PULSEUnderground Intel

LIVE34signals / 24h

FEED

ransomchaos reclama a mickeybody.com · US · Retail & E-Commerceransomaurora reclama a ARX Group SA · CH · Otherransomwhitearmor reclama a whitearmor.cc · Technologyransomlockbit5 reclama a dorsiacademy.it · IT · Educationransomlockbit5 reclama a mlh.com.lb · LB · Professional Servicesransomlockbit5 reclama a lidoway.com · LI · Not Foundransomlockbit5 reclama a zelsior.es · ES · Not Foundransomemperador reclama a JS Constructor, INC · US · Manufacturingransomwhitearmor reclama a Whirlpool · US · Manufacturingransomwhitearmor reclama a JB Hunt · US · Transportationransomqilin reclama a Labaid Cancer Hospital And Super Speciality Center · BD · Healthcareransomqilin reclama a Kale Balata A · TR · Agriculture and Food Productionransomqilin reclama a MaxiSeguridad · AR · Professional Servicesransomqilin reclama a Aryza · AR · Technologyransomchaos reclama a mickeybody.com · US · Retail & E-Commerceransomaurora reclama a ARX Group SA · CH · Otherransomwhitearmor reclama a whitearmor.cc · Technologyransomlockbit5 reclama a dorsiacademy.it · IT · Educationransomlockbit5 reclama a mlh.com.lb · LB · Professional Servicesransomlockbit5 reclama a lidoway.com · LI · Not Foundransomlockbit5 reclama a zelsior.es · ES · Not Foundransomemperador reclama a JS Constructor, INC · US · Manufacturingransomwhitearmor reclama a Whirlpool · US · Manufacturingransomwhitearmor reclama a JB Hunt · US · Transportationransomqilin reclama a Labaid Cancer Hospital And Super Speciality Center · BD · Healthcareransomqilin reclama a Kale Balata A · TR · Agriculture and Food Productionransomqilin reclama a MaxiSeguridad · AR · Professional Servicesransomqilin reclama a Aryza · AR · Technology

CVE Watch402,410 in full archive

Vulnerabilities exploitable today

402,410in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,668

Distribution · last window

Critical
3,545
High
15,903
Medium
14,814
Low
1,453

Filters

Filters

Window

Severity

Flags

Vulnerabilities9,801–9,840 · 402,410

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2015-3302—

——29——CVE-2005-2371—

——29——CVE-2016-0134—

——29——CVE-2010-3864—

——29——CVE-2005-0211—

——29——CVE-2013-0662—

——29——CVE-2019-19719—

——29——CVE-2011-1979—

——29——CVE-2011-1972—

——29——CVE-2002-1831—

——29——CVE-2016-3317—

——29——CVE-2002-0078—

——29——CVE-2023-48783—

——29——CVE-2019-15639—

——29——CVE-2017-8510—

——29——CVE-2012-2550—

——29——CVE-2017-5806—

——29——CVE-2010-3325—

——29——CVE-2006-6296—

——29——CVE-2018-19246—

——29——CVE-2014-6308—

——29——CVE-2001-0660—

——29——CVE-2016-3318—

——29——CVE-2002-0386—

——29——CVE-2006-7066—

——29——CVE-2008-3648—

——29——CVE-2017-1000385—

——29——CVE-2025-34067—

——29——CVE-2008-3843—

——29——CVE-2020-137777.4 HIG

——29GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.10d CVE-2019-0585—

——29——CVE-2016-7234—

——29——CVE-2015-7919—

——29——CVE-2007-0236—

——29——CVE-2011-1669—

——29——CVE-2006-2081—

——29——CVE-2019-120867.5 HIG

——29A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.15d CVE-2016-0482—

——29——CVE-2008-0590—

——29——CVE-2012-0004—