セクター Police

Timeframe: -28 days

Default Categories (69): Access Management Software, Android App Software, Anti-Malware Software, Anti-Spam Software, Application Server Software, Appointment Software, Asset Management Software, Audio Processing Software, Backup Software, Big Data Software, Business Process Management Software, Calendar Software, Chat Software, Communications System, Connectivity Software, Customer Relationship Management System, Database Administration Software, Database Software, Digital Media Player, Directory Service Software, Document Management Software, Document Processing Software, Document Reader Software, Enterprise Resource Planning Software, File Compression Software, File Transfer Software, Firewall Software, Groupware Software, Human Capital Management Software, Image Processing Software, Information Management Software, IP Phone Software, Learning Management Software, Mail Client Software, Mail Server Software, Messaging Software, Multimedia Player Software, Multimedia Processing Software, Network Attached Storage Software, Network Authentication Software, Network Camera Software, Network Encryption Software, Network Management Software, Network Routing Software, Office Suite Software, Operating System, Operating System Utility Software, Packet Analyzer Software, Photo Gallery Software, Policy Management Software, Presentation Software, Printing Software, Project Management Software, Remote Access Software, Reporting Software, Router Operating System, Server Management Software, Service Management Software, Smartphone Operating System, Spreadsheet Software, SSH Server Software, Ticket Tracking Software, Unified Communication Software, Video Surveillance Software, Virtualization Software, Web Browser, Web Server, Wireless LAN Software, Word Processing Software

タイムライン

ベンダー

Linux	230
Apple	186
Microsoft	66
Google	64
Not Defined	58

製品

Linux Kernel	230
Apple macOS	90
Microsoft Windows	58
Apple iOS	56
Apple iPadOS	56

修復

Official Fix	704
Temporary Fix	0
Workaround	4
Unavailable	0
Not Defined	100

悪用可能性

High	4
Functional	0
Proof-of-Concept	30
Unproven	58
Not Defined	716

アクセスベクター

Not Defined	0
Physical	16
Local	216
Adjacent	286
Network	290

認証

Not Defined	0
High	36
Low	532
None	240

ユーザー操作

Not Defined	0
Required	186
None	622

C3BM Index

CVSSv3 Base

≤1	0
≤2	6
≤3	28
≤4	102
≤5	136
≤6	284
≤7	152
≤8	72
≤9	22
≤10	6

CVSSv3 Temp

≤1	0
≤2	6
≤3	34
≤4	104
≤5	138
≤6	370
≤7	94
≤8	54
≤9	2
≤10	6

VulDB

≤1	0
≤2	8
≤3	32
≤4	120
≤5	128
≤6	276
≤7	148
≤8	66
≤9	26
≤10	4

NVD

≤1	808
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	700
≤2	0
≤3	0
≤4	2
≤5	16
≤6	16
≤7	20
≤8	32
≤9	14
≤10	8

ベンダー

≤1	746
≤2	0
≤3	0
≤4	0
≤5	0
≤6	8
≤7	14
≤8	20
≤9	20
≤10	0

0dayエクスプロイト

<1k	32
<2k	176
<5k	82
<10k	260
<25k	158
<50k	72
<100k	28
≥100k	0

本日のエクスプロイト

<1k	294
<2k	208
<5k	132
<10k	110
<25k	62
<50k	2
<100k	0
≥100k	0

闇ツールの市場規模

IOB - Indicator of Behavior (1000)

タイムライン

言語

en	760
zh	60
de	30
ru	26
it	20

国・地域

us	188
cn	136
de	34
fr	34
ru	34

アクター

Cobalt Strike	7
Mirai	3
RedLine Stealer	3
Sliver	2
BumbleBee	2

アクティビティ

関心

タイムライン

タイプ

Operating System	64
Web Browser	18
Smartphone Operating System	18
Document Reader Software	18
Router Operating System	16

