위협 인텔리전스 (1,991건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 2시간 전.
CISA KEV
1,685
실제 공격 중
985
랜섬웨어
352
익스플로잇 공개
1,312
악용확률 50%↑
877
제로데이
13
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2024-3400 | 9.8 T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Palo Alto Networks PAN-OS 🦠 CVE-2024-3400 (Exploit); BianLian (Ransomware); BlackCat (Ransomware); NoEscape (Ransomware); RansomHouse (Ra… |
| 100 | CVE-2024-23897 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Jenkins Jenkins Command Line Interface (CLI) 🦠 CVE-2024-23897 (Exploit); Multiverze (Trojan); ZkarletFlash (Trojan); Unattributed (Ransomware); RansomEXX (R… |
| 100 | CVE-2024-21893 | 8.2 T8.2 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Ivanti Connect Secure, Policy Secure, and Neurons 🦠 CVE-2024-21893 (Exploit); Black Basta (Ransomware); DragonForce (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2024-21887 | 9.1 T8.4 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Ivanti Connect Secure and Policy Secure 🦠 CVE-2024-21887 (Exploit); Unattributed (Ransomware); Black Basta (Ransomware); DragonForce (Ransomware) |
| 100 | CVE-2023-4966 | 9.4 T7.0 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Citrix NetScaler ADC and NetScaler Gateway 🦠 Black Basta (Ransomware); BlackCat (Ransomware); BlackSuit (Ransomware); Blackout (Ransomware); Clop (Ransomw… |
| 100 | CVE-2023-44487 | 5.3 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | IETF HTTP/2 🦠 CVE-2023-38545 (Exploit); CVE-2023-44487 (Exploit) |
| 100 | CVE-2023-35082 | 10.0 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core 🦠 Unattributed (Ransomware) |
| 100 | CVE-2023-35078 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Endpoint Manager Mobile (EPMM) 🦠 CVE-2023-35078 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2023-32315 | — T7.0 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Ignite Realtime Openfire 🦠 CVE-2023-32315 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2023-27350 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | PaperCut MF/NG 🦠 Clop (Ransomware); Lockbit (Ransomware); Bl00dy Ransomware Gang (Ransomware); Buhti (Ransomware); BianLian (R… |
| 100 | CVE-2023-22518 | 9.1 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence Data Center and Server 🦠 Cerber (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2023-0669 | — T6.7 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortra GoAnywhere MFT 🦠 clop (Ransomware); BlackCat (Ransomware); Chubby Scorpius (Ransomware); LockBit (Ransomware); Unattributed (R… |
| 100 | CVE-2022-29464 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | WSO2 Multiple Products 🦠 WebShell (Trojan); CVE-2022-29464 (Exploit); Multiverze (Trojan); Unattributed (Ransomware) |
| 100 | CVE-2022-26134 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence Server/Data Center 🦠 CVE-2022-26134 (Exploit); Cerber (Ransomware); AvosLocker (Ransomware); Gandcrab (Ransomware); Unattributed (… |
| 100 | CVE-2021-44228 | 10.0 T9.7 | 100.0% | KEV랜섬실공격제로데이PoC기능적 EPSS 100% | Apache Log4j2 🦠 Malclass (Trojan); Generic (Trojan); AdWind (Trojan); Disco (Infostealer); CVE-2021-44228 (Exploit); NightSky… |
| 100 | CVE-2021-40438 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Apache Apache 🦠 Ryuk (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-35464 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | ForgeRock Access Management (AM) 🦠 Unattributed (Ransomware) |
| 100 | CVE-2021-34473 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2021-26084 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Atlassian Confluence Server and Data Center 🦠 CVE-2021-26084 (Exploit); Atom Silo (Ransomware); Cerber (Ransomware); LockFile (Ransomware); Rook (Ransomwar… |
| 100 | CVE-2021-22005 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | VMware vCenter Server 🦠 Conti (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-21985 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | VMware vCenter Server 🦠 Conti (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-1498 | — T9.1 | 100.0% | KEV실공격익스공개기능적 EPSS 100%원격 | Cisco HyperFlex HX |
| 100 | CVE-2020-5902 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | F5 BIG-IP 🦠 CVE-2020-5902 (Exploit); Pay2Key (Ransomware); REvil (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2019-19781 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Citrix Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance 🦠 Scaler (Trojan); FakeLogin (Phishing); Doppelpaymer (Ransomware); Maze (Ransomware); CryptoMix (Ransomware); … |
