 향후 위협 예측 포함.

[CVE-2026-35616] Fortinet FortiClient EMS Improper Access Control Vulnerability

CISA

주간 보안 동향 요약: 2026-03-29 ~ 2026-04-05

최근 7일간 발생한 주요 보안 취약점, 이슈, 위협 동향 요약. CVE-2026-5281, AI 기반 공격 산업화, Tycoon2FA 붕괴, NoVoice Android 악성코드 등 포함.

AI 랜섬웨어의 물리적 위협과 하드웨어 패권 전쟁 속에서, 공급망 자립과 선제적 거버넌스로 불확실성을 경쟁 우위로 전환하라

2026-04-04 보안 인사이트

AI와 양자 시대의 디지털 패권 경쟁, 데이터 주권과 자율 방어 체계를 통한 보안 패러다임 재설계가 유일한 생존 전략이다.

2026-04-02 보안 인사이트

디지털 철의 장막과 AI 패권 경쟁 시대, 하드웨어와 지능형 보안의 결합만이 기업 생존과 경쟁력을 위한 유일한 대안이다

2026-04-01 보안 인사이트

[CVE-2026-3502] TrueConf Client Download of Code Without Integrity Check Vulnerability

CISA

규제와 위협의 변화 속에서 AI 기반 자율 방어와 선제적 거버넌스로 실현하는 혁신과 보안의 필수 공진화 생존 전략

2026-03-31 보안 인사이트

[CVE-2026-5281] Google Dawn Use-After-Free Vulnerability

CISA

경계 보안의 붕괴 시대, 하드웨어 신뢰성과 제로트러스트 거버넌스로 보안 패러다임을 재설계하여 데이터 주권과 생존 전략을 확보하십시오.

2026-03-30 보안 인사이트

[CVE-2026-3055] Citrix NetScaler Out-of-Bounds Read Vulnerability

CISA

암호화 키 관리 방식에 취약점이 확인된 Green Blood 랜섬웨어

SK쉴더스

파편화된 방어의 한계를 넘어, 기술 주권과 AI 기반 풀스택 보안이 기업의 새로운 생존 전략이다.

2026-03-27 보안 인사이트

보안 패러다임의 대전환, AI 자율 방어 체계와 데이터 주권 기반 소버린 인프라가 기업 생존의 핵심

2026-03-26 보안 인사이트

[CVE-2025-53521] F5 BIG-IP Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2026-33634] Aquasecurity Trivy Embedded Malicious Code Vulnerability

CISA

[CVE-2026-33017] Langflow Code Injection Vulnerability

CISA

AI 패권 경쟁과 양자 위협의 시대, 보안은 기술 주권을 확보하고 기업 생존을 이끄는 전략적 자산으로 재정의된다.

2026-03-19 보안 인사이트

[CVE-2025-32432] Craft CMS Code Injection Vulnerability

CISA

[CVE-2025-54068] Laravel Livewire Code Injection Vulnerability

CISA

[CVE-2025-43510] Apple Multiple Products Improper Locking Vulnerability

CISA

[CVE-2025-43520] Apple Multiple Products Classic Buffer Overflow Vulnerability

CISA

[CVE-2025-31277] Apple Multiple Products Buffer Overflow Vulnerability

CISA

[CVE-2026-20131] Cisco Secure Firewall Management Center (FMC) Software and Cisco Security Cloud Control (SCC) Firewall Management Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-66376] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability

CISA

[CVE-2026-20963] Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-47813] Wing FTP Server Information Disclosure Vulnerability

CISA

소버린 AI와 제로 트러스트를 결합한 총체적 거버넌스 구축만이 고도화된 위협 시대 기술 주도권을 확보하는 유일한 생존 전략이다.

2026-03-13 보안 인사이트

[CVE-2026-3910] Google Chromium V8 Improper Restriction of Operations Within the Bounds of a Memory Buffer Vulnerability

CISA

[CVE-2026-3909] Google Skia Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-68613] n8n Improper Control of Dynamically-Managed Code Resources Vulnerability

CISA

지속적으로 리브랜딩되는 Global 랜섬웨어

SK쉴더스

지정학적 위기와 AI 무기화 속, 제로트러스트와 AI 방어 기술로 보안 패러다임을 전환해야만 기업 생존과 기술 주도권을 확보할 수 있다.

2026-03-09 보안 인사이트

기술 패권 전쟁과 하이브리드 위협의 시대, 소버린 AI와 보안 내재화만이 기업의 생존과 기술 패러다임의 승패를 결정한다.

2026-03-08 보안 인사이트

[CVE-2021-22054] Omnissa Workspace ONE Server-Side Request Forgery

CISA

[CVE-2025-26399] SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2026-1603] Ivanti Endpoint Manager (EPM) Authentication Bypass Vulnerability

CISA

지정학적 사이버 위협과 AI 패권 경쟁이 격화된 하이퍼 프리시전 시대, 기업 생존을 위한 보안 레질리언스의 대전환

2026-03-07 보안 인사이트

[CVE-2017-7921] Hikvision Multiple Products Improper Authentication Vulnerability

CISA

[CVE-2021-22681] Rockwell Multiple Products Insufficient Protected Credentials Vulnerability

CISA

[CVE-2023-43000] Apple Multiple products Use-After-Free Vulnerability

CISA

[CVE-2021-30952] Apple Multiple Products Integer Overflow or Wraparound Vulnerability

CISA

[CVE-2023-41974] Apple iOS and iPadOS Use-After-Free Vulnerability

CISA

[CVE-2026-22719] Broadcom VMware Aria Operations Command Injection Vulnerability

CISA

[CVE-2026-21385] Qualcomm Multiple Chipsets Memory Corruption Vulnerability

CISA

AI 시대, 생명을 위협하는 시스템 보안 취약점과 글로벌 사이버 전쟁이 국가 안보를 뒤흔들다

2026-03-01 보안 인사이트

AI가 재편하는 보안 생태계 - 개발부터 인증까지, 기술 의존도 심화가 불러온 전방위 리스크 관리 시대

2026-02-27 보안 인사이트

라자루스의 RaaS 전환과 AI 오용이 알리는 사이버 위협의 실용주의 시대, 제로트러스트와 AI-SPM으로 무장한 방어 체계 재편 급물살

2026-02-26 보안 인사이트

AI가 무기화되고 인프라가 흔들리는 시대, 보안은 이제 경영의 핵심 생존 전략

2026-02-24 보안 인사이트

[CVE-2022-20775] Cisco SD-WAN Path Traversal Vulnerability

CISA

[CVE-2026-20127] Cisco Catalyst SD-WAN Controller and Manager Authentication Bypass Vulnerability

CISA

AI 자율 에이전트가 연 보안 공백의 시대, 인프라부터 공급망까지 멈추지 않는 위협의 전방위 확산

2026-02-23 보안 인사이트

[CVE-2026-25108] Soliton Systems K.K FileZen OS Command Injection Vulnerability

CISA

방화벽이 랜섬웨어의 관문이 된 시대, AI는 에너지·데이터·정책 리스크를 동반하며 글로벌 공급망을 재편한다

2026-02-22 보안 인사이트

데이터 침해 일상화와 AI 신뢰 위기가 동시 폭발하는 디지털 인프라의 총체적 재편기

2026-02-19 보안 인사이트

[CVE-2025-49113] RoundCube Webmail Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-68461] RoundCube Webmail Cross-site Scripting Vulnerability

CISA

[CVE-2021-22175] GitLab Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2026-22769] Dell RecoverPoint for Virtual Machines (RP4VMs) Use of Hard-coded Credentials Vulnerability

CISA

[CVE-2020-7796] Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery Vulnerability

CISA

[CVE-2024-7694] TeamT5 ThreatSonar Anti-Ransomware Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2008-0015] Microsoft Windows Video ActiveX Control Remote Code Execution Vulnerability

CISA

[CVE-2026-2441] Google Chromium CSS Use-After-Free Vulnerability

CISA

[CVE-2026-1731] BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA) OS Command Injection Vulnerability

CISA

[CVE-2026-20700] Apple Multiple Buffer Overflow Vulnerability

CISA

[CVE-2024-43468] Microsoft Configuration Manager SQL Injection Vulnerability

CISA

[CVE-2025-15556] Notepad++ Download of Code Without Integrity Check Vulnerability

CISA

[CVE-2025-40536] SolarWinds Web Help Desk Security Control Bypass Vulnerability

CISA

[CVE-2026-21513] Microsoft MSHTML Framework Protection Mechanism Failure Vulnerability

CISA

[CVE-2026-21525] Microsoft Windows NULL Pointer Dereference Vulnerability

CISA

[CVE-2026-21510] Microsoft Windows Shell Protection Mechanism Failure Vulnerability

CISA

[CVE-2026-21533] Microsoft Windows Improper Privilege Management Vulnerability

CISA

[CVE-2026-21519] Microsoft Windows Type Confusion Vulnerability

CISA

[CVE-2026-21514] Microsoft Office Word Reliance on Untrusted Inputs in a Security Decision Vulnerability