ベンダー

Apple	42
Linux	38
Foxit	16
Not Defined	16
Google	12

製品

Linux Kernel	38
Apple macOS	20
Foxit PDF Reader	16
Apple iOS	14
Apple iPadOS	14

脆弱性

#	脆弱性	Base	Temp	0day	本日	悪	修復	CTI	EPSS	CVE
1	Zimbra zm-admin-ajax Form Textbox Field Error XFormItem.js XFormItem.prototype.setError クロスサイトスクリプティング	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Official Fix	0.16	0.00000	CVE-2017-20191
2	SourceCodester Online Chatting System update_room.php SQLインジェクション	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.77	0.00045	CVE-2024-2932
3	Campcodes Online Art Gallery Management System adminHome.php SQLインジェクション	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	1.22	0.00045	CVE-2024-2999
4	code-projects Online Book System Product.php クロスサイトスクリプティング	3.5	3.2	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.85	0.00045	CVE-2024-3004
5	Linux Kernel push-switch flush_work メモリ破損	8.0	7.6	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.90	0.00000	CVE-2023-52629
6	code-projects Online Book System Product.php SQLインジェクション	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.73	0.00045	CVE-2024-3001
7	code-projects Online Book System description.php SQLインジェクション	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.90	0.00045	CVE-2024-3002
8	code-projects Online Book System cart.php SQLインジェクション	6.3	5.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.69	0.00045	CVE-2024-3003
9	code-projects Online Book System index.php SQLインジェクション	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.87	0.00045	CVE-2024-3000
10	D-Link DIR-3040us A1 FTP Server メモリ破損	7.3	7.3	$5k-$25k	$5k-$25k	Not Defined	Not Defined	1.22-	0.00000	CVE-2024-27619
11	Apple iOS/iPadOS Web Content メモリ破損	6.3	6.0	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.55	0.00045	CVE-2023-42950
12	Apple iOS/iPadOS サービス拒否	6.5	6.2	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.55	0.00043	CVE-2023-42962
13	SourceCodester Music Gallery Site 特権昇格	7.3	6.6	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.60	0.00045	CVE-2024-2930
14	jurecapuder AndroidWeatherApp Backup File androidmanifest.xml 情報の漏洩	1.8	1.7	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.39	0.00045	CVE-2024-2567
15	Apple iOS/iPadOS Web Content メモリ破損	4.3	4.1	$25k-$100k	$5k-$25k	Not Defined	Official Fix	0.35	0.00045	CVE-2023-42956
16	All In One WP Security & Firewall Plugin 未知の脆弱性	4.3	4.2	$0-$5k	$0-$5k	Not Defined	Not Defined	0.65-	0.00000	CVE-2024-30468
17	Contest Gallery Plugin クロスサイトスクリプティング	5.7	5.6	$0-$5k	$0-$5k	Not Defined	Not Defined	0.65	0.00000	CVE-2024-30428
18	WP Chat App Plugin Block Image Attribute クロスサイトスクリプティング	3.5	3.4	$0-$5k	$0-$5k	Not Defined	Not Defined	0.63	0.00000	CVE-2024-2513
19	zephyrproject-rtos Zephyr BLE メモリ破損	6.1	6.1	$0-$5k	$0-$5k	Not Defined	Not Defined	0.53	0.00043	CVE-2024-3077
20	Apple macOS App 情報の漏洩	3.3	3.2	$0-$5k	$0-$5k	Not Defined	Official Fix	0.27	0.00044	CVE-2023-42936

IOC - Indicator of Compromise (25)

These indicators of compromise highlight associated network ranges which are known to be part of research and attack activities.

