Sector Education

Timeframe: -28 days

Default Categories (58): Access Management Software, Accounting Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Backup Software, Blog Software, Calendar Software, Chat Software, Cloud Software, Communications System, Database Administration Software, Database Software, Digital Media Player, Directory Service Software, Document Management Software, Document Processing Software, Document Reader Software, Endpoint Management Software, Firewall Software, Groupware Software, Hardware Driver Software, Image Processing Software, Information Management Software, IP Phone Software, Knowledge Base Software, Learning Management Software, Library Management System Software, Log Management Software, Mail Client Software, Mail Server Software, Messaging Software, Middleware, Multimedia Player Software, Multimedia Processing Software, Network Attached Storage Software, Network Encryption Software, Network Management Software, Network Routing Software, Office Suite Software, Operating System, Presentation Software, Printing Software, Programming Language Software, Project Management Software, Remote Access Software, Reporting Software, Router Operating System, Server Management Software, Spreadsheet Software, SSH Server Software, Survey Software, Unified Communication Software, Virtualization Software, Web Browser, Web Server, Wireless LAN Software, Word Processing Software

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Vendor

Microsoft	94
Not Defined	70
Mozilla	22
Apple	20
Google	20

Product

Microsoft Windows	56
Microsoft Edge	24
Mozilla Firefox	22
Google Chrome	20
Linux Kernel	18

Remediation

Official Fix	290
Temporary Fix	0
Workaround	0
Unavailable	4
Not Defined	80

Exploitability

High	0
Functional	4
Proof-of-Concept	20
Unproven	66
Not Defined	284

Access Vector

Not Defined	0
Physical	2
Local	66
Adjacent	58
Network	248

Authentication

Not Defined	0
High	14
Low	198
None	162

User Interaction

Not Defined	0
Required	152
None	222

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	10
≤4	30
≤5	52
≤6	90
≤7	110
≤8	48
≤9	24
≤10	10

CVSSv3 Temp

≤1	0
≤2	0
≤3	10
≤4	36
≤5	68
≤6	154
≤7	48
≤8	42
≤9	10
≤10	6

VulDB

≤1	0
≤2	0
≤3	18
≤4	38
≤5	74
≤6	62
≤7	108
≤8	46
≤9	18
≤10	10

NVD

≤1	372
≤2	0
≤3	0
≤4	0
≤5	0
≤6	2
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	300
≤2	0
≤3	2
≤4	2
≤5	4
≤6	14
≤7	18
≤8	18
≤9	8
≤10	8

Vendor

≤1	304
≤2	0
≤3	0
≤4	0
≤5	0
≤6	8
≤7	20
≤8	24
≤9	12
≤10	6

Exploit 0-day

<1k	24
<2k	98
<5k	34
<10k	68
<25k	50
<50k	74
<100k	26
≥100k	0

Exploit Today

<1k	126
<2k	62
<5k	32
<10k	66
<25k	88
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

IOB - Indicator of Behavior (1000)

Timeline

Lang

en	812
fr	34
de	32
es	30
it	20

Country

us	192
gb	74
it	66
fr	46
de	44

Actors

Carbanak	1
Naikon	1
Dealply	1
Razy	1

Activities

Interest

Timeline

Type

Operating System	36
Web Browser	22
Router Operating System	14
Anti-Malware Software	10
Firewall Software	8

Vendor

Microsoft	42
Linux	18
Not Defined	10
Fortinet	8
DrayTek	6

Product

Microsoft Edge	18
Linux Kernel	18
Microsoft Windows	16
Fortinet FortiOS	8
Ubiquiti EdgeRouter X	6