CISA

개인정보 유출과 AI 인프라 공세 속, 생체인증·데이터 거버넌스·글로벌 인증이 그리는 보안의 새로운 경계선

2026-02-06 보안 인사이트

AI 에이전트가 바꾸는 보안 패러다임과 국가 연구보안 체계 구축의 시급성

2026-02-04 보안 인사이트

[CVE-2025-11953] React Native Community CLI OS Command Injection Vulnerability

CISA

[CVE-2026-24423] SmarterTools SmarterMail Missing Authentication for Critical Function Vulnerability

CISA

AI가 보안 경계를 무너뜨리고, 양자암호가 새로운 방어선을 구축하는 디지털 전환의 분기점

2026-02-03 보안 인사이트

[CVE-2021-39935] GitLab Community and Enterprise Editions Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2025-64328] Sangoma FreePBX OS Command Injection Vulnerability

CISA

[CVE-2019-19006] Sangoma FreePBX Improper Authentication Vulnerability

CISA

[CVE-2025-40551] SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CISA

AI 가속화로 폭증한 사이버 공격과 우주·심해로 확장되는 인프라 보안 전쟁의 시작

2026-01-31 보안 인사이트

보안 인증이 글로벌 무역 통행증이 되고, AI 협업이 사이버 방어의 새 표준이 된 2026년의 전환점

2026-01-29 보안 인사이트

[CVE-2026-1281] Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA

러시아 샌드웜의 폴란드 전력망 공격과 국내 침해사고 26% 급증, AI 시대 인프라 보안의 임계점

2026-01-27 보안 인사이트

유출된 개인정보가 촉발한 초정밀 피싱의 시대, 클라우드 보안 규제 완화와 AI 인프라 경쟁의 교차로

2026-01-26 보안 인사이트

[CVE-2026-24858] Fortinet Multiple Products Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

기술 주권 경쟁 심화 속 AI 규제 원년, 보안은 이제 경쟁력의 전제 조건이 되다

2026-01-25 보안 인사이트

[CVE-2018-14634] Linux Kernel Integer Overflow Vulnerability

CISA

[CVE-2025-52691] SmarterTools SmarterMail Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2026-23760] SmarterTools SmarterMail Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2026-24061] GNU InetUtils Argument Injection Vulnerability

CISA

[CVE-2026-21509] Microsoft Office Security Feature Bypass Vulnerability

CISA

[CVE-2024-37079] Broadcom VMware vCenter Server Out-of-bounds Write Vulnerability

CISA

[CVE-2025-68645] Synacor Zimbra Collaboration Suite (ZCS) PHP Remote File Inclusion Vulnerability

CISA

[CVE-2025-34026] Versa Concerto Improper Authentication Vulnerability

CISA

[CVE-2025-31125] Vite Vitejs Improper Access Control Vulnerability

CISA

[CVE-2025-54313] Prettier eslint-config-prettier Embedded Malicious Code Vulnerability

CISA

기술유출 사상 최대·클라우드 가시성 공백·AI 법제 인프라 완성 속 비즈니스 모델 실종의 3중 보안 딜레마

2026-01-20 보안 인사이트

[CVE-2026-20045] Cisco Unified Communications Products Code Injection Vulnerability

CISA

인적 관리 실패로 반복된 대규모 보안 사고, ISMS-P 의무화와 금융 SaaS 규제 완화로 보안 체계 전환 가속화

2026-01-19 보안 인사이트

양자보안 시대 개막과 구형 프로토콜 방치로 드러난 한국 보안 인프라의 위기, AI 전력난과 물리보안 지능화 가속

2026-01-17 보안 인사이트

AI 보안 거버넌스와 제로트러스트 확산, 랜섬웨어 대응 강화 및 혁신 인프라 투자 본격화

2026-01-16 보안 인사이트

북한 APT 고도화와 양자보안 시급성 부각, AI·반도체 기술 경쟁 격화 속 국가 안보와 보안 투자 전면 재편

2026-01-15 보안 인사이트

랜섬웨어 대규모 침해사고 확산과 제로트러스트 패러다임 전환, AI·양자기술 융합 가속화

2026-01-14 보안 인사이트

[CVE-2026-20805] Microsoft Windows Information Disclosure Vulnerability

CISA

[CVE-2025-8110] Gogs Path Traversal Vulnerability

CISA

[보안 가이드] KARA 랜섬웨어 동향 보고서 2025 4Q

SK쉴더스

[CVE-2009-0556] Microsoft Office PowerPoint Code Injection Vulnerability

CISA

[CVE-2025-37164] Hewlett Packard Enterprise (HPE) OneView Code Injection Vulnerability

CISA

카르텔 모델을 도입한 DragonForce 랜섬웨어

SK쉴더스

빠르게 진화하는 Vanhelsing 랜섬웨어

SK쉴더스

지속되는 BlackSuit 랜섬웨어 위협

SK쉴더스

[CVE-2025-14847] MongoDB and MongoDB Server Improper Handling of Length Parameter Inconsistency Vulnerability

CISA

[CVE-2023-52163] Digiever DS-2105 Pro Missing Authorization Vulnerability

CISA

[CVE-2025-14733] WatchGuard Firebox Out of Bounds Write Vulnerability

CISA

KARA 랜섬웨어 동향 보고서 2025.3Q(KR)

SK쉴더스

[CVE-2025-59374] ASUS Live Update Embedded Malicious Code Vulnerability

CISA

[CVE-2025-40602] SonicWall SMA1000 Missing Authorization Vulnerability

CISA

[CVE-2025-20393] Cisco Multiple Products Improper Input Validation Vulnerability

CISA

[CVE-2025-59718] Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability

CISA

[CVE-2025-14611] Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability

CISA

[CVE-2025-43529] Apple Multiple Products Use-After-Free WebKit Vulnerability

CISA

[CVE-2018-4063] Sierra Wireless AirLink ALEOS Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2025-14174] Google Chromium Out of Bounds Memory Access Vulnerability

CISA

[CVE-2025-58360] OSGeo GeoServer Improper Restriction of XML External Entity Reference Vulnerability

CISA

[CVE-2025-6218] RARLAB WinRAR Path Traversal Vulnerability

CISA

[CVE-2025-62221] Microsoft Windows Use After Free Vulnerability

CISA

[CVE-2022-37055] D-Link Routers Buffer Overflow Vulnerability

CISA

[CVE-2025-66644] Array Networks ArrayOS AG OS Command Injection Vulnerability

CISA

[CVE-2025-55182] Meta React Server Components Remote Code Execution Vulnerability

CISA

[CVE-2021-26828] OpenPLC ScadaBR Unrestricted Upload of File with Dangerous Type Vulnerability

CISA

[CVE-2025-48633] Android Framework Information Disclosure Vulnerability

CISA

[CVE-2025-48572] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2021-26829] OpenPLC ScadaBR Cross-site Scripting Vulnerability

CISA

[CVE-2025-61757] Oracle Fusion Middleware Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2025-13223] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2025-58034] Fortinet FortiWeb OS Command Injection Vulnerability

CISA

[CVE-2025-64446] Fortinet FortiWeb Path Traversal Vulnerability

CISA

[CVE-2025-12480] Gladinet Triofox Improper Access Control Vulnerability

CISA

[CVE-2025-62215] Microsoft Windows Race Condition Vulnerability

CISA

[CVE-2025-9242] WatchGuard Firebox Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-21042] Samsung Mobile Devices Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-48703] CWP Control Web Panel OS Command Injection Vulnerability

CISA

[CVE-2025-11371] Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

CISA

[CVE-2025-41244] Broadcom VMware Aria Operations and VMware Tools Privilege Defined with Unsafe Actions Vulnerability

CISA

[CVE-2025-24893] XWiki Platform Eval Injection Vulnerability

CISA

[CVE-2025-6204] Dassault Systèmes DELMIA Apriso Code Injection Vulnerability

CISA

[CVE-2025-6205] Dassault Systèmes DELMIA Apriso Missing Authorization Vulnerability

CISA

[CVE-2025-54236] Adobe Commerce and Magento Improper Input Validation Vulnerability

CISA

[CVE-2025-59287] Microsoft Windows Server Update Service (WSUS) Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-61932] Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability

CISA

[CVE-2022-48503] Apple Multiple Products Unspecified Vulnerability

CISA

[CVE-2025-2746] Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2025-2747] Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability

CISA

[CVE-2025-33073] Microsoft Windows SMB Client Improper Access Control Vulnerability

CISA

[CVE-2025-61884] Oracle E-Business Suite Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2025-54253] Adobe Experience Manager Forms Code Execution Vulnerability

CISA

[CVE-2025-47827] IGEL OS Use of a Key Past its Expiration Date Vulnerability

CISA

[CVE-2025-24990] Microsoft Windows Untrusted Pointer Dereference Vulnerability

CISA

[CVE-2025-59230] Microsoft Windows Improper Access Control Vulnerability

CISA

[CVE-2016-7836] SKYSEA Client View Improper Authentication Vulnerability

CISA

[CVE-2021-43798] Grafana Path Traversal Vulnerability

CISA

[CVE-2025-27915] Synacor Zimbra Collaboration Suite (ZCS) Cross-site Scripting Vulnerability

