PULSEUnderground Intel

LIVE34signals / 24h

FEED

ransomchaos reclama a mickeybody.com · US · Retail & E-Commerceransomaurora reclama a ARX Group SA · CH · Otherransomwhitearmor reclama a whitearmor.cc · Technologyransomlockbit5 reclama a dorsiacademy.it · IT · Educationransomlockbit5 reclama a mlh.com.lb · LB · Professional Servicesransomlockbit5 reclama a lidoway.com · LI · Not Foundransomlockbit5 reclama a zelsior.es · ES · Not Foundransomemperador reclama a JS Constructor, INC · US · Manufacturingransomwhitearmor reclama a Whirlpool · US · Manufacturingransomwhitearmor reclama a JB Hunt · US · Transportationransomqilin reclama a Labaid Cancer Hospital And Super Speciality Center · BD · Healthcareransomqilin reclama a Kale Balata A · TR · Agriculture and Food Productionransomqilin reclama a MaxiSeguridad · AR · Professional Servicesransomqilin reclama a Aryza · AR · Technologyransomchaos reclama a mickeybody.com · US · Retail & E-Commerceransomaurora reclama a ARX Group SA · CH · Otherransomwhitearmor reclama a whitearmor.cc · Technologyransomlockbit5 reclama a dorsiacademy.it · IT · Educationransomlockbit5 reclama a mlh.com.lb · LB · Professional Servicesransomlockbit5 reclama a lidoway.com · LI · Not Foundransomlockbit5 reclama a zelsior.es · ES · Not Foundransomemperador reclama a JS Constructor, INC · US · Manufacturingransomwhitearmor reclama a Whirlpool · US · Manufacturingransomwhitearmor reclama a JB Hunt · US · Transportationransomqilin reclama a Labaid Cancer Hospital And Super Speciality Center · BD · Healthcareransomqilin reclama a Kale Balata A · TR · Agriculture and Food Productionransomqilin reclama a MaxiSeguridad · AR · Professional Servicesransomqilin reclama a Aryza · AR · Technology

CVE Watch402,410 in full archive

Vulnerabilities exploitable today

402,410in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,754

New KEV · 24H0

Exploit Today ≥ 701,668

Distribution · last window

Critical
3,545
High
15,903
Medium
14,814
Low
1,453

Filters

Filters

Window

Severity

Flags

Vulnerabilities9,841–9,880 · 402,410

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2009-3845—

——29——CVE-2003-0899—

——29——CVE-2001-0137—

——29——CVE-2019-8016—

——29——CVE-2006-5578—

——29——CVE-2020-137777.4 HIG

——29GnuTLS 3.6.x before 3.6.14 uses incorrect cryptography for encrypting a session ticket (a loss of confidentiality in TLS 1.2, and an authentication bypass in TLS 1.3). The earliest affected version is 3.6.4 (2018-09-24) because of an error in a 2018-09-18 commit. Until the first key rotation, the TLS server always uses wrong data in place of an encryption key derived from an application.10d CVE-2011-2131—

——29——CVE-2008-0139—

——29——CVE-2022-23389—

——29——CVE-2025-32821—

——29——CVE-2013-3131—

——29——CVE-2012-0004—

——29——CVE-2016-0478—

——29——CVE-2016-0482—

——29——CVE-2016-0477—

——29——CVE-2018-8494—

——29——CVE-2002-1179—

——29——CVE-2009-4311—

——29——CVE-2025-95019.0 CRI

——29The W3 Total Cache WordPress plugin before 2.8.13 is vulnerable to command injection via the _parse_dynamic_mfunc function, allowing unauthenticated users to execute PHP commands by submitting a comment with a malicious payload to a post.4d CVE-2005-4089—

——29——CVE-2010-0486—

——29——CVE-2022-43773—

——29——CVE-2021-22931—

——29——CVE-2009-3431—

——29——CVE-2021-24094—

——29——CVE-2008-0590—

——29——CVE-2003-0282—

——29——CVE-2022-45942—

——29——CVE-2008-2469—

——29——CVE-2017-3077—

——29——CVE-2006-2081—

——29——CVE-2019-0585—

——29——CVE-2015-7919—

——29——CVE-2007-0236—

——29——CVE-2023-4873—

——29——CVE-2021-39341—

——29——CVE-2019-120867.5 HIG

——29A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9. When Default Typing is enabled (either globally or for a specific property) for an externally exposed JSON endpoint, the service has the mysql-connector-java jar (8.0.14 or earlier) in the classpath, and an attacker can host a crafted MySQL server reachable by the victim, an attacker can send a crafted JSON message that allows them to read arbitrary local files on the server. This occurs because of missing com.mysql.cj.jdbc.admin.MiniAdmin validation.15d CVE-2011-1669—

——29——CVE-2016-0484—

——29——CVE-2016-7234—