Vulnerabilities

#	Vulnerability	Base	Temp	0day	Today	Exp	Rem	CTI	EPSS	CVE
1	Microsoft Windows ICMP Remote Code Execution	9.8	8.5	$50k-$100k	$10k-$25k	Unproven	Official Fix	10.00	0.00237	CVE-2023-23415
2	Microsoft Outlook Remote Code Execution	8.5	7.9	$10k-$25k	$2k-$5k	Functional	Official Fix	6.16	0.00943	CVE-2023-23397
3	Ubiquiti EdgeRouter X NAT Configuration command injection [Disputed]	7.2	6.5	$1k-$2k	$0-$1k	Proof-of-Concept	Unavailable	2.04	0.00000	CVE-2023-1456
4	Watchdog Anti-Virus IoControlCode wsdk-driver.sys denial of service	5.5	5.0	$2k-$5k	$0-$1k	Proof-of-Concept	Not Defined	2.10	0.00000	CVE-2023-1446
5	Watchdog Anti-Virus IoControlCode wsdk-driver.sys access control	4.4	4.0	$2k-$5k	$0-$1k	Proof-of-Concept	Not Defined	1.86	0.00000	CVE-2023-1453
6	Filseclab Twister Antivirus IoControlCode fildds.sys denial of service	6.5	5.9	$10k-$25k	$0-$1k	Proof-of-Concept	Not Defined	2.04	0.00000	CVE-2023-1443
7	Ubiquiti EdgeRouter X OSPF command injection [Disputed]	7.2	6.5	$1k-$2k	$0-$1k	Proof-of-Concept	Not Defined	1.71	0.00000	CVE-2023-1458
8	Filseclab Twister Antivirus IoControlCode fildds.sys denial of service	7.5	6.8	$10k-$25k	$0-$1k	Proof-of-Concept	Not Defined	1.89	0.00000	CVE-2023-1444
9	Ubiquiti EdgeRouter X Static Routing Configuration command injection [Disputed]	7.2	6.5	$1k-$2k	$0-$1k	Proof-of-Concept	Unavailable	1.53	0.00000	CVE-2023-1457
10	Apache HTTP Server mod_proxy request smuggling	5.0	4.8	$10k-$25k	$5k-$10k	Not Defined	Official Fix	2.57	0.00226	CVE-2023-25690
11	Filseclab Twister Antivirus IoControlCode fildds.sys denial of service	3.3	3.0	$2k-$5k	$0-$1k	Proof-of-Concept	Not Defined	1.84	0.00000	CVE-2023-1445
12	Linux Kernel connect.c reconn_set_ipaddr_from_hostname use after free	5.3	5.1	$2k-$5k	$1k-$2k	Not Defined	Official Fix	0.57+	0.00000	CVE-2023-1195
13	Linux Kernel EXT4 File System ovl_aio_cleanup_handler use after free	4.5	4.3	$2k-$5k	$0-$1k	Not Defined	Official Fix	0.60+	0.00000	CVE-2023-1252
14	Tags Cloud Manager Plugin cross site scripting	4.3	4.2	$1k-$2k	$1k-$2k	Not Defined	Not Defined	0.57	0.00000	CVE-2023-28166
15	Backup Bank Plugin post_user_feedback_backup_bank authorization	6.3	6.1	$1k-$2k	$1k-$2k	Not Defined	Not Defined	0.57	0.00000	CVE-2023-28165
16	Fabian von Allmen WP Calendar Plugin cross site scripting	4.4	4.4	$1k-$2k	$0-$1k	Not Defined	Not Defined	0.48+	0.00000	CVE-2022-45814
17	Microsoft Windows SmartScreen unknown vulnerability	5.4	5.0	$50k-$100k	$10k-$25k	Functional	Official Fix	1.20	0.00404	CVE-2023-24880
18	DrayTek Vigor 2960 mainfunction.cgi sub_1DA58 path traversal	4.3	3.9	$1k-$2k	$0-$1k	Proof-of-Concept	Not Defined	1.29	0.00078	CVE-2023-1163
19	Zhong Bang CRMEB Java list sql injection	5.5	5.0	$1k-$2k	$0-$1k	Proof-of-Concept	Not Defined	1.29	0.00076	CVE-2023-1165
20	DrayTek Vigor 2960 mainfunction.cgi sub_1225C command injection	6.3	5.7	$1k-$2k	$0-$1k	Proof-of-Concept	Not Defined	1.28	0.00139	CVE-2023-1162