ID	IP range	アクター	タイプ	信頼度
1	2.57.122.0/24	Mirai	predictive	高
2	3.75.178.0/24	Cobalt Strike	predictive	高
3	5.42.65.0/24	Zusy	predictive	高
4	X.XXX.XX.X/XX	Xxxxxx Xxxxxx	predictive	高
5	X.XXX.XX.X/XX	Xxxxxx Xxxxxx	predictive	高
6	X.XXX.XXX.X/XX	Xxxxxxxxx	predictive	高
7	X.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
8	X.XXX.XXX.X/XX	Xxxxx	predictive	高
9	X.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
10	X.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
11	X.XXX.XXX.X/XX	Xxxxxxx	predictive	高
12	X.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
13	XX.XXX.XXX.X/XX	Xxxxxxxx	predictive	高
14	XX.XXX.XX.X/XX	Xxx Xxxxx	predictive	高
15	XX.XXX.XXX.X/XX	Xxxxxxx	predictive	高
16	XXX.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
17	XXX.XX.XXX.X/XX	Xxxxx	predictive	高
18	XXX.XX.XXX.X/XX	Xxxxxxxx	predictive	高
19	XXX.XX.XX.X/XX	Xxxxx Xxx	predictive	高
20	XXX.XXX.XXX.X/XX	Xxxxxx Xxxxxx	predictive	高
21	XXX.XXX.XX.X/XX	Xxxxx	predictive	高
22	XXX.XX.XX.X/XX	Xxxxxxx Xxxxxx	predictive	高
23	XXX.XXX.XXX.X/XX	Xxxxx Xxxxxxx	predictive	高
24	XXX.XX.XXX.X/XX	Xxxxxx Xxx	predictive	高
25	XXX.XXX.XXX.X/XX	Xxxxxxx Xxxxxxx	predictive	高

TTP - Tactics, Techniques, Procedures (19)

Tactics, techniques, and procedures summarize the suspected MITRE ATT&CK techniques used. This data is unique as it uses our predictive model for actor profiling.

ID	Technique	脆弱性	アクセスベクター	タイプ	信頼度
1	T1006	CWE-22, CWE-23	Path Traversal	predictive	高
2	T1055	CWE-74	Improper Neutralization of Data within XPath Expressions	predictive	高
3	T1059.007	CWE-79	Cross Site Scripting	predictive	高
4	T1068	CWE-269, CWE-274, CWE-284	Execution with Unnecessary Privileges	predictive	高
5	TXXXX.XXX	CWE-XXX	Xxxx-xxxxx Xxxxxxxxxxx	predictive	高
6	TXXXX	CWE-XX, CWE-XX	Xxxxxxx Xxxxx Xx Xxxxxxxxxx Xxxxxxxxxx Xxxxxxxxx	predictive	高
7	TXXXX	CWE-XXX	Xxxxxxxxxx Xxxxxx	predictive	高
8	TXXXX	CWE-XX	Xxx Xxxxxxxxx	predictive	高
9	TXXXX	CWE-XXX	Xxx Xx Xxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
10	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxxxx	predictive	高
11	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
12	TXXXX.XXX	CWE-XXX	Xxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxx Xx Xx-xxxx Xxxxxx Xxxxxxxx	predictive	高
13	TXXXX.XXX	CWE-XXX	Xxxxxxxxxxxx	predictive	高
14	TXXXX.XXX	CWE-XXX	Xxxxxxxx Xxxxxxxxxxx Xxxxxxxxxx	predictive	高
15	TXXXX.XXX	CWE-XXX	Xxxxxxxx	predictive	高
16	TXXXX	CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX, CWE-XXX	Xxxxxxxxxx Xx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx	predictive	高
17	TXXXX.XXX	CWE-XXX	Xxx Xxxxxxxxxx Xxxxx	predictive	高
18	TXXXX.XXX	CWE-XXX	Xxxxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxxxxx Xxxx Xxxxxxxxx	predictive	高
19	TXXXX	CWE-XXX	Xxxxxxxxxxx Xxxxxx	predictive	高

IOA - Indicator of Attack (122)

These indicators of attack list the potential fragments used for technical activities like reconnaissance, exploitation, privilege escalation, and exfiltration. This data is unique as it uses our predictive model for actor profiling.

