IROSG / CVES

Vulnerability intelligence.

Understand the risk. Defend with context.

Researched vulnerability profiles: landmark cases and recent additions to CISA’s Known Exploited Vulnerabilities catalog.

Explore the collection 136

Editorial priority, then CISA KEV and newest records

Security illustration for CVE-2024-21887 and Ivanti

Vulnerability intelligenceCVE-2024-21887

Cybersecurity2024-01-12

CVE-2024-21887: Ivanti Connect Secure and Policy Secure

A sourced defensive profile of CVE-2024-21887 affecting Ivanti Connect Secure and Policy Secure. CVSS 9.1; CISA KEV addition: 2024-01-10.

CVSS 9.1Read story

Security illustration for CVE-2023-4966 and Citrix

Vulnerability intelligenceCVE-2023-4966

Cybersecurity2023-10-10

CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway

A sourced defensive profile of CVE-2023-4966 affecting Citrix NetScaler ADC and NetScaler Gateway. CVSS 9.4; CISA KEV addition: 2023-10-18.

CVSS 9.4Read story

Security illustration for CVE-2023-20198 and Cisco

Vulnerability intelligenceCVE-2023-20198

Cybersecurity2023-10-16

CVE-2023-20198: Cisco IOS XE Web UI

A sourced defensive profile of CVE-2023-20198 affecting Cisco IOS XE Web UI. CVSS 10; CISA KEV addition: 2023-10-16.

CVSS 10Read story

Security illustration for CVE-2023-34362 and Progress

Vulnerability intelligenceCVE-2023-34362

Cybersecurity2023-06-02

CVE-2023-34362: Progress MOVEit Transfer

A sourced defensive profile of CVE-2023-34362 affecting Progress MOVEit Transfer. CVSS 9.8; CISA KEV addition: 2023-06-02.

CVSS 9.8Read story

Security illustration for CVE-2022-30190 and Microsoft

Vulnerability intelligenceCVE-2022-30190

Cybersecurity2022-06-01

CVE-2022-30190: Microsoft Windows

A sourced defensive profile of CVE-2022-30190 affecting Microsoft Windows. CVSS 7.8; CISA KEV addition: 2022-06-14.

CVSS 7.8Read story

Security illustration for CVE-2014-0160 and OpenSSL

Vulnerability intelligenceCVE-2014-0160

Cybersecurity2014-04-07

CVE-2014-0160: OpenSSL OpenSSL

A sourced defensive profile of CVE-2014-0160 affecting OpenSSL OpenSSL. CVSS 7.5; CISA KEV addition: 2022-05-04.

CVSS 7.5Read story

Security illustration for CVE-2022-22965 and VMware

Vulnerability intelligenceCVE-2022-22965

Cybersecurity2022-04-01

CVE-2022-22965: VMware Spring Framework

A sourced defensive profile of CVE-2022-22965 affecting VMware Spring Framework. CVSS 9.8; CISA KEV addition: 2022-04-04.

CVSS 9.8Read story

Security illustration for CVE-2017-0144 and Microsoft

Vulnerability intelligenceCVE-2017-0144

Cybersecurity2017-03-17

CVE-2017-0144: Microsoft SMBv1

A sourced defensive profile of CVE-2017-0144 affecting Microsoft SMBv1. CVSS 8.8; CISA KEV addition: 2022-02-10.

CVSS 8.8Read story

Security illustration for CVE-2014-6271 and GNU

Vulnerability intelligenceCVE-2014-6271

Cybersecurity2014-09-24

CVE-2014-6271: GNU Bourne-Again Shell (Bash)

A sourced defensive profile of CVE-2014-6271 affecting GNU Bourne-Again Shell (Bash). CVSS 9.8; CISA KEV addition: 2022-01-28.

CVSS 9.8Read story

Security illustration for CVE-2021-44228 and Apache

Vulnerability intelligenceCVE-2021-44228

Cybersecurity2021-12-10

CVE-2021-44228: Apache Log4j2

A sourced defensive profile of CVE-2021-44228 affecting Apache Log4j2. CVSS 10; CISA KEV addition: 2021-12-10.

CVSS 10Read story

Security illustration for CVE-2021-34473 and Microsoft

Vulnerability intelligenceCVE-2021-34473

Cybersecurity2021-07-14

CVE-2021-34473: Microsoft Exchange Server

A sourced defensive profile of CVE-2021-34473 affecting Microsoft Exchange Server. CVSS 9.1; CISA KEV addition: 2021-11-03.

CVSS 9.1Read story

Security illustration for CVE-2021-34527 and Microsoft

Vulnerability intelligenceCVE-2021-34527

Cybersecurity2021-07-02

CVE-2021-34527: Microsoft Windows

A sourced defensive profile of CVE-2021-34527 affecting Microsoft Windows. CVSS 8.8; CISA KEV addition: 2021-11-03.

CVSS 8.8Read story

One click.
A new perspective.

Learn.
Build. Grow.

Vulnerability intelligence.

Understand the risk. Defend with context.

Explore the collection 136

CVE-2024-21887: Ivanti Connect Secure and Policy Secure

CVE-2023-4966: Citrix NetScaler ADC and NetScaler Gateway

CVE-2023-20198: Cisco IOS XE Web UI

CVE-2023-34362: Progress MOVEit Transfer

CVE-2022-30190: Microsoft Windows

CVE-2014-0160: OpenSSL OpenSSL

CVE-2022-22965: VMware Spring Framework

CVE-2017-0144: Microsoft SMBv1

CVE-2014-6271: GNU Bourne-Again Shell (Bash)

CVE-2021-44228: Apache Log4j2

CVE-2021-34473: Microsoft Exchange Server

CVE-2021-34527: Microsoft Windows