PULSEUnderground Intel

LIVE37signals / 24h

FEED

ransompanzer reclama a The Minor Food Group · TH · Agriculture and Food Productionransomakira reclama a One Vision Imaging · Healthcareransomakira reclama a i4 Solutions · Technologyransomglobal secret group reclama a MACOFIN HELLAS S.A. · GR · Financial Servicesransomqilin reclama a City of Winchester · US · Government & Defenseransomqilin reclama a B Wright Drywall · US · Manufacturingransomglobal secret group reclama a Cook Remodeling · US · Otherransomstorm reclama a Southern Metals · US · Manufacturingransomstorm reclama a TRP International · US · Otherransomstorm reclama a Supportive Insurance Services · US · Financial Servicesransomwallstreet reclama a T.RAD North America · US · Technologyransomwallstreet reclama a Black Hills Bentonite · US · Manufacturingransomspacebears reclama a Elixi International SA · CH · Healthcareransomunsafe reclama a DECK APP TECHNOLOGIES PTE. LTD · IN · Technologyransompanzer reclama a The Minor Food Group · TH · Agriculture and Food Productionransomakira reclama a One Vision Imaging · Healthcareransomakira reclama a i4 Solutions · Technologyransomglobal secret group reclama a MACOFIN HELLAS S.A. · GR · Financial Servicesransomqilin reclama a City of Winchester · US · Government & Defenseransomqilin reclama a B Wright Drywall · US · Manufacturingransomglobal secret group reclama a Cook Remodeling · US · Otherransomstorm reclama a Southern Metals · US · Manufacturingransomstorm reclama a TRP International · US · Otherransomstorm reclama a Supportive Insurance Services · US · Financial Servicesransomwallstreet reclama a T.RAD North America · US · Technologyransomwallstreet reclama a Black Hills Bentonite · US · Manufacturingransomspacebears reclama a Elixi International SA · CH · Healthcareransomunsafe reclama a DECK APP TECHNOLOGIES PTE. LTD · IN · Technology

CVE Watch356,923 in full archive

Vulnerabilities exploitable today

356,923in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,662

New KEV · 24H0

Exploit Today ≥ 701,605

Distribution · last window

Critical
2,543
High
10,564
Medium
6,729
Low
670

Filters

Window

Severity

Flags

Vulnerabilities323,481–323,520 · 356,923

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-23036—

——3——CVE-2026-12471—

——3——CVE-2025-43770—

——3——CVE-2025-42960—

——3——CVE-2024-58054—

——3——CVE-2022-20717—

——3——CVE-2019-2243—

——3——CVE-2026-1757—

——3——CVE-2026-178466.5 MED

——3Inappropriate implementation in Media in Google Chrome on Windows prior to 151.0.7922.72 allowed a remote attacker who had compromised the renderer process to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)7d CVE-2022-36832—

——3——CVE-2022-49757—

——3——CVE-2024-51635—

——3——CVE-2026-178546.5 MED

——3Insufficient policy enforcement in WebMCP in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to bypass same origin policy via a crafted HTML page. (Chromium security severity: Medium)7d CVE-2021-47415—

——3——CVE-2026-655167.2 HIG

——3Unauthenticated Server Side Request Forgery (SSRF) in PeproDev Ultimate Invoice <= 2.2.6 versions.18d CVE-2023-53712—

——3——CVE-2025-49573—

——3——CVE-2026-3824—

——3——CVE-2026-595527.2 HIG

——3Unauthenticated Server Side Request Forgery (SSRF) in 3D Flipbook PDF Viewer & Embedder <= 1.4.2 versions.14d CVE-2024-54407—

——3——CVE-2024-43684—

——3——CVE-2023-21125—

——3——CVE-2026-112378.3 HIG

——3Insufficient validation of untrusted input in Media in Google Chrome prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to perform UI spoofing via a crafted HTML page. (Chromium security severity: Low)18d CVE-2024-54400—

——3——CVE-2024-43791—

——3——CVE-2024-22235—

——3——CVE-2026-23545—

——3——CVE-2022-34380—

——3——CVE-2021-47420—

——3——CVE-2026-1835—

——3——CVE-2026-0868—

——3——CVE-2026-206856.5 MED

——3An attacker in a privileged network position may be able to leak sensitive information. A path handling issue was addressed with improved validation. This issue is fixed in PCC Release 5E290.3.41d CVE-2024-50533—

——3——CVE-2021-47417—

——3——CVE-2025-7028—

——3——CVE-2025-48263—

——3——CVE-2026-23965—

——3——CVE-2023-53106—

——3——CVE-2026-17848.8 HIG

——3The Route OpenShift resource allows to define routes to make pods reachable at a subdomain through HAProxy. It was found that the checks performed on the spec.path YAML stanza in a Route document