위협 인텔리전스 (1,991건)
실제 악용·공격 신호가 있는 취약점 — CISA KEV · Qualys RTI · 공개 PoC/익스플로잇 · 악용확률(EPSS) 높은 건 통합. Qualys 마지막 동기화 2시간 전.
CISA KEV
1,685
실제 공격 중
985
랜섬웨어
352
익스플로잇 공개
1,311
악용확률 50%↑
877
제로데이
13
| 긴급도 | CVE | 심각도 | 악용확률 | 신호 | 제품 · 악성코드 |
|---|---|---|---|---|---|
| 100 | CVE-2023-46805 | — T7.6 | 100.0% | KEV랜섬실공격익스공개기능적EPSS 100%원격 | Ivanti Connect Secure and Policy Secure 🦠 Unattributed (Ransomware); DragonForce (Ransomware) |
| 100 | CVE-2023-29357 | — T9.1 | 100.0% | KEV랜섬실공격익스공개기능적EPSS 100% | Microsoft SharePoint Server 🦠 CVE-2023-29357 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2023-22527 | — T9.1 | 100.0% | KEV랜섬실공격익스공개기능적EPSS 100%원격 | Atlassian Confluence Data Center and Server 🦠 Unattributed (Ransomware); LockBit (Ransomware) |
| 100 | CVE-2022-40684 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | Fortinet Multiple Products 🦠 Akira (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-22204 | — T7.2 | 100.0% | KEV실공격PoC기능적EPSS 100% | Perl Exiftool 🦠 Generic (Malware); Generic (Backdoor); Multiverze (Trojan); CVE-2021-22204 (Exploit); CVE-2021-22205 (Exploit… |
| 100 | CVE-2024-1709 | — T9.3 | 100.0% | KEV랜섬실공격익스공개기능적EPSS 100%원격 | ConnectWise ScreenConnect 🦠 Bl00dy Ransomware Gang (Ransomware); Black Basta (Ransomware); Cicada3301 (Ransomware); LockBit (Ransomware);… |
| 100 | CVE-2025-59287 | 9.8 T9.1 | 100.0% | KEV실공격익스공개기능적EPSS 100% | Microsoft Windows 🦠 Unattributed (Ransomware) |
| 100 | CVE-2025-0282 | 9.0 | 100.0% | KEV랜섬PoCEPSS 100% | Ivanti Connect Secure, Policy Secure, and ZTA Gateways |
| 100 | CVE-2023-4863 | — T9.1 | 100.0% | KEV실공격익스공개기능적EPSS 100% | Google Chromium WebP 🦠 CVE-2023-4863 (Exploit); Hqwar (Dropper); Coper (Trojan) |
| 100 | CVE-2023-42793 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | JetBrains TeamCity 🦠 BianLian (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2024-24919 | 8.6 T8.0 | 100.0% | KEV랜섬실공격익스공개기능적EPSS 100%원격 | Check Point Quantum Security Gateways 🦠 NailaoLocker (Ransomware); Unattributed (Ransomware); Black Basta (Ransomware); Akira (Ransomware); Royal Ran… |
| 100 | CVE-2021-45046 | — T9.3 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | Apache Log4j2 🦠 Malclass (Trojan); Generic (Trojan); AdWind (Trojan); Disco (Infostealer); NightSky (Ransomware); TellYouTheP… |
| 100 | CVE-2024-4879 | 9.8 | 100.0% | KEVPoCEPSS 100% | ServiceNow Utah, Vancouver, and Washington DC Now Platform |
| 100 | CVE-2012-0158 | — T8.2 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100% | Microsoft MSCOMCTL.OCX 🦠 TROJ_MDROP.GDL (Trojan); TROJ_ARTIEF.FT (Trojan); TROJ_ARTIEF.VDY (Trojan); TROJ_ARTIEF.PI (Trojan); TROJ_ART… |
| 100 | CVE-2014-8361 | — T9.1 | 100.0% | KEV실공격PoC기능적EPSS 100%원격 | Realtek SDK 🦠 Mirai (Trojan); Multiverze (Trojan); ZHTrap (Trojan); CVE-2017-17215 (Exploit); CVE-2014-8361 (Exploit); Mira… |
| 100 | CVE-2022-41082 | — T8.2 | 100.0% | KEV랜섬실공격익스공개기능적EPSS 100% | Microsoft Exchange Server 🦠 Play (Ransomware); Cuba (Ransomware); Lockbit (Ransomware); Hive (Ransomware); Unattributed (Ransomware); Hel… |
