PULSEUnderground Intel

LIVE32signals / 24h

FEED

ransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Otherransomfalcon reclama a Buchanan Ingersoll & Rooney PC · US · Professional Servicesransomqilin reclama a Arthur Chapman Kettering Smetak Pikala PA · US · Professional Servicesransomakira reclama a Bison Bag · Retail & E-Commerceransomakira reclama a SK Global Software · KR · Technologyransomakira reclama a Pelham Plastics · Manufacturingransomsilentransomgroup reclama a G... R...ransombooba project reclama a Boardman Park · GB · Otherransombooba project reclama a Vetstoria · SE · Healthcareransombooba project reclama a City of Edgewater · US · Government & Defenseransombooba project reclama a DROUIN SAS · FR · Manufacturingransomscarlettgroup reclama a medinahealthcare.net · Healthcareransomincransom reclama a hillandbeyer.com · US · Professional Servicesransomchaos reclama a darrequipment.com · US · Manufacturingransomwhitearmor reclama a Project Trojan Horse · Otherransomfalcon reclama a Buchanan Ingersoll & Rooney PC · US · Professional Servicesransomqilin reclama a Arthur Chapman Kettering Smetak Pikala PA · US · Professional Servicesransomakira reclama a Bison Bag · Retail & E-Commerceransomakira reclama a SK Global Software · KR · Technologyransomakira reclama a Pelham Plastics · Manufacturingransomsilentransomgroup reclama a G... R...ransombooba project reclama a Boardman Park · GB · Otherransombooba project reclama a Vetstoria · SE · Healthcareransombooba project reclama a City of Edgewater · US · Government & Defenseransombooba project reclama a DROUIN SAS · FR · Manufacturing

CVE Watch407,531 in full archive

Vulnerabilities exploitable today

407,531in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,766

New KEV · 24H0

Exploit Today ≥ 701,698

Distribution · last window

Critical
5,704
High
22,182
Medium
20,667
Low
2,163

Filters

Filters

Window

Severity

Flags

Vulnerabilities28,321–28,360 · 407,531

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2008-4157—

——28——CVE-2002-0926—

——28——CVE-2017-14041—

——28——CVE-2012-4864—

——28——CVE-2003-0153—

——28——CVE-2010-2498—

——28——CVE-2014-9087—

——28——CVE-2014-0603—

——28——CVE-2016-0993—

——28——CVE-2017-2483—

——28——CVE-2022-44384—

——28——CVE-2009-1099—

——28——CVE-2014-3616—

——28——CVE-2017-16957—

——28——CVE-2009-3484—

——28——CVE-2026-422668.8 HIG

——28JupyterLab is an extensible environment for interactive and reproducible computing, based on the Jupyter Notebook Architecture. From 4.0.0 to 4.5.6, the allow-list of extensions that can be installed from PyPI Extension Manager (allowed_extensions_uris) is not correctly enforced by JupyterLab. The PyPI Extension Manager was not contained to packages listed on the default PyPI index. This vulnerability is fixed in 4.5.7.67d CVE-2022-229685.3 MED

——28In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the field, including upper and lower case for the first character of all nested fields within the property path.26d CVE-2001-0830—

——28——CVE-2017-6095—

——28——CVE-2019-10987—

——28——CVE-2009-1860—

——28——CVE-2008-7168—

——28——CVE-2019-9213—

——28——CVE-2014-4481—

——28——CVE-2020-1408—

——28——CVE-2001-1456—

——28——CVE-2014-8080—

——28——CVE-2003-0927—

——28——CVE-2025-10365—

——28The Evertz SDVN 3080ipx-10G is a High Bandwidth Ethernet Switching Fabric for Video Application. This device exposes a web management interface on port 80. This web management interface can be used by administrators to control product features, setup network switching, and register license among other features. The application has been developed in PHP with the webEASY SDK, also named ‘ewb’ by Evertz. This web interface has two endpoints that are vulnerable to arbitrary command injection (CVE-2025-4009, CVE-2025-10364) and the authentication mechanism has a flaw leading to authentication bypass (CVE-2025-10365). Remote unauthenticated attackers can gain arbitrary command execution with elevated privileges ( root ) on affected devices. This level of access could lead to serious business impact such as the interruption of media streaming, modification of media being streamed, alteration of closed captions being generated, among others.16d CVE-2015-4410—

——28——CVE-2022-26136—

——28——CVE-2003-0973—

——28——CVE-2007-2089—

——28——CVE-2009-0731—

——28——CVE-2011-2688—

——28——CVE-2003-0743—

——28——CVE-2010-2527—

——28——CVE-2006-0817—

——28——CVE-2014-3961—

——28——CVE-2018-19702—