CISA

[CVE-2021-22555] Linux Kernel Heap Out-of-Bounds Write Vulnerability

CISA

[CVE-2010-3962] Microsoft Internet Explorer Uninitialized Memory Corruption Vulnerability

CISA

[CVE-2021-43226] Microsoft Windows Privilege Escalation Vulnerability

CISA

[CVE-2013-3918] Microsoft Windows Out-of-Bounds Write Vulnerability

CISA

[CVE-2011-3402] Microsoft Windows Remote Code Execution Vulnerability

CISA

[CVE-2010-3765] Mozilla Multiple Products Remote Code Execution Vulnerability

CISA

[CVE-2025-61882] Oracle E-Business Suite Unspecified Vulnerability

CISA

[CVE-2014-6278] GNU Bash OS Command Injection Vulnerability

CISA

[CVE-2017-1000353] Jenkins Remote Code Execution Vulnerability

CISA

[CVE-2015-7755] Juniper ScreenOS Improper Authentication Vulnerability

CISA

[CVE-2025-21043] Samsung Mobile Devices Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-4008] Smartbedded Meteobridge Command Injection Vulnerability

CISA

[CVE-2025-32463] Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability

CISA

[CVE-2025-59689] Libraesva Email Security Gateway Command Injection Vulnerability

CISA

[CVE-2025-10035] Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-20352] Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability

CISA

[CVE-2021-21311] Adminer Server-Side Request Forgery Vulnerability

CISA

[CVE-2025-20362] Cisco Secure Firewall Adaptive Security (ASA) Appliance and Secure Firewall Threat Defense (FTD) Missing Authorization Vulnerability

CISA

[CVE-2025-20333] Cisco Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD) Buffer Overflow Vulnerability

CISA

[CVE-2025-10585] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2025-5086] Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-38352] Linux Kernel Time-of-Check Time-of-Use (TOCTOU) Race Condition Vulnerability

CISA

[CVE-2025-48543] Android Runtime Use-After-Free Vulnerability

CISA

[CVE-2025-53690] Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-50224] TP-Link TL-WR841N Authentication Bypass by Spoofing Vulnerability

CISA

[CVE-2025-9377] TP-Link Archer C7(EU) and TL-WR841N/ND(MS) OS Command Injection Vulnerability

CISA

[CVE-2020-24363] TP-link TL-WA855RE Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2025-55177] Meta Platforms WhatsApp Incorrect Authorization Vulnerability

CISA

[CVE-2025-57819] Sangoma FreePBX Authentication Bypass Vulnerability

CISA

[CVE-2025-7775] Citrix NetScaler Memory Overflow Vulnerability

CISA

[CVE-2025-48384] Git Link Following Vulnerability

CISA

[CVE-2024-8068] Citrix Session Recording Improper Privilege Management Vulnerability

CISA

[CVE-2024-8069] Citrix Session Recording Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-43300] Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

CISA

백업 시스템도 위험하다? 랜섬웨어 감염 후 대처와 최근 공격 트렌드

SK쉴더스

[CVE-2025-54948] Trend Micro Apex One OS Command Injection Vulnerability

CISA

[CVE-2025-8876] N-able N-Central Command Injection Vulnerability

CISA

[CVE-2025-8875] N-able N-Central Insecure Deserialization Vulnerability

CISA

[CVE-2025-8088] RARLAB WinRAR Path Traversal Vulnerability

CISA

[CVE-2007-0671] Microsoft Office Excel Remote Code Execution Vulnerability

CISA

[CVE-2013-3893] Microsoft Internet Explorer Resource Management Errors Vulnerability

CISA

[CVE-2020-25078] D-Link DCS-2530L and DCS-2670L Devices Unspecified Vulnerability

CISA

[CVE-2020-25079] D-Link DCS-2530L and DCS-2670L Command Injection Vulnerability

CISA

[CVE-2022-40799] D-Link DNR-322L Download of Code Without Integrity Check Vulnerability

CISA

[CVE-2023-2533] PaperCut NG/MF Cross-Site Request Forgery (CSRF) Vulnerability

CISA

[CVE-2025-20337] Cisco Identity Services Engine Injection Vulnerability

CISA

[CVE-2025-20281] Cisco Identity Services Engine Injection Vulnerability

CISA

[CVE-2025-2775] SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

CISA

[CVE-2025-2776] SysAid On-Prem Improper Restriction of XML External Entity Reference Vulnerability

CISA

[CVE-2025-6558] Google Chromium ANGLE and GPU Improper Input Validation Vulnerability

CISA

[CVE-2025-54309] CrushFTP Unprotected Alternate Channel Vulnerability

CISA

[CVE-2025-49704] Microsoft SharePoint Code Injection Vulnerability

CISA

[CVE-2025-49706] Microsoft SharePoint Improper Authentication Vulnerability

CISA

[CVE-2025-53770] Microsoft SharePoint Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2025-25257] Fortinet FortiWeb SQL Injection Vulnerability

CISA

[CVE-2025-47812] Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability

CISA

[CVE-2025-5777] Citrix NetScaler ADC and Gateway Out-of-Bounds Read Vulnerability

CISA

-보안 가이드- KARA 랜섬웨어 동향 보고서 2025 2Q

SK쉴더스

[CVE-2019-9621] Synacor Zimbra Collaboration Suite (ZCS) Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2019-5418] Rails Ruby on Rails Path Traversal Vulnerability

CISA

[CVE-2016-10033] PHPMailer Command Injection Vulnerability

CISA

[CVE-2014-3931] Multi-Router Looking Glass (MRLG) Buffer Overflow Vulnerability

CISA

[CVE-2025-6554] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2025-48928] TeleMessage TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

CISA

[CVE-2025-48927] TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

CISA

[CVE-2025-6543] Citrix NetScaler ADC and Gateway Buffer Overflow Vulnerability

CISA

[CVE-2019-6693] Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability

CISA

[CVE-2024-0769] D-Link DIR-859 Router Path Traversal Vulnerability

CISA

[CVE-2024-54085] AMI MegaRAC SPx Authentication Bypass by Spoofing Vulnerability

CISA

민감정보 노리는 랜섬웨어, 2025년 1분기 주요 랜섬웨어 트렌드

SK쉴더스

[CVE-2023-0386] Linux Kernel Improper Ownership Management Vulnerability

CISA

[CVE-2023-33538] TP-Link Multiple Routers Command Injection Vulnerability

CISA

[CVE-2025-43200] Apple Multiple Products Unspecified Vulnerability

CISA

[CVE-2025-33053] Microsoft Windows External Control of File Name or Path Vulnerability

CISA

[CVE-2025-24016] Wazuh Server Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-42009] RoundCube Webmail Cross-Site Scripting Vulnerability

CISA

[CVE-2025-32433] Erlang Erlang/OTP SSH Server Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2025-5419] Google Chromium V8 Out-of-Bounds Read and Write Vulnerability

CISA

[CVE-2025-21479] Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

CISA

[CVE-2025-21480] Qualcomm Multiple Chipsets Incorrect Authorization Vulnerability

CISA

[CVE-2025-27038] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2021-32030] ASUS Routers Improper Authentication Vulnerability

CISA

[CVE-2025-3935] ConnectWise ScreenConnect Improper Authentication Vulnerability

CISA

[CVE-2025-35939] Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability

CISA

[CVE-2024-56145] Craft CMS Code Injection Vulnerability

CISA

[CVE-2023-39780] ASUS RT-AX55 Routers OS Command Injection Vulnerability

CISA

[CVE-2025-4632] Samsung MagicINFO 9 Server Path Traversal Vulnerability

CISA

[CVE-2023-38950] ZKTeco BioTime Path Traversal Vulnerability

CISA

[CVE-2024-27443] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2025-27920] Srimax Output Messenger Directory Traversal Vulnerability

CISA

[CVE-2024-11182] MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2025-4428] Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability

CISA

[CVE-2025-4427] Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability

CISA

[CVE-2025-42999] SAP NetWeaver Deserialization Vulnerability

CISA

[CVE-2024-12987] DrayTek Vigor Routers OS Command Injection Vulnerability

CISA

[CVE-2025-32756] Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-32709] Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free Vulnerability

CISA

[CVE-2025-30397] Microsoft Windows Scripting Engine Type Confusion Vulnerability

CISA

[CVE-2025-32706] Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-32701] Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

CISA

[CVE-2025-30400] Microsoft Windows DWM Core Library Use-After-Free Vulnerability

CISA

[CVE-2025-47729] TeleMessage TM SGNL Hidden Functionality Vulnerability

CISA

[CVE-2024-11120] GeoVision Devices OS Command Injection Vulnerability

CISA

[CVE-2024-6047] GeoVision Devices OS Command Injection Vulnerability

CISA

[CVE-2025-27363] FreeType Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-3248] Langflow Missing Authentication Vulnerability

CISA

[CVE-2025-34028] Commvault Command Center Path Traversal Vulnerability

CISA

[CVE-2024-58136] Yiiframework Yii Improper Protection of Alternate Path Vulnerability