| 100 | CVE-2021-3156 | — T9.3 | 100.0% | KEV실공격PoC기능적EPSS 100% | Sudo Sudo 🦠 Babuk (Ransomware); CryptoMix (Ransomware); Epsilon Red (Ransomware); Conti (Ransomware); DarkSide (Ransomwar… |
| 100 | CVE-2022-47986 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | IBM Aspera Faspex 🦠 CVE-2022-47986 (Exploit); IceFire (Ransomware); Buhti (Ransomware); Unattributed (Ransomware); buhtiRansom (R… |
| 100 | CVE-2020-0688 | — T8.2 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100% | Microsoft Exchange Server 🦠 Bulz (Trojan); Bulz (Exploit); CVE-2020-0688 (Exploit); Thanos (Ransomware); Conti (Ransomware); Hakbit (Rans… |
| 100 | CVE-2021-42013 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | Apache HTTP Server 🦠 Unattributed (Ransomware) |
| 100 | CVE-2019-2725 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | Oracle WebLogic Server 🦠 Generic (Trojan); Cerber (Ransomware); Conti (Ransomware); GandCrab (Ransomware); Muhstik (Ransomware); QNAPC… |
| 100 | CVE-2025-5777 | 7.5 T7.0 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | Citrix NetScaler ADC and Gateway 🦠 Unattributed (Ransomware); Anubis (Ransomware); Ransomware Inc (Ransomware); DragonForce (Ransomware) |
| 100 | CVE-2022-1388 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | F5 BIG-IP 🦠 CVE-2022-1388 (Exploit); Unattributed (Ransomware); Black Basta (Ransomware) |
| 100 | CVE-2022-41040 | — T8.2 | 100.0% | KEV랜섬실공격익스공개기능적EPSS 100% | Microsoft Exchange Server 🦠 Play (Ransomware); Cuba (Ransomware); Lockbit (Ransomware); Hive (Ransomware); Unattributed (Ransomware); Hel… |
| 100 | CVE-2018-10562 | — T9.6 | 100.0% | KEV랜섬실공격제로데이PoC기능적EPSS 100%원격 | Dasan Gigabit Passive Optical Network (GPON) Routers 🦠 PNScan (Trojan); Botenago (Trojan); CVE-2018-10561 (Exploit); CVE-2018-10562 (Exploit); Muhstik (Ransomware);… |
| 100 | CVE-2018-15961 | — T9.1 | 100.0% | KEV실공격PoC기능적EPSS 100%원격 | Adobe ColdFusion |
| 100 | CVE-2025-31161 | 9.8 T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | CrushFTP CrushFTP 🦠 Unattributed (Ransomware) |
| 100 | CVE-2017-11882 | — T8.4 | 100.0% | KEV랜섬실공격PoC광범위EPSS 100% | Microsoft Office 🦠 Heuristic (Downloader); Heuristic (Trojan); Heuristic (Hacktool); Heuristic (Dropper); Boxter (Trojan); Dapat… |
| 100 | CVE-2022-30525 | — T9.1 | 100.0% | KEV실공격PoC기능적EPSS 100%원격 | Zyxel Multiple Firewalls 🦠 Black Basta (Ransomware) |
| 100 | CVE-2021-3129 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | Laravel Ignition 🦠 Unattributed (Ransomware) |
| 100 | CVE-2020-10189 | — T9.1 | 100.0% | KEV실공격PoC기능적EPSS 100%원격 | Zoho ManageEngine |
| 100 | CVE-2014-7169 | — T8.8 | 100.0% | KEV실공격제로데이PoC광범위EPSS 100%원격 | GNU Bourne-Again Shell (Bash) 🦠 SHELLSHOCK (Backdoor); PERL_SHELBOT.SMA (Backdoor); PERL_SHELLBOT.SM (Backdoor); ELF_BASHLITE.SMB (Backdoor);… |
| 100 | CVE-2024-27198 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | JetBrains TeamCity 🦠 BianLian (Ransomware); Jasmin (Ransomware); Unattributed (Ransomware); LockBit (Ransomware) |