| 100 | CVE-2019-11510 | — T9.3 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Ivanti Pulse Connect Secure 🦠 Black Kingdom (Ransomware); Mailto (Ransomware); Maze (Ransomware); Sekhmet (Ransomware); Sodinokibi (Ransomw… |
| 100 | CVE-2018-13379 | 9.1 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Fortinet FortiOS 🦠 CVE-2018-13379 (Exploit); Conti (Ransomware); Pay2Key (Ransomware); REvil (Ransomware); Cring (Ransomware); B… |
| 100 | CVE-2017-9841 | — T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | PHPUnit PHPUnit |
| 100 | CVE-2017-5638 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Apache Struts 🦠 Perseus (Trojan); ApacheStruts (Hacktool); CVE-2017-5638 (Exploit); Multiverze (Trojan); Cerber (Ransomware);… |
| 100 | CVE-2014-6271 | — T8.8 | 100.0% | KEV실공격제로데이PoC광범위 EPSS 100%원격 | GNU Bourne-Again Shell (Bash) 🦠 SHELLSHOCK (Backdoor); PERL_SHELBOT.SMA (Backdoor); PERL_SHELLBOT.SM (Backdoor); ELF_BASHLITE.SMB (Backdoor);… |
| 100 | CVE-2025-53770 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | Microsoft SharePoint 🦠 WebShell (Backdoor); CVE-2025-53770 (Exploit); Qilin (Ransomware); 4L4MD4r (Ransomware); Unattributed (Ransom… |
| 100 | CVE-2012-1823 | — T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | PHP PHP 🦠 Flooder (Hacktool); Flood (Trojan); Kilpache (Exploit) |
| 100 | CVE-2022-22954 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100% | VMware Workspace ONE Access and Identity Manager 🦠 WebShell (Trojan); Spring4shell (Hacktool); CVE-2022-22954 (Exploit); RemoteShell (Backdoor); Clop (Ransomwar… |
| 100 | CVE-2020-14882 | 9.8 T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Oracle WebLogic Server 🦠 CVE-2020-14882 (Exploit) |
| 100 | CVE-2025-3248 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Langflow Langflow 🦠 JADEPUFFER (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-26855 | 9.1 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2019-16920 | — T9.6 | 100.0% | KEV실공격제로데이PoC기능적 EPSS 100%원격 | D-Link Multiple Routers 🦠 Cyborg (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2025-49704 | 8.8 T8.2 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100% | Microsoft SharePoint 🦠 Unattributed (Ransomware); Warlock (Ransomware); 4L4MD4r (Ransomware); X2ANYLOCK (Ransomware); LockBit (Ranso… |
| 100 | CVE-2024-34102 | 9.8 T9.1 | 100.0% | KEV실공격익스공개기능적 EPSS 100% | Adobe Commerce and Magento Open Source 🦠 CVE-2024-4367 (Exploit) |
| 100 | CVE-2020-8515 | — T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | DrayTek Multiple Vigor Routers |
| 100 | CVE-2017-10271 | 7.5 T9.2 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Oracle WebLogic Server 🦠 Mirai (Trojan); RemoteShell (Backdoor); WebShell (Trojan); Lucifer (Ransomware); GandCrab (Ransomware); Lucky… |
| 100 | CVE-2021-41773 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Apache HTTP Server 🦠 CVE-2021-41773 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2020-3452 | — T7.0 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) |
| 100 | CVE-2024-27199 | 7.3 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | JetBrains TeamCity 🦠 BianLian (Ransomware); Jasmin (Ransomware); Unattributed (Ransomware); LockBit (Ransomware) |
| 100 | CVE-2018-7600 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Drupal Drupal Core 🦠 CVE-2018-7600 (Exploit); Lucifer (Ransomware); Petya (Ransomware); Muhstik (Ransomware); QNAPCrypt (Ransomwar… |
| 100 | CVE-2018-11776 | — T7.5 | 100.0% | KEV실공격PoC기능적 EPSS 100%원격 | Apache Struts 🦠 CVE-2018-11776 (Exploit); Lucky (Ransomware); Satan (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2025-22457 | 9.0 T9.6 | 100.0% | KEV랜섬실공격제로데이익스공개기능적 EPSS 100%원격 | Ivanti Connect Secure, Policy Secure, and ZTA Gateways 🦠 Unattributed (Ransomware) |
| 100 | CVE-2021-34523 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2023-29300 | 9.8 T9.1 | 100.0% | KEV랜섬실공격익스공개기능적 EPSS 100%원격 | Adobe ColdFusion 🦠 Unattributed (Ransomware) |
| 100 | CVE-2017-12617 | — T9.1 | 100.0% | KEV실공격PoC기능적 EPSS 100% | Apache Tomcat 🦠 CVE-2017-12617 (Exploit) |
| 100 | CVE-2024-4577 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적 EPSS 100%원격 | PHP Group PHP 🦠 CVE-2024-4577 (Exploit); Heuristic (Malware); TellYouThePass (Ransomware); Unattributed (Ransomware) |