CISA

[CVE-2024-38475] Apache HTTP Server Improper Escaping of Output Vulnerability

CISA

[CVE-2023-44221] SonicWall SMA100 Appliances OS Command Injection Vulnerability

CISA

[CVE-2025-31324] SAP NetWeaver Unrestricted File Upload Vulnerability

CISA

[CVE-2025-1976] Broadcom Brocade Fabric OS Code Injection Vulnerability

CISA

[CVE-2025-42599] Qualitia Active! Mail Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-3928] Commvault Web Server Unspecified Vulnerability

CISA

[CVE-2025-24054] Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability

CISA

[CVE-2025-31201] Apple Multiple Products Arbitrary Read and Write Vulnerability

CISA

[CVE-2025-31200] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2021-20035] SonicWall SMA100 Appliances OS Command Injection Vulnerability

CISA

[CVE-2024-53150] Linux Kernel Out-of-Bounds Read Vulnerability

CISA

[CVE-2024-53197] Linux Kernel Out-of-Bounds Access Vulnerability

CISA

[CVE-2025-29824] Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability

CISA

[CVE-2025-30406] Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

CISA

[보안 가이드] KARA 랜섬웨어 동향 보고서 2025 1Q

SK쉴더스

[CVE-2025-31161] CrushFTP Authentication Bypass Vulnerability

CISA

[CVE-2025-22457] Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-24813] Apache Tomcat Path Equivalence Vulnerability

CISA

[CVE-2024-20439] Cisco Smart Licensing Utility Static Credential Vulnerability

CISA

[CVE-2025-2783] Google Chromium Mojo Sandbox Escape Vulnerability

CISA

[CVE-2019-9875] Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

CISA

[CVE-2019-9874] Sitecore CMS and Experience Platform (XP) Deserialization Vulnerability

CISA

[CVE-2025-30154] reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability

CISA

[CVE-2017-12637] SAP NetWeaver Directory Traversal Vulnerability

CISA

[CVE-2024-48248] NAKIVO Backup and Replication Absolute Path Traversal Vulnerability

CISA

[CVE-2025-1316] Edimax IC-7100 IP Camera OS Command Injection Vulnerability

CISA

[CVE-2025-30066] tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability

CISA

[CVE-2025-24472] Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

CISA

[CVE-2025-21590] Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability

CISA

[CVE-2025-24201] Apple Multiple Products WebKit Out-of-Bounds Write Vulnerability

CISA

[CVE-2025-24993] Microsoft Windows NTFS Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-24991] Microsoft Windows NTFS Out-Of-Bounds Read Vulnerability

CISA

[CVE-2025-24985] Microsoft Windows Fast FAT File System Driver Integer Overflow Vulnerability

CISA

[CVE-2025-24984] Microsoft Windows NTFS Information Disclosure Vulnerability

CISA

[CVE-2025-24983] Microsoft Windows Win32k Use-After-Free Vulnerability

CISA

[CVE-2025-26633] Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability

CISA

[CVE-2024-13161] Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CISA

[CVE-2024-13160] Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CISA

[CVE-2024-13159] Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability

CISA

[CVE-2024-57968] Advantive VeraCore Unrestricted File Upload Vulnerability

CISA

[CVE-2025-25181] Advantive VeraCore SQL Injection Vulnerability

CISA

랜섬웨어 감염 후 대처와 예방, 반드시 알아야 할 4가지 전략

SK쉴더스

[CVE-2025-22226] VMware ESXi, Workstation, and Fusion Information Disclosure Vulnerability

CISA

[CVE-2025-22225] VMware ESXi Arbitrary Write Vulnerability

CISA

[CVE-2025-22224] VMware ESXi and Workstation TOCTOU Race Condition Vulnerability

CISA

[CVE-2024-50302] Linux Kernel Use of Uninitialized Resource Vulnerability

CISA

[CVE-2024-4885] Progress WhatsUp Gold Path Traversal Vulnerability

CISA

[CVE-2018-8639] Microsoft Windows Win32k Improper Resource Shutdown or Release Vulnerability

CISA

[CVE-2022-43769] Hitachi Vantara Pentaho BA Server Special Element Injection Vulnerability

CISA

[CVE-2022-43939] Hitachi Vantara Pentaho BA Server Authorization Bypass Vulnerability

CISA

[CVE-2023-20118] Cisco Small Business RV Series Routers Command Injection Vulnerability

CISA

[CVE-2023-34192] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-49035] Microsoft Partner Center Improper Access Control Vulnerability

CISA

[CVE-2024-20953] Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

CISA

[CVE-2017-3066] Adobe ColdFusion Deserialization Vulnerability

CISA

[CVE-2025-24989] Microsoft Power Pages Improper Access Control Vulnerability

CISA

[CVE-2025-0111] Palo Alto Networks PAN-OS File Read Vulnerability

CISA

[CVE-2025-23209] Craft CMS Code Injection Vulnerability

CISA

[CVE-2025-0108] Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

CISA

[CVE-2024-53704] SonicWall SonicOS SSLVPN Improper Authentication Vulnerability

CISA

[CVE-2024-57727] SimpleHelp Path Traversal Vulnerability

CISA

[CVE-2025-24200] Apple iOS and iPadOS Incorrect Authorization Vulnerability

CISA

[CVE-2024-41710] Mitel SIP Phones Argument Injection Vulnerability

CISA

[CVE-2024-40891] Zyxel DSL CPE OS Command Injection Vulnerability

CISA

[CVE-2024-40890] Zyxel DSL CPE OS Command Injection Vulnerability

CISA

[CVE-2025-21418] Microsoft Windows Ancillary Function Driver for WinSock Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2025-21391] Microsoft Windows Storage Link Following Vulnerability

CISA

[CVE-2025-0994] Trimble Cityworks Deserialization Vulnerability

CISA

[CVE-2020-15069] Sophos XG Firewall Buffer Overflow Vulnerability

CISA

[CVE-2020-29574] CyberoamOS (CROS) SQL Injection Vulnerability

CISA

[CVE-2024-21413] Microsoft Outlook Improper Input Validation Vulnerability

CISA

[CVE-2022-23748] Dante Discovery Process Control Vulnerability

CISA

[CVE-2025-0411] 7-Zip Mark of the Web Bypass Vulnerability

CISA

[CVE-2024-53104] Linux Kernel Out-of-Bounds Write Vulnerability

CISA

[CVE-2018-19410] Paessler PRTG Network Monitor Local File Inclusion Vulnerability

CISA

[CVE-2018-9276] Paessler PRTG Network Monitor OS Command Injection Vulnerability

CISA

[CVE-2024-29059] Microsoft .NET Framework Information Disclosure Vulnerability

CISA

[CVE-2024-45195] Apache OFBiz Forced Browsing Vulnerability

CISA

[CVE-2025-24085] Apple Multiple Products Use-After-Free Vulnerability

CISA

[CVE-2025-23006] SonicWall SMA1000 Appliances Deserialization Vulnerability

CISA

[CVE-2020-11023] JQuery Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-50603] Aviatrix Controllers OS Command Injection Vulnerability

CISA

[CVE-2025-21335] Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CISA

[CVE-2025-21334] Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CISA

[CVE-2025-21333] Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

CISA

[CVE-2024-55591] Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

CISA

[CVE-2023-48365] Qlik Sense HTTP Tunneling Vulnerability

CISA

[CVE-2024-12686] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CISA

[CVE-2025-0282] Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability

CISA

[CVE-2020-2883] Oracle WebLogic Server Unspecified Vulnerability

CISA

[CVE-2024-55550] Mitel MiCollab Path Traversal Vulnerability

CISA

[CVE-2024-41713] Mitel MiCollab Path Traversal Vulnerability

CISA

[보안 가이드] KARA 랜섬웨어 동향 보고서 2024 4Q

SK쉴더스

[CVE-2024-3393] Palo Alto Networks PAN-OS Malicious DNS Packet Vulnerability

CISA

[CVE-2021-44207] Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CISA

[CVE-2024-12356] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CISA

[CVE-2021-40407] Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CISA

[CVE-2019-11001] Reolink Multiple IP Cameras OS Command Injection Vulnerability

CISA

[CVE-2022-23227] NUUO NVRmini2 Devices Missing Authentication Vulnerability

CISA

[CVE-2018-14933] NUUO NVRmini Devices OS Command Injection Vulnerability

CISA

[CVE-2024-55956] Cleo Multiple Products Unauthenticated File Upload Vulnerability

CISA

[CVE-2024-35250] Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CISA

[CVE-2024-20767] Adobe ColdFusion Improper Access Control Vulnerability

CISA

[CVE-2024-50623] Cleo Multiple Products Unrestricted File Upload Vulnerability

CISA

[CVE-2024-49138] Microsoft Windows Common Log File System (CLFS) Driver Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2024-51378] CyberPanel Incorrect Default Permissions Vulnerability

CISA

[CVE-2024-11667] Zyxel Multiple Firewalls Path Traversal Vulnerability

CISA

[CVE-2024-11680] ProjectSend Improper Authentication Vulnerability

CISA

[CVE-2023-45727] North Grid Proself Improper Restriction of XML External Entity (XXE) Reference Vulnerability

CISA

2024년 3분기 랜섬웨어 트렌드와 Meow Ransomware 그룹 상세 분석

SK쉴더스

Ransomware Arsenal_주요 랜섬웨어 전략과 대응 전략

SK쉴더스

[CVE-2023-28461] Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

CISA

Ransomware Arsenal, 주요 랜섬웨어 트렌드 및 종류 1부

SK쉴더스

Ransomware Arsenal, 주요 랜섬웨어 공격 및 대응 전략 2부

SK쉴더스

[CVE-2024-21287] Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

CISA

[CVE-2024-44309] Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-44308] Apple Multiple Products Code Execution Vulnerability

CISA

[CVE-2024-38813] VMware vCenter Server Privilege Escalation Vulnerability

CISA

[CVE-2024-38812] VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2024-9474] Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CISA

[CVE-2024-0012] Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CISA

[CVE-2024-1212] Progress Kemp LoadMaster OS Command Injection Vulnerability

CISA

[CVE-2024-9465] Palo Alto Networks Expedition SQL Injection Vulnerability

CISA

[CVE-2024-9463] Palo Alto Networks Expedition OS Command Injection Vulnerability

CISA

[CVE-2021-26086] Atlassian Jira Server and Data Center Path Traversal Vulnerability

CISA

[CVE-2014-2120] Cisco Adaptive Security Appliance (ASA) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2021-41277] Metabase GeoJSON API Local File Inclusion Vulnerability

CISA

[CVE-2024-43451] Microsoft Windows NTLMv2 Hash Disclosure Spoofing Vulnerability

CISA

[CVE-2024-49039] Microsoft Windows Task Scheduler Privilege Escalation Vulnerability

CISA

[CVE-2019-16278] Nostromo nhttpd Directory Traversal Vulnerability

CISA

[CVE-2024-51567] CyberPanel Incorrect Default Permissions Vulnerability

CISA

[CVE-2024-43093] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2024-5910] Palo Alto Networks Expedition Missing Authentication Vulnerability

CISA

[CVE-2024-8956] PTZOptics PT30X-SDI/NDI Cameras Authentication Bypass Vulnerability

CISA

[CVE-2024-8957] PTZOptics PT30X-SDI/NDI Cameras OS Command Injection Vulnerability

CISA

[CVE-2024-37383] RoundCube Webmail Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-20481] Cisco ASA and FTD Denial-of-Service Vulnerability

CISA

[CVE-2024-47575] Fortinet FortiManager Missing Authentication Vulnerability

CISA

[CVE-2024-38094] Microsoft SharePoint Deserialization Vulnerability

CISA

[CVE-2024-9537] ScienceLogic SL1 Unspecified Vulnerability

CISA

[CVE-2024-40711] Veeam Backup and Replication Deserialization Vulnerability

CISA

[CVE-2024-28987] SolarWinds Web Help Desk Hardcoded Credential Vulnerability

CISA

[CVE-2024-9680] Mozilla Firefox Use-After-Free Vulnerability

CISA

[CVE-2024-30088] Microsoft Windows Kernel TOCTOU Race Condition Vulnerability

CISA

[CVE-2024-9380] Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability

CISA

[CVE-2024-9379] Ivanti Cloud Services Appliance (CSA) SQL Injection Vulnerability

CISA

[CVE-2024-23113] Fortinet Multiple Products Format String Vulnerability

CISA

[CVE-2024-43573] Microsoft Windows MSHTML Platform Spoofing Vulnerability

CISA

[CVE-2024-43572] Microsoft Windows Management Console Remote Code Execution Vulnerability

CISA

[CVE-2024-43047] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2024-45519] Synacor Zimbra Collaboration Suite (ZCS) Command Execution Vulnerability

CISA

[CVE-2024-29824] Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

CISA

[CVE-2019-0344] SAP Commerce Cloud Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2020-15415] DrayTek Multiple Vigor Routers OS Command Injection Vulnerability

CISA

[CVE-2023-25280] D-Link DIR-820 Router OS Command Injection Vulnerability

CISA

KARA 랜섬웨어 동향 보고서로 알아보는 RansomHub 그룹 심층분석, 랜섬웨어 대응을 위한 MDR 서비스는? (CVE-2020-1472 취약점)

SK쉴더스

[보안가이드] KARA 랜섬웨어 동향 보고서 2024 3Q

SK쉴더스

KARA 랜섬웨어 동향 보고서로 알아보는 24년 2분기 랜섬웨어 트렌드 (BitLocker, IntelBroker, Lockbit)

SK쉴더스

[CVE-2024-7593] Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

CISA

[CVE-2024-8963] Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability

CISA

[CVE-2020-14644] Oracle WebLogic Server Remote Code Execution Vulnerability

CISA

[CVE-2022-21445] Oracle ADF Faces Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2020-0618] Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

CISA

[CVE-2024-27348] Apache HugeGraph-Server Improper Access Control Vulnerability

CISA

[CVE-2014-0502] Adobe Flash Player Double Free Vulnerablity

CISA

[CVE-2013-0648] Adobe Flash Player Code Execution Vulnerability

CISA

[CVE-2013-0643] Adobe Flash Player Incorrect Default Permissions Vulnerability

CISA

[CVE-2014-0497] Adobe Flash Player Integer Underflow Vulnerablity

CISA

[CVE-2024-6670] Progress WhatsUp Gold SQL Injection Vulnerability

CISA

[CVE-2024-43461] Microsoft Windows MSHTML Platform Spoofing Vulnerability

CISA

[CVE-2024-8190] Ivanti Cloud Services Appliance OS Command Injection Vulnerability

CISA

[CVE-2024-38217] Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability

CISA

[CVE-2024-38014] Microsoft Windows Installer Improper Privilege Management Vulnerability

CISA

[CVE-2024-38226] Microsoft Publisher Protection Mechanism Failure Vulnerability

CISA

[CVE-2024-40766] SonicWall SonicOS Improper Access Control Vulnerability

CISA

[CVE-2017-1000253] Linux Kernel PIE Stack Buffer Corruption Vulnerability

CISA

[CVE-2016-3714] ImageMagick Improper Input Validation Vulnerability

CISA

[CVE-2024-7262] Kingsoft WPS Office Path Traversal Vulnerability

CISA

[CVE-2021-20124] Draytek VigorConnect Path Traversal Vulnerability

CISA

[CVE-2021-20123] Draytek VigorConnect Path Traversal Vulnerability

CISA

[CVE-2024-7965] Google Chromium V8 Inappropriate Implementation Vulnerability

CISA

[CVE-2024-38856] Apache OFBiz Incorrect Authorization Vulnerability

CISA

[CVE-2024-7971] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2024-39717] Versa Director Dangerous File Type Upload Vulnerability

CISA

[CVE-2021-31196] Microsoft Exchange Server Information Disclosure Vulnerability

CISA

[CVE-2022-0185] Linux Kernel Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2021-33045] Dahua IP Camera Authentication Bypass Vulnerability

CISA

[CVE-2021-33044] Dahua IP Camera Authentication Bypass Vulnerability

CISA

[CVE-2024-23897] Jenkins Command Line Interface (CLI) Path Traversal Vulnerability

CISA

[CVE-2024-28986] SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-38107] Microsoft Windows Power Dependency Coordinator Privilege Escalation Vulnerability

CISA

[CVE-2024-38106] Microsoft Windows Kernel Privilege Escalation Vulnerability

CISA

[CVE-2024-38193] Microsoft Windows Ancillary Function Driver for WinSock Privilege Escalation Vulnerability

CISA

[CVE-2024-38213] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2024-38178] Microsoft Windows Scripting Engine Memory Corruption Vulnerability

CISA

[CVE-2024-38189] Microsoft Project Remote Code Execution Vulnerability

CISA

[CVE-2024-32113] Apache OFBiz Path Traversal Vulnerability

CISA

[CVE-2024-36971] Android Kernel Remote Code Execution Vulnerability

CISA

[CVE-2018-0824] Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-37085] VMware ESXi Authentication Bypass Vulnerability

CISA

[CVE-2023-45249] Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

CISA

[CVE-2024-5217] ServiceNow Incomplete List of Disallowed Inputs Vulnerability

CISA

[CVE-2024-4879] ServiceNow Improper Input Validation Vulnerability

CISA

자율주행차 취약점 노린 해킹, 랜섬웨어 공격 급증! 모빌리티 사이버 보안 규제 현황 및 대응방안은?

SK쉴더스

[CVE-2024-39891] Twilio Authy Information Disclosure Vulnerability

CISA

[CVE-2012-4792] Microsoft Internet Explorer Use-After-Free Vulnerability

CISA

[CVE-2022-22948] VMware vCenter Server Incorrect Default File Permissions Vulnerability

CISA

[CVE-2024-28995] SolarWinds Serv-U Path Traversal Vulnerability

CISA

[CVE-2024-34102] Adobe Commerce and Magento Open Source Improper Restriction of XML External Entity Reference (XXE) Vulnerability

CISA

[CVE-2024-36401] OSGeo GeoServer GeoTools Eval Injection Vulnerability

CISA

[CVE-2024-23692] Rejetto HTTP File Server Improper Neutralization of Special Elements Used in a Template Engine Vulnerability

CISA

[CVE-2024-38080] Microsoft Windows Hyper-V Privilege Escalation Vulnerability

CISA

[CVE-2024-38112] Microsoft Windows MSHTML Platform Spoofing Vulnerability

CISA

[CVE-2024-20399] Cisco NX-OS Command Injection Vulnerability

CISA

KARA 랜섬웨어 동향 보고서 2024.2Q

SK쉴더스

[CVE-2020-13965] Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2022-2586] Linux Kernel Use-After-Free Vulnerability

CISA

[CVE-2022-24816] OSGeo GeoServer JAI-EXT Code Injection Vulnerability

CISA

[CVE-2024-4358] Progress Telerik Report Server Authentication Bypass by Spoofing Vulnerability

CISA

[CVE-2024-26169] Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability

CISA

[CVE-2024-32896] Android Pixel Privilege Escalation Vulnerability

CISA

[CVE-2024-4577] PHP-CGI OS Command Injection Vulnerability

CISA

[CVE-2024-4610] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2017-3506] Oracle WebLogic Server OS Command Injection Vulnerability

CISA

[CVE-2024-1086] Linux Kernel Use-After-Free Vulnerability

CISA

[CVE-2024-24919] Check Point Quantum Security Gateways Information Disclosure Vulnerability

CISA

[CVE-2024-4978] Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability

CISA

[CVE-2024-5274] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2020-17519] Apache Flink Improper Access Control Vulnerability

CISA

[CVE-2024-4947] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2023-43208] NextGen Healthcare Mirth Connect Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2024-4761] Google Chromium V8 Out-of-Bounds Memory Write Vulnerability

CISA

[CVE-2021-40655] D-Link DIR-605 Router Information Disclosure Vulnerability

CISA

[CVE-2014-100005] D-Link DIR-600 Router Cross-Site Request Forgery (CSRF) Vulnerability

CISA

[CVE-2024-30040] Microsoft Windows MSHTML Platform Security Feature Bypass Vulnerability

CISA

[CVE-2024-30051] Microsoft DWM Core Library Privilege Escalation Vulnerability

CISA

[CVE-2024-4671] Google Chromium Visuals Use-After-Free Vulnerability

CISA

[CVE-2023-7028] GitLab Community and Enterprise Editions Improper Access Control Vulnerability

CISA

[CVE-2024-29988] Microsoft SmartScreen Prompt Security Feature Bypass Vulnerability

CISA

[CVE-2024-4040] CrushFTP VFS Sandbox Escape Vulnerability

CISA

[CVE-2024-20359] Cisco ASA and FTD Privilege Escalation Vulnerability

CISA

[CVE-2024-20353] Cisco ASA and FTD Denial of Service Vulnerability

CISA

[CVE-2022-38028] Microsoft Windows Print Spooler Privilege Escalation Vulnerability

CISA

[CVE-2024-3400] Palo Alto Networks PAN-OS Command Injection Vulnerability

CISA

[CVE-2024-3273] D-Link Multiple NAS Devices Command Injection Vulnerability

CISA

[CVE-2024-3272] D-Link Multiple NAS Devices Use of Hard-Coded Credentials Vulnerability

CISA

[CVE-2024-29748] Android Pixel Privilege Escalation Vulnerability

CISA

[CVE-2024-29745] Android Pixel Information Disclosure Vulnerability

CISA

[보안가이드] KARA 랜섬웨어 동향 보고서 2024 1Q

SK쉴더스

[CVE-2023-24955] Microsoft SharePoint Server Code Injection Vulnerability

CISA

[CVE-2019-7256] Nice Linear eMerge E3-Series OS Command Injection Vulnerability

CISA

[CVE-2021-44529] Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability

CISA

[CVE-2023-48788] Fortinet FortiClient EMS SQL Injection Vulnerability

CISA

생성형 AI를 활용한 해커 등장, 챗 GPT를 악용한 랜섬웨어

SK쉴더스

[CVE-2024-27198] JetBrains TeamCity Authentication Bypass Vulnerability

CISA

[CVE-2024-23225] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2024-23296] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2023-21237] Android Pixel Information Disclosure Vulnerability

CISA

[CVE-2021-36380] Sunhillo SureLine OS Command Injection Vulnerablity

CISA

[CVE-2024-21338] Microsoft Windows Kernel Exposed IOCTL with Insufficient Access Control Vulnerability

CISA

[CVE-2023-29360] Microsoft Streaming Service Untrusted Pointer Dereference Vulnerability

CISA

[CVE-2024-1709] ConnectWise ScreenConnect Authentication Bypass Vulnerability

CISA

[CVE-2020-3259] Cisco ASA and FTD Information Disclosure Vulnerability

CISA

[CVE-2024-21410] Microsoft Exchange Server Privilege Escalation Vulnerability

CISA

[CVE-2024-21412] Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability

CISA

[CVE-2024-21351] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2023-43770] Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2024-21762] Fortinet FortiOS Out-of-Bound Write Vulnerability

CISA

[CVE-2023-4762] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2022-48618] Apple Multiple Products Memory Corruption Vulnerability

CISA

[CVE-2024-21893] Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability

CISA

[CVE-2023-22527] Atlassian Confluence Data Center and Server Template Injection Vulnerability

CISA

[CVE-2024-23222] Apple Multiple Products WebKit Type Confusion Vulnerability

CISA

[CVE-2023-34048] VMware vCenter Server Out-of-Bounds Write Vulnerability

CISA

[CVE-2023-35082] Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability

CISA

[CVE-2024-0519] Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

CISA

[CVE-2023-6549] Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

CISA

[CVE-2023-6548] Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CISA

[CVE-2018-15133] Laravel Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-29357] Microsoft SharePoint Server Privilege Escalation Vulnerability

CISA

[CVE-2023-46805] Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability

CISA

[CVE-2024-21887] Ivanti Connect Secure and Policy Secure Command Injection Vulnerability

CISA

[CVE-2023-23752] Joomla! Improper Access Control Vulnerability

CISA

[CVE-2016-20017] D-Link DSL-2750B Devices Command Injection Vulnerability

CISA

[CVE-2023-41990] Apple Multiple Products Code Execution Vulnerability

CISA

[CVE-2023-27524] Apache Superset Insecure Default Initialization of Resource Vulnerability

CISA

[CVE-2023-29300] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-38203] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-7101] Spreadsheet::ParseExcel Remote Code Execution Vulnerability

CISA

[CVE-2023-7024] Google Chromium WebRTC Heap Buffer Overflow Vulnerability

CISA

[보안가이드] KARA 랜섬웨어 동향 보고서 2023 4Q

SK쉴더스

[CVE-2023-49897] FXC AE1021, AE1021PE OS Command Injection Vulnerability

CISA

[CVE-2023-47565] QNAP VioStor NVR OS Command Injection Vulnerability

CISA

[CVE-2023-6448] Unitronics Vision PLC and HMI Insecure Default Password Vulnerability

CISA

[CVE-2023-41266] Qlik Sense Path Traversal Vulnerability

CISA

[CVE-2023-41265] Qlik Sense HTTP Tunneling Vulnerability

CISA

[CVE-2023-33107] Qualcomm Multiple Chipsets Integer Overflow Vulnerability

CISA

[CVE-2023-33106] Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability

CISA

[CVE-2023-33063] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2022-22071] Qualcomm Multiple Chipsets Use-After-Free Vulnerability

CISA

[CVE-2023-42917] Apple Multiple Products WebKit Memory Corruption Vulnerability

CISA

[CVE-2023-42916] Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

CISA

[CVE-2023-6345] Google Skia Integer Overflow Vulnerability

CISA

[CVE-2023-49103] ownCloud graphapi Information Disclosure Vulnerability

CISA

[CVE-2023-4911] GNU C Library Buffer Overflow Vulnerability

CISA

[CVE-2023-36584] Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

CISA

[CVE-2023-1671] Sophos Web Appliance Command Injection Vulnerability

CISA

[CVE-2020-2551] Oracle Fusion Middleware Unspecified Vulnerability

CISA

[CVE-2023-36033] Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability

CISA

[CVE-2023-36025] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2023-36036] Microsoft Windows Cloud Files Mini Filter Driver Privilege Escalation Vulnerability

CISA

[CVE-2023-47246] SysAid Server Path Traversal Vulnerability

CISA

[CVE-2023-36844] Juniper Junos OS EX Series PHP External Variable Modification Vulnerability

CISA

[CVE-2023-36845] Juniper Junos OS EX Series and SRX Series PHP External Variable Modification Vulnerability

CISA

[CVE-2023-36846] Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-36847] Juniper Junos OS EX Series Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-36851] Juniper Junos OS SRX Series Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-29552] Service Location Protocol (SLP) Denial-of-Service Vulnerability

CISA

[CVE-2023-22518] Atlassian Confluence Data Center and Server Improper Authorization Vulnerability

CISA

[보안가이드] KARA 랜섬웨어 동향 보고서 2023.11.

SK쉴더스

[CVE-2023-46604] Apache ActiveMQ Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-46748] F5 BIG-IP Configuration Utility SQL Injection Vulnerability

CISA

[CVE-2023-46747] F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability

CISA

[CVE-2023-5631] Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2023-20273] Cisco IOS XE Web UI Command Injection Vulnerability

CISA

[CVE-2023-4966] Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability

CISA

[CVE-2023-20198] Cisco IOS XE Web UI Privilege Escalation Vulnerability

CISA

[CVE-2023-21608] Adobe Acrobat and Reader Use-After-Free Vulnerability

CISA

[CVE-2023-20109] Cisco IOS and IOS XE Group Encrypted Transport VPN Out-of-Bounds Write Vulnerability

CISA

[CVE-2023-41763] Microsoft Skype for Business Privilege Escalation Vulnerability

CISA

[CVE-2023-36563] Microsoft WordPad Information Disclosure Vulnerability

CISA

[CVE-2023-44487] HTTP/2 Rapid Reset Attack Vulnerability

CISA

[CVE-2023-22515] Atlassian Confluence Data Center and Server Broken Access Control Vulnerability

CISA

[CVE-2023-40044] Progress WS_FTP Server Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-42824] Apple iOS and iPadOS Kernel Privilege Escalation Vulnerability

CISA

[CVE-2023-42793] JetBrains TeamCity Authentication Bypass Vulnerability

CISA

[CVE-2023-28229] Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

CISA

[CVE-2023-4211] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2023-5217] Google Chromium libvpx Heap Buffer Overflow Vulnerability

CISA

[CVE-2018-14667] Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability

CISA

[CVE-2023-41991] Apple Multiple Products Improper Certificate Validation Vulnerability

CISA

[CVE-2023-41992] Apple Multiple Products Kernel Privilege Escalation Vulnerability

CISA

[CVE-2023-41993] Apple Multiple Products WebKit Code Execution Vulnerability

CISA

[CVE-2023-41179] Trend Micro Apex One and Worry-Free Business Security Remote Code Execution Vulnerability

CISA

[CVE-2023-28434] MinIO Security Feature Bypass Vulnerability

CISA

[CVE-2022-22265] Samsung Mobile Devices Use-After-Free Vulnerability

CISA

[CVE-2014-8361] Realtek SDK Improper Input Validation Vulnerability

CISA

[CVE-2017-6884] Zyxel EMG2926 Routers Command Injection Vulnerability

CISA

[CVE-2021-3129] Laravel Ignition File Upload Vulnerability

CISA

[CVE-2023-26369] Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability

CISA

[CVE-2023-35674] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2023-20269] Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability

CISA

[CVE-2023-4863] Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2023-36761] Microsoft Word Information Disclosure Vulnerability

CISA

[CVE-2023-36802] Microsoft Streaming Service Proxy Privilege Escalation Vulnerability

CISA

[CVE-2023-41064] Apple iOS, iPadOS, and macOS ImageIO Buffer Overflow Vulnerability

CISA

[CVE-2023-41061] Apple iOS, iPadOS, and watchOS Wallet Code Execution Vulnerability

CISA

[CVE-2023-33246] Apache RocketMQ Command Execution Vulnerability

CISA

[CVE-2023-38831] RARLAB WinRAR Code Execution Vulnerability

CISA

[CVE-2023-32315] Ignite Realtime Openfire Path Traversal Vulnerability

CISA

[CVE-2023-38035] Ivanti Sentry Authentication Bypass Vulnerability

CISA

[CVE-2023-27532] Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability

CISA

[CVE-2023-26359] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-24489] Citrix Content Collaboration ShareFile Improper Access Control Vulnerability

CISA

[CVE-2023-38180] Microsoft .NET Core and Visual Studio Denial-of-Service Vulnerability

CISA

[CVE-2017-18368] Zyxel P660HN-T1A Routers Command Injection Vulnerability

CISA

[CVE-2023-35081] Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability

CISA

[CVE-2023-37580] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2023-38606] Apple Multiple Products Kernel Unspecified Vulnerability

CISA

[CVE-2023-35078] Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability

CISA

[보안 가이드] KARA 랜섬웨어 동향 보고서 2023.07.

SK쉴더스

[CVE-2023-29298] Adobe ColdFusion Improper Access Control Vulnerability

CISA

[CVE-2023-38205] Adobe ColdFusion Improper Access Control Vulnerability

CISA

[CVE-2023-3519] Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability

CISA

[CVE-2023-36884] Microsoft Windows Search Remote Code Execution Vulnerability

CISA

[CVE-2022-29303] SolarView Compact Command Injection Vulnerability

CISA

[CVE-2023-37450] Apple Multiple Products WebKit Code Execution Vulnerability

CISA

[CVE-2023-32046] Microsoft Windows MSHTML Platform Privilege Escalation Vulnerability

CISA

[CVE-2023-32049] Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2023-35311] Microsoft Outlook Security Feature Bypass Vulnerability

CISA

[CVE-2023-36874] Microsoft Windows Error Reporting Service Privilege Escalation Vulnerability

CISA

[CVE-2022-31199] Netwrix Auditor Insecure Object Deserialization Vulnerability

CISA

[CVE-2021-29256] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2019-17621] D-Link DIR-859 Router Command Execution Vulnerability

CISA

[CVE-2019-20500] D-Link DWL-2600AP Access Point Command Injection Vulnerability

CISA

[CVE-2021-25487] Samsung Mobile Devices Out-of-Bounds Read Vulnerability

CISA

[CVE-2021-25489] Samsung Mobile Devices Improper Input Validation Vulnerability

CISA

[CVE-2021-25394] Samsung Mobile Devices Race Condition Vulnerability

CISA

[CVE-2021-25395] Samsung Mobile Devices Race Condition Vulnerability

CISA

[CVE-2021-25371] Samsung Mobile Devices Unspecified Vulnerability

CISA

[CVE-2021-25372] Samsung Mobile Devices Improper Boundary Check Vulnerability

CISA

[CVE-2023-32434] Apple Multiple Products Integer Overflow Vulnerability

CISA

[CVE-2023-32435] Apple Multiple Products WebKit Memory Corruption Vulnerability

CISA

[CVE-2023-32439] Apple Multiple Products WebKit Type Confusion Vulnerability

CISA

[CVE-2023-20867] VMware Tools Authentication Bypass Vulnerability

CISA

[CVE-2023-27992] Zyxel Multiple NAS Devices Command Injection Vulnerability

CISA

[CVE-2023-20887] Vmware Aria Operations for Networks Command Injection Vulnerability

CISA

[CVE-2020-35730] Roundcube Webmail Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2020-12641] Roundcube Webmail Remote Code Execution Vulnerability

CISA

[CVE-2021-44026] Roundcube Webmail SQL Injection Vulnerability

CISA

[CVE-2016-9079] Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability

CISA

[CVE-2016-0165] Microsoft Win32k Privilege Escalation Vulnerability

CISA

[CVE-2023-27997] Fortinet FortiOS and FortiProxy SSL-VPN Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2023-3079] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2023-33009] Zyxel Multiple Firewalls Buffer Overflow Vulnerability

CISA

[CVE-2023-33010] Zyxel Multiple Firewalls Buffer Overflow Vulnerability

CISA

[CVE-2023-34362] Progress MOVEit Transfer SQL Injection Vulnerability

CISA

[CVE-2023-28771] Zyxel Multiple Firewalls OS Command Injection Vulnerability

CISA

[CVE-2023-2868] Barracuda Networks ESG Appliance Improper Input Validation Vulnerability

CISA

[CVE-2023-32409] Apple Multiple Products WebKit Sandbox Escape Vulnerability

CISA

[CVE-2023-28204] Apple Multiple Products WebKit Out-of-Bounds Read Vulnerability

CISA

[CVE-2023-32373] Apple Multiple Products WebKit Use-After-Free Vulnerability

CISA

[CVE-2004-1464] Cisco IOS Denial-of-Service Vulnerability

CISA

[CVE-2016-6415] Cisco IOS, IOS XR, and IOS XE IKEv1 Information Disclosure Vulnerability

CISA

[CVE-2023-21492] Samsung Mobile Devices Insertion of Sensitive Information Into Log File Vulnerability

CISA

[CVE-2023-25717] Multiple Ruckus Wireless Products CSRF and RCE Vulnerability

CISA

[CVE-2021-3560] Red Hat Polkit Incorrect Authorization Vulnerability

CISA

[CVE-2014-0196] Linux Kernel Race Condition Vulnerability

CISA

[CVE-2010-3904] Linux Kernel Improper Input Validation Vulnerability

CISA

[CVE-2015-5317] Jenkins User Interface (UI) Information Disclosure Vulnerability

CISA

[CVE-2016-3427] Oracle Java SE and JRockit Unspecified Vulnerability

CISA

[CVE-2016-8735] Apache Tomcat Remote Code Execution Vulnerability

CISA

[CVE-2023-29336] Microsoft Win32K Privilege Escalation Vulnerability

CISA

[CVE-2023-1389] TP-Link Archer AX-21 Command Injection Vulnerability

CISA

[CVE-2021-45046] Apache Log4j2 Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-21839] Oracle WebLogic Server Unspecified Vulnerability

CISA

[CVE-2023-28432] MinIO Information Disclosure Vulnerability

CISA

[CVE-2023-27350] PaperCut MF/NG Improper Access Control Vulnerability

CISA

[CVE-2023-2136] Google Chrome Skia Integer Overflow Vulnerability

CISA

[보안 가이드] KARA 랜섬웨어 동향 보고서 2023.04.

SK쉴더스

[CVE-2017-6742] Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CISA

[CVE-2019-8526] Apple macOS Use-After-Free Vulnerability

CISA

[CVE-2023-2033] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2023-20963] Android Framework Privilege Escalation Vulnerability

CISA

[CVE-2023-29492] Novi Survey Insecure Deserialization Vulnerability

CISA

[CVE-2023-28252] Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CISA

[CVE-2023-28205] Apple Multiple Products WebKit Use-After-Free Vulnerability

CISA

[CVE-2023-28206] Apple iOS, iPadOS, and macOS IOSurfaceAccelerator Out-of-Bounds Write Vulnerability

CISA

[CVE-2021-27876] Veritas Backup Exec Agent File Access Vulnerability

CISA

[CVE-2021-27877] Veritas Backup Exec Agent Improper Authentication Vulnerability

CISA

[CVE-2021-27878] Veritas Backup Exec Agent Command Execution Vulnerability

CISA

[CVE-2019-1388] Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability

CISA

[CVE-2023-26083] Arm Mali GPU Kernel Driver Information Disclosure Vulnerability

CISA

[CVE-2022-27926] Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2013-3163] Microsoft Internet Explorer Memory Corruption Vulnerability

CISA

[CVE-2017-7494] Samba Remote Code Execution Vulnerability

CISA

[CVE-2022-42948] Fortra Cobalt Strike User Interface Remote Code Execution Vulnerability

CISA

[CVE-2022-39197] Fortra Cobalt Strike Teamserver Cross-Site Scripting (XSS) Vulnerability

CISA

[CVE-2021-30900] Apple iOS, iPadOS, and macOS Out-of-Bounds Write Vulnerability

CISA

[CVE-2022-38181] Arm Mali GPU Kernel Driver Use-After-Free Vulnerability

CISA

[CVE-2023-0266] Linux Kernel Use-After-Free Vulnerability

CISA

[CVE-2022-3038] Google Chromium Network Service Use-After-Free Vulnerability

CISA

[CVE-2022-22706] Arm Mali GPU Kernel Driver Unspecified Vulnerability

CISA

[CVE-2023-26360] Adobe ColdFusion Deserialization of Untrusted Data Vulnerability

CISA

[CVE-2023-23397] Microsoft Office Outlook Privilege Escalation Vulnerability

CISA

[CVE-2023-24880] Microsoft Windows SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2022-41328] Fortinet FortiOS Path Traversal Vulnerability

CISA

[CVE-2021-39144] XStream Remote Code Execution Vulnerability

CISA

[CVE-2020-5741] Plex Media Server Remote Code Execution Vulnerability

CISA

[CVE-2022-28810] Zoho ManageEngine ADSelfService Plus Remote Code Execution Vulnerability

CISA

[CVE-2022-33891] Apache Spark Command Injection Vulnerability

CISA

[CVE-2022-35914] Teclib GLPI Remote Code Execution Vulnerability

CISA

[CVE-2022-36537] ZK Framework AuUploader Unspecified Vulnerability

CISA

[CVE-2022-47986] IBM Aspera Faspex Code Execution Vulnerability

CISA

[CVE-2022-41223] Mitel MiVoice Connect Code Injection Vulnerability

CISA

[CVE-2022-40765] Mitel MiVoice Connect Command Injection Vulnerability

CISA

[CVE-2022-46169] Cacti Command Injection Vulnerability

CISA

[CVE-2023-21715] Microsoft Office Publisher Security Feature Bypass Vulnerability

CISA

[CVE-2023-23376] Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CISA

[CVE-2023-23529] Apple Multiple Products WebKit Type Confusion Vulnerability

CISA

[CVE-2023-21823] Microsoft Windows Graphic Component Privilege Escalation Vulnerability

CISA

[CVE-2015-2291] Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability

CISA

[CVE-2022-24990] TerraMaster OS Remote Command Execution Vulnerability

CISA

[CVE-2023-0669] Fortra GoAnywhere MFT Remote Code Execution Vulnerability

CISA

[CVE-2022-21587] Oracle E-Business Suite Unspecified Vulnerability

CISA

[CVE-2023-22952] Multiple SugarCRM Products Remote Code Execution Vulnerability

CISA

[CVE-2017-11357] Telerik UI for ASP.NET AJAX Insecure Direct Object Reference Vulnerability

CISA

[CVE-2022-47966] Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

CISA

[CVE-2022-44877] CWP Control Web Panel OS Command Injection Vulnerability

CISA

[CVE-2022-41080] Microsoft Exchange Server Privilege Escalation Vulnerability

CISA

[CVE-2023-21674] Microsoft Windows Advanced Local Procedure Call (ALPC) Privilege Escalation Vulnerability

CISA

[CVE-2018-5430] TIBCO JasperReports Server Information Disclosure Vulnerability

CISA

[CVE-2018-18809] TIBCO JasperReports Library Directory Traversal Vulnerability

CISA

Masscan 랜섬웨어 위협 분석 - 사이버 위협 인텔리전스 보고서(FSI Intelligence Report)

[CVE-2022-42856] Apple iOS Type Confusion Vulnerability

CISA

[CVE-2022-42475] Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability

CISA

[CVE-2022-44698] Microsoft Defender SmartScreen Security Feature Bypass Vulnerability

CISA

[CVE-2022-27518] Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability

CISA

[CVE-2022-26500] Veeam Backup & Replication Remote Code Execution Vulnerability

CISA

[CVE-2022-26501] Veeam Backup & Replication Remote Code Execution Vulnerability

CISA

[CVE-2022-4262] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2021-35587] Oracle Fusion Middleware Unspecified Vulnerability

CISA

[CVE-2022-4135] Google Chromium GPU Heap Buffer Overflow Vulnerability

CISA

[CVE-2022-41049] Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

CISA

[CVE-2022-41091] Microsoft Windows Mark of the Web (MOTW) Security Feature Bypass Vulnerability

CISA

[CVE-2022-41073] Microsoft Windows Print Spooler Privilege Escalation Vulnerability

CISA

[CVE-2022-41125] Microsoft Windows CNG Key Isolation Service Privilege Escalation Vulnerability

CISA

[CVE-2022-41128] Microsoft Windows Scripting Languages Remote Code Execution Vulnerability

CISA

[CVE-2021-25337] Samsung Mobile Devices Improper Access Control Vulnerability

CISA

[CVE-2021-25369] Samsung Mobile Devices Improper Access Control Vulnerability

CISA

[CVE-2021-25370] Samsung Mobile Devices Memory Corruption Vulnerability

CISA

[CVE-2022-3723] Google Chromium V8 Type Confusion Vulnerability

CISA

[CVE-2022-42827] Apple iOS and iPadOS Out-of-Bounds Write Vulnerability

CISA

[CVE-2020-3433] Cisco AnyConnect Secure Mobility Client for Windows DLL Hijacking Vulnerability

CISA

[CVE-2020-3153] Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

CISA

[CVE-2018-19323] GIGABYTE Multiple Products Privilege Escalation Vulnerability

CISA

[CVE-2018-19322] GIGABYTE Multiple Products Code Execution Vulnerability

CISA

[CVE-2018-19321] GIGABYTE Multiple Products Privilege Escalation Vulnerability

CISA

[CVE-2018-19320] GIGABYTE Multiple Products Unspecified Vulnerability

CISA

[CVE-2022-41352] Synacor Zimbra Collaboration Suite (ZCS) Arbitrary File Upload Vulnerability

CISA

[CVE-2021-3493] Linux Kernel Privilege Escalation Vulnerability

CISA

[CVE-2022-40684] Fortinet Multiple Products Authentication Bypass Vulnerability

CISA

[CVE-2022-41033] Microsoft Windows COM+ Event System Service Privilege Escalation Vulnerability

CISA

[CVE-2022-41082] Microsoft Exchange Server Remote Code Execution Vulnerability

CISA

[CVE-2022-41040] Microsoft Exchange Server Server-Side Request Forgery Vulnerability

CISA

[CVE-2022-36804] Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

CISA

[CVE-2022-3236] Sophos Firewall Code Injection Vulnerability

CISA

[보안 가이드] KARA 랜섬웨어 동향 보고서

SK쉴더스

[CVE-2022-35405] Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability

CISA

[CVE-2022-40139] Trend Micro Apex One and Apex One as a Service Improper Validation Vulnerability

CISA

[CVE-2013-6282] Linux Kernel Improper Input Validation Vulnerability

CISA

[CVE-2013-2597] Code Aurora ACDB Audio Driver Stack-based Buffer Overflow Vulnerability

CISA

[CVE-2013-2596] Linux Kernel Integer Overflow Vulnerability

CISA

[CVE-2013-2094] Linux Kernel Privilege Escalation Vulnerability

CISA

[CVE-2010-2568] Microsoft Windows Remote Code Execution Vulnerability

CISA

[CVE-2022-37969] Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability

CISA

[CVE-2022-32917] Apple iOS, iPadOS, and macOS Remote Code Execution Vulnerability

CISA