IOC - Indicator of Compromise (6)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	Actor	Type	Confidence
1	47.242.33.0/24	xStart	predictive	High
2	XX.XXX.XXX.X/XX	Xxxxxxx	predictive	High
3	XX.XX.XXX.X/XX	Xxxxxxxx	predictive	High
4	XXX.XX.XX.X/XX	Xxxx	predictive	High
5	XXX.XX.XXX.X/XX	Xxxxxx	predictive	High
6	XXX.XXX.XXX.X/XX	Xxxx	predictive	High

TTP - Tactics, Techniques, Procedures (17)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	Vulnerabilities	Access Vector	Type	Confidence
1	T1006	CWE-22, CWE-23	Pathname Traversal	predictive	High
2	T1055	CWE-74	Injection	predictive	High
3	T1059	CWE-94	Cross Site Scripting	predictive	High
4	T1059.007	CWE-79, CWE-80	Cross Site Scripting	predictive	High
5	TXXXX	CWE-XXX	Xxxxxxxxx Xxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	High
6	TXXXX.XXX	CWE-XXX, CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xxxxxxxx	predictive	High
7	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxxxxxx	predictive	High
8	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	High
9	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	High
10	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx	predictive	High
11	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxx Xxxx	predictive	High
12	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	High
13	TXXXX	CWE-XXX	Xxxxxxxx Xx Xxxxxxx Xxxxxxxx Xxxxxxxxxxx Xx Xx Xxxxxxxxxxxx Xxxxx	predictive	High
14	TXXXX	CWE-XXX	Xxxxxxxxxxxxx	predictive	High
15	TXXXX	CWE-XXX	X2xx Xxxxxxxxxxxxxxxx: Xxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx	predictive	High
16	TXXXX.XXX	CWE-XXX	Xxx Xx Xxxx Xxxx	predictive	High
17	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx Xxxxxx	predictive	High

IOA - Indicator of Attack (80)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	Class	Indicator	Type	Confidence
1	File	/ajax/update_certificate	predictive	High
2	File	/api/admin/system/store/order/list	predictive	High
3	File	/api/admin/user/list	predictive	High
4	File	/bookstore/bookPerPub.php	predictive	High
5	File	/cgi-bin/mainfunction.cgi	predictive	High
6	File	/tmp/mulipartFile	predictive	High
7	File	add.php	predictive	Low
8	File	api1/login.php	predictive	High
9	File	app/controllers/tour_controller.rb	predictive	High
10	File	bits.c	predictive	Low
11	File	xxxx.x	predictive	Low
12	File	xxxxxxx/xxxxxxxxx/xxx_xxx.x	predictive	High
13	File	xxxxxxx/xxxx/xxx-xxx-xxxxxx.x	predictive	High
14	File	xxxxxxx/xxx/xxx/xxx/xxxxxx_xxxxxx.x	predictive	High
15	File	xxxxxxx/xxx/xxx/xxxxxx/xxxxxxx_xxxxxx.x	predictive	High
16	File	xxxxxxx/xxx/xxxxxxxx/xxxxxxxx/xxxx/xxxx/xxxxxxxx/xx_xxxxxx.x	predictive	High
17	File	xxxxxxx/xxx/xxxxx/xxxx.x	predictive	High
18	File	xxxxxxx/xxxx/xxx/xxx-xxxxxxxx.x	predictive	High
19	File	xxxxxxx/xxx/xxxx/xxxx_xxxx.x	predictive	High
20	File	xxxxxxx/xxx/xxx.x	predictive	High
21	File	xxxxxxx/xxx/xxxx/xxxx-xxxx.x	predictive	High
22	File	xxxxxxxxxxx-xxxx.xxxxxxx	predictive	High
23	File	xx/xxxx/xxxxxxx.x	predictive	High
24	File	xx/xx-xxxxxxxxx.x	predictive	High
25	File	xx/xxxx/xxxxxx.x	predictive	High
26	File	xx/xxxxx/xxxxxx.x	predictive	High
27	File	xx/xxxxx/xxx.x	predictive	High
28	File	xxxxxxxxxxx.xx	predictive	High
29	File	xxxxxx/xxxxxx/xxxxxxxxxx.x	predictive	High
30	File	xxxxxx/xxxxx/xx.x	predictive	High
31	File	xxx.xxx	predictive	Low
32	File	xxx-xxx/xxxxx.x	predictive	High
33	File	xxx/xxxxxxxxxxxxxxxxxxxx.xx	predictive	High
34	File	xxxxxxxxxxxx.xxx	predictive	High
35	File	xx/xxxxxx-xxxxx.x	predictive	High
36	File	xxxxxxx_xxx.xxx	predictive	High
37	File	xxx/xxxx/xx_xxxx.x	predictive	High
38	File	xxx/xxx/xxx_xxxx.x	predictive	High
39	File	xxxx.xxx	predictive	Medium
40	File	xxxxxxxxxxxx.xxx	predictive	High
41	File	xxxx-xxxx.xx	predictive	Medium
42	File	xxx_xxxxx.x	predictive	Medium
43	File	xxxxx/xxxx/xxxx/xxxx.x	predictive	High
44	File	xxxxx/xxxxxx.x	predictive	High
45	File	xxxxx.xxxxxx.xxxxxxx.xxx	predictive	High
46	File	xxxxxx.xxx	predictive	Medium
47	Library	/xxx/xxxxxx/xxx/xxxxxx_xxxxxxxxxx.xxx	predictive	High
48	Library	xxxxxx.xxx	predictive	Medium
49	Library	xxxxxx.xxx	predictive	Medium
50	Library	xxxxxx.xxx	predictive	Medium
51	Library	xxxx-xxxxxx.xxx	predictive	High
52	Argument	xxxxx_xxxxxx_xxxx	predictive	High
53	Argument	xxxx	predictive	Low
54	Argument	xxxx	predictive	Low
55	Argument	xxxxxxxx	predictive	Medium
56	Argument	xxxxxxx	predictive	Low
57	Argument	xxxxxxxxxxxx	predictive	Medium
58	Argument	xxxx_xxxxx_xxx_xxxxx_xxxxxxxx	predictive	High
59	Argument	xxx_xxx_xxxxx_xxx_xx_xxxxx	predictive	High
60	Argument	xxxx_xxxx_xxxxxx_xxx_xxx_xxxxxxx	predictive	High
61	Argument	xxxx/xxxxxx	predictive	Medium
62	Argument	xxxxxxxxxxxxx	predictive	High
63	Argument	xxxxxxx__xxx	predictive	Medium
64	Argument	xxxxxxxx	predictive	Medium
65	Argument	xxxxxxxxxxxxxx	predictive	High
66	Argument	xxx_xx_xxxxxx/xxx_xxx_xxxxxxxxxxx	predictive	High
67	Argument	xxxx_xxx_xxxx_xxxx	predictive	High
68	Argument	xxxxxx_xxx_xxxx_xxxx	predictive	High
69	Argument	xxxxxxxxxxxxxxxxx	predictive	High
70	Argument	xxxx-xxx-xxxxxxxxx	predictive	High
71	Argument	xxxxxxxx	predictive	Medium
72	Argument	xx_xxxx_xxxxxx_xx_xxxx	predictive	High
73	Argument	xxxxxx	predictive	Low
74	Argument	xxxx_xxxx	predictive	Medium
75	Argument	xxxxxxxxx_xxx	predictive	High
76	Argument	xxxxxxxxxxx_xxxxxxxx_x.x.x.x	predictive	High
77	Argument	xxxxxxxxx	predictive	Medium
78	Argument	xxx	predictive	Low
79	Argument	xxxx	predictive	Low
80	Input Value	/../xxx/xxxxxxxx	predictive	High

◂ PreviousOverviewNext ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!