| 100 | CVE-2022-22963 | — T9.1 | 100.0% | KEV실공격PoC기능적EPSS 100%원격 | VMware Tanzu Spring Cloud 🦠 CVE-2022-22963 (Exploit); SpringShell (Exploit) |
| 100 | CVE-2023-34362 | 9.8 T9.1 | 100.0% | KEV랜섬실공격익스공개기능적EPSS 100%원격 | Progress MOVEit Transfer 🦠 Clop (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-39226 | — T9.1 | 100.0% | KEV실공격익스공개기능적EPSS 100% | Grafana Labs Grafana 🦠 CVE-2016-5195 (Exploit); CVE-2020-9856 (Exploit); CVE-2020-9850 (Exploit); CVE-2020-9802 (Exploit) |
| 100 | CVE-2021-38647 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | Microsoft Open Management Infrastructure (OMI) 🦠 CVE-2021-38647 (Exploit); Unattributed (Ransomware) |
| 100 | CVE-2021-1497 | — T9.1 | 100.0% | KEV실공격익스공개기능적EPSS 100%원격 | Cisco HyperFlex HX |
| 100 | CVE-2019-3396 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | Atlassian Confluence Server and Data Server 🦠 CVE-2019-3396 (Exploit); GandCrab (Ransomware); Lockergoga (Ransomware); Megacortex (Ransomware); REvil (Rans… |
| 100 | CVE-2018-0296 | — T7.0 | 100.0% | KEV실공격PoC기능적EPSS 100% | Cisco Adaptive Security Appliance (ASA) |
| 100 | CVE-2026-31431 | 7.8 T9.1 | 100.0% | KEV실공격익스공개기능적EPSS 100% | Linux Kernel 🦠 CVE-2026-31431 (Exploit); Generic (Trojan); DirtyFrag (Exploit); CVE-2026-43284 (Exploit); Multiverze (Trojan… |
| 100 | CVE-2015-1427 | — T9.1 | 100.0% | KEV실공격PoC기능적EPSS 100%원격 | Elastic Elasticsearch 🦠 AdWind (Trojan); CVE-2014-0114 (Exploit); Satan (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2020-7961 | — T9.1 | 100.0% | KEV실공격PoC기능적EPSS 100%원격 | Liferay Liferay Portal 🦠 Black (Trojan); LINUXMiner (Trojan); Miner (Trojan); CVE-2020-7961 (Exploit) |
| 100 | CVE-2021-22986 | — T9.2 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | F5 BIG-IP and BIG-IQ Centralized Management 🦠 CVE-2021-22986 (Exploit); LockBit (Ransomware); Unattributed (Ransomware) |
| 100 | CVE-2021-27065 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | Microsoft Exchange Server 🦠 AtomSilo (Ransomware); Babuk (Ransomware); Conti (Ransomware); LockFile (Ransomware); Rook (Ransomware); Hive… |
| 100 | CVE-2019-1653 | — T7.0 | 100.0% | KEV실공격PoC기능적EPSS 100%원격 | Cisco Small Business RV320 and RV325 Routers |
| 100 | CVE-2021-36260 | — T9.1 | 100.0% | KEV실공격PoC기능적EPSS 100%원격 | Hikvision Security cameras web server 🦠 Multiverze (Hacktool); CVE-2021-36260 (Exploit); ZkarletFlash (Trojan); Multiverze (Trojan); Egairtigado (Tro… |
| 100 | CVE-2021-21972 | — T9.1 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100%원격 | VMware vCenter Server 🦠 CVE-2021-21974 (Exploit); Memento (Ransomware); ESXiArgs (Ransomware); Akira (Ransomware); Conti (Ransomware)… |
| 100 | CVE-2017-7269 | — T9.4 | 100.0% | KEV실공격PoC광범위EPSS 100%원격 | Microsoft Internet Information Services (IIS) 🦠 Graftor (Trojan); Heuristic (Trojan); CVE-2017-7269 (Exploit) |
| 100 | CVE-2020-0796 | — T9.3 | 100.0% | KEV랜섬실공격PoC기능적EPSS 100% | Microsoft SMBv3 🦠 Bulz (Trojan); Mediyes (Trojan); ATPMiniDump (Hacktool); Boxter (Trojan); Meterpreter (Backdoor); CVE-2020-07… |