Network Security Trends: November 2021 to January 2022
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-20837 | Movable Type 7 r.5002 and earlier (Movable Type 7 Series), Movable Type 6.8.2 and earlier (Movable Type 6 Series), Movable Type Advanced 7 r.5002 and earlier… | 9.8 | 88% | PoC | |
| CVE-2021-21980 | The vSphere Web Client (FLEX/Flash) contains an unauthorized arbitrary file read vulnerability | 7.5 | 5% | ||
| CVE-2021-22053 | Applications using both `spring-cloud-netflix-hystrix-dashboard` and `spring-boot-starter-thymeleaf` expose a way to execute code submitted within the request… | 8.8 | 13% | ||
| CVE-2021-22205 | Unauthenticated RCE in GitLab CE/EE via ExifTool Image Parsing (CVE-2021-22205) | 10.0 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2021-24750 | The WP Visitor Statistics (Real Time Traffic) WordPress plugin before 4.8 does not properly sanitise and escape the refUrl in the refDetails AJAX action… | 8.8 | 38% | PoC ×2 | |
| CVE-2021-24946 | The Modern Events Calendar Lite WordPress plugin before 6.1.5 does not sanitise and escape the time parameter before using it in a SQL statement in the… | 9.8 | 73% | PoC ×3 | |
| CVE-2021-36749 | In the Druid ingestion system, the InputSource is used for reading data from a certain data source | 6.5 | 81% | ||
| CVE-2021-38647 | Unauthenticated RCE in Microsoft Open Management Infrastructure (OMI) | 9.8 | 100% | KEVRansomwarePoC | KEV |
| CVE-2021-41174 | Grafana: In affected versions if an attacker is able to convince a victim to visit a URL referencing a vulnerable page, arbitrary… | 6.1 | 85% | ||
| CVE-2021-41277 | Unauthenticated Local File Inclusion in Metabase GeoJSON Map API | 7.5 | 97% | KEV | KEV |
| CVE-2021-41349 | Microsoft Exchange Server Spoofing Vulnerability | 6.5 | 93% | ||
| CVE-2021-41951 | ResourceSpace before 9.6 rev 18290 is affected by a reflected Cross-Site Scripting vulnerability in plugins/wordpress_sso/pages/index.php via the… | 6.1 | 78% | PoC | |
| CVE-2021-42237 | Unauthenticated Deserialization RCE in Sitecore XP 7.5-8.2 | 9.8 | 98% | KEVRansomwarePoC | KEV |
| CVE-2021-43778 | Barcode: GLPI instances version 2.x prior to version 2.6.1 with the barcode plugin installed are vulnerable to a path traversal… | 7.5 | 53% | PoC | |
| CVE-2021-44228 | JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell) | 10.0 | 100% | KEVRansomwarePoC ×9 | KEV |
| CVE-2021-45046 | Remote Code Execution in Apache Log4j2 via Incomplete Log4Shell Fix | 9.0 | 100% | KEVRansomwarePoC | KEV |
From the original article
10 min read at unit42.paloaltonetworks.com
Unit 42 researchers continually observe network attacks and search for insights that can assist defenders. Here, we summarize key trends from November 2021 to January 2022. In the following sections, we present our analysis of the most recently published vulnerabilities, including the severity distribution.
By Yue Guan · unit42.paloaltonetworks.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.