article thumbnail

Behind the Scenes: How We Picked 2021’s Top Vulnerabilities – and What We Left Out

Tenable

Has had sustained and widespread exploitation. Pulse Connect Secure authentication bypass. Originally disclosed by Gilles Lionel, PetitPotam can force domain controllers to authenticate to an attacker-controlled destination. Offers high value in attack chains. Affects ubiquitous products or protocols. CVE-2021-34527.

Windows 143