PULSEUnderground Intel

LIVE15signals / 24h

FEED

ransombyod reclama a Michigan State University · US · Educationransomlockbit5 reclama a synergy.co.id · IDransomshiba reclama a Tema Hwt · DEransomqilin reclama a fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie · DE · Healthcareransomqilin reclama a Global Holding · Otherransomwhitearmor reclama a AmplifAI (GoDaddy instance) · US · Technologyransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerceransomhyflock reclama a hitech group · US · Technologyransomqilin reclama a Shibata Co., Ltd. · JP · Manufacturingransomqilin reclama a Meshbesher & Spence · US · Professional Servicesransomqilin reclama a BKV Vasúti Jármjavító Kft · HU · Transportationransomqilin reclama a Forum · AT · Professional Servicesransomqilin reclama a Select Community Management · US · Professional Servicesransomqilin reclama a CMD Naturkosmetik · DE · Retail & E-Commerceransombyod reclama a Michigan State University · US · Educationransomlockbit5 reclama a synergy.co.id · IDransomshiba reclama a Tema Hwt · DEransomqilin reclama a fzmb GmbH, Forschungszentrum für Medizintechnik und Biotechnologie · DE · Healthcareransomqilin reclama a Global Holding · Otherransomwhitearmor reclama a AmplifAI (GoDaddy instance) · US · Technologyransomdirewolf reclama a My Cloud Grocer · GB · Retail & E-Commerceransomhyflock reclama a hitech group · US · Technologyransomqilin reclama a Shibata Co., Ltd. · JP · Manufacturingransomqilin reclama a Meshbesher & Spence · US · Professional Servicesransomqilin reclama a BKV Vasúti Jármjavító Kft · HU · Transportationransomqilin reclama a Forum · AT · Professional Servicesransomqilin reclama a Select Community Management · US · Professional Servicesransomqilin reclama a CMD Naturkosmetik · DE · Retail & E-Commerce

CVE Watch406,402 in full archive

Vulnerabilities exploitable today

406,402in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,766

New KEV · 24H0

Exploit Today ≥ 701,698

Distribution · last window

Critical
5,571
High
21,587
Medium
20,097
Low
2,093

Filters

Filters

Window

Severity

Flags

Vulnerabilities25,321–25,360 · 406,402

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2007-3929—

——28——CVE-2013-0605—

——28——CVE-2019-7972—

——28——CVE-2016-6503—

——28——CVE-2019-7971—

——28——CVE-2016-5842—

——28——CVE-2005-0699—

——28——CVE-2021-41344—

——28——CVE-2017-2476—

——28——CVE-2020-11087.5 HIG

——28A denial of service vulnerability exists when .NET Core or .NET Framework improperly handles web requests. An attacker who successfully exploited this vulnerability could cause a denial of service against a .NET Core or .NET Framework web application. The vulnerability can be exploited remotely, without authentication. A remote unauthenticated attacker could exploit this vulnerability by issuing specially crafted requests to the .NET Core or .NET Framework application. The update addresses the vulnerability by correcting how the .NET Core or .NET Framework web application handles web requests.75d CVE-2001-0383—

——28——CVE-2017-169327.5 HIG

——28parser.c in libxml2 before 2.9.5 does not prevent infinite recursion in parameter entities.19d CVE-2005-0088—

——28——CVE-2023-32073—

——28——CVE-2007-0454—

——28——CVE-2006-6558—

——28——CVE-2007-2791—

——28——CVE-2004-1805—

——28——CVE-2007-1049—

——28——CVE-2019-19799—

——28——CVE-2009-3318—

——28——CVE-2013-0616—

——28——CVE-2015-0569—

——28——CVE-2014-3005—

——28——CVE-2008-4821—

——28——CVE-2006-1463—

——28——CVE-2020-27017—

——28——CVE-2022-211255.5 MED

——28Incomplete cleanup of microarchitectural fill buffers on some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.19d CVE-2021-27247—

——28——CVE-2019-7975—

——28——CVE-2018-16875—

——28——CVE-2007-0504—

——28——CVE-2010-2435—

——28——CVE-2019-7998—

——28——CVE-2022-211665.5 MED

——28Incomplete cleanup in specific special register write operations for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.19d CVE-2007-2462—

——28——CVE-2010-2890—

——28——CVE-2026-425308.1 HIG

——28NGINX Open Source has a vulnerability in the ngx_http_v3_module module. When NGINX Open Source is configured to use the HTTP/3 QUIC module, a remote unauthenticated attacker along with conditions beyond their control can use a specially crafted HTTP/3 session to reopen a QPACK encoder stream. This may cause a Use-after-Free in the NGINX worker process leading to a restart. Additionally, attackers can execute code on systems with Address Space Layout Randomization (ASLR) disabled or when the attacker can bypass ASLR. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.7d CVE-2021-24316—

——28——CVE-2007-0148—