ID	クラス	Indicator	タイプ	信頼度
1	File	/admin/adminHome.php	predictive	高
2	File	/cart.php	predictive	中
3	File	/cgi-bin/gui.cgi	predictive	高
4	File	/description.php	predictive	高
5	File	/Employer/DeleteJob.php?JobId=1	predictive	高
6	File	/index.php	predictive	中
7	File	/login.php	predictive	中
8	File	/Product.php	predictive	中
9	File	/secret_coder.sql	predictive	高
10	File	/setup.cgi	predictive	中
11	File	AccountManagerService.java	predictive	高
12	File	admin/include/functions.php	predictive	高
13	File	admin/update_room.php	predictive	高
14	File	adminFormvalidation.php	predictive	高
15	File	androidmanifest.xml	predictive	高
16	File	xxx.x	predictive	低
17	File	xxxx/xxx/xxxxxx/xxx/xxxx.x	predictive	高
18	File	xxxx/xxx/xxx/xxx/xxxxxx.x	predictive	高
19	File	xxx_xxxx.x	predictive	中
20	File	xxx_xxxxxxxx.xx	predictive	高
21	File	xxxx.x	predictive	低
22	File	xxxxxxxxx_xxx.xx	predictive	高
23	File	xxx_xxx.xx	predictive	中
24	File	xxxxxxx/xxxxxx.xxx?x=xxxx_xxxxx	predictive	高
25	File	xxxxxxx.xxx	predictive	中
26	File	xxxxxxx/xxxx/xxxx_xxxxxx.x	predictive	高
27	File	xxxxxxx/xxx/xxx/xxxx_xxxxxx.x	predictive	高
28	File	xxxxxxx/xxx/xxx/xxxxxxxx.x	predictive	高
29	File	xxx_xx.x	predictive	中
30	File	xxxx_xxxxx.xxx	predictive	高
31	File	xxxxxxxxxxxxxxxxxx.xxxx	predictive	高
32	File	xx/xxxxx/xxxxxxxxxxx.x	predictive	高
33	File	xx/xxxxx/xxxx-xxx.x	predictive	高
34	File	xx/xxxx/xxxxxxx_xxxxxx.x	predictive	高
35	File	xx/xxx/xxx_xxxx.x	predictive	高
36	File	xx/xxx/xxx_xxxxx.x	predictive	高
37	File	xx/xxx/xxx_xxxx.x	predictive	高
38	File	xxx.x	predictive	低
39	File	xxx_xxx_xxxx.x	predictive	高
40	File	xxxxxxx/xxxxx/xxxx.x	predictive	高
41	File	xxxxx.xxx	predictive	中
42	File	xxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
43	File	xx\xxxxxx\xxx\xxxxxxx\xxxxxxxx\xxxxxxx\xxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
44	File	xxxxxx/xxx/xxxxxxx.x	predictive	高
45	File	xxxxxx.x	predictive	中
46	File	xxxx_xx_xxxxxxx.x	predictive	高
47	File	xxxxx.xxx	predictive	中
48	File	xxxxx.xxx	predictive	中
49	File	xxx_xxxxxxxxxxxxx.x	predictive	高
50	File	xxxxxxxxxxxxxxxx.xxxxx.xxx	predictive	高
51	File	xx/xxxx_xxxxx.x	predictive	高
52	File	xxx/xxxx/xxx.x	predictive	高
53	File	xxx/xxxx/xxxxxx.x	predictive	高
54	File	xxx/xxxx/xxx_xxxxxx.x	predictive	高
55	File	xxx/xxxx/xxxxx.x	predictive	高
56	File	xxx/xxxxxxxxx/xx_xxxxxxxxx_xxxxxx.x	predictive	高
57	File	xxx/xxxxxxxxx/xx_xxxxxx_xxx.x	predictive	高
58	File	xxx/xxxxxxxxxxx/xxxx.x	predictive	高
59	File	xxx/xxxxxx/xxxxxxxxxxxxx.x	predictive	高
60	File	xxxxxxxxx.x	predictive	中
61	File	xxxxxxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
62	File	xxxxxxxxxxxx.xxx	predictive	高
63	File	xxxxx_xxx_xxx.x	predictive	高
64	File	xxxxx.x	predictive	低
65	File	xxxxxxxxxxxxxxxxxxx.xxxx	predictive	高
66	File	xxxxxxxxxxxxxxxxx.xxx	predictive	高
67	File	xx.x	predictive	低
68	File	xxxxx_xxxxxxxxxxxxxxxxx.x	predictive	高
69	File	xxxxxxxxxx.xxx	predictive	高
70	File	xxx_xxx.xx	predictive	中
71	File	xxxxxxxxx.xxx	predictive	高
72	File	xxxxxxxxxxxxxxxxxxxxxxxxxxxx.xxx	predictive	高
73	File	xx_xxxxxxxxxxx.x	predictive	高
74	File	xx_xxxxxxxxxxxxxxx.x	predictive	高
75	File	xxxxxxx.x	predictive	中
76	File	xxx.xxxxxx	predictive	中
77	File	xxx.x	predictive	低
78	File	xxx_xxxxxx.x	predictive	中
79	File	xxxxxxxxxxxxxxxxxx.xxxx	predictive	高
80	File	xxxxxxx/xx/xxxx/xxx/xxxxxx/xxxxxxxxx.xx	predictive	高
81	File	xxxxxx.xxx	predictive	中
82	File	xxx/xxxxxxxxxxxx:	predictive	高
83	Library	/xxxxx/xxxx/xxxx/xxxx/xxx/xxx/xxxxxxxxx.x	predictive	高
84	Library	xxxx/xxx/xxxxxxx/xxx/xxxx.x	predictive	高
85	Library	xxxxxxx/xxxxx/xxx.x	predictive	高
86	Library	xxxxxxx/xxxxx/xxxx.x	predictive	高
87	Library	xxxxxxx/xxx/xxxx_xxx.x	predictive	高
88	Library	xxxx_xx.xx	predictive	中
89	Library	xxx/xxx_xxxx.x	predictive	高
90	Library	xxx/xxxx_xxxxx.x	predictive	高
91	Library	xxx/xxxxxxxx.x	predictive	高
92	Library	xxx/xxxx_xxxxx.x	predictive	高
93	Library	xxx/xxx	predictive	低
94	Library	xxx/xxxxxxxx.x	predictive	高
95	Library	xxxx.xx	predictive	低
96	Argument	xxxxxxxx	predictive	中
97	Argument	xxxx	predictive	低
98	Argument	xxxxx	predictive	低
99	Argument	xxxxxx/xxxx	predictive	中
100	Argument	xxxxxxxxxxx/xxxxxxxxxxxxxx	predictive	高
101	Argument	xxxxxx_xxxx	predictive	中
102	Argument	x_xxxx	predictive	低
103	Argument	xx	predictive	低
104	Argument	xx	predictive	低
105	Argument	xxxx	predictive	低
106	Argument	xxxxxxx	predictive	低
107	Argument	xxxx_xxxx	predictive	中
108	Argument	xxxxx[]	predictive	低
109	Argument	xxx_xxxxxx	predictive	中
110	Argument	xx_xxxxx_xxxxxxx	predictive	高
111	Argument	xxxx_xxxxxx_xxxxx	predictive	高
112	Argument	xxxxxxx	predictive	低
113	Argument	xxxxxxxx/xxxxxx	predictive	高
114	Argument	xxxxxx	predictive	低
115	Argument	xxxxxxx xxxx/xxxxxxx xxxx	predictive	高
116	Argument	xxx/xxxxxx	predictive	中
117	Argument	xxxxx	predictive	低
118	Argument	xxxxx	predictive	低
119	Argument	xxxxxxxx	predictive	中
120	Argument	xxxxxxxx/xxxxxxxx	predictive	高
121	Argument	xxxxxxxx/xxxxxxxx/xxxxx_xxxxxxxx/xxxxx_xxxxxxxx	predictive	高
122	Argument	xxxxx	predictive	低

◂ 前概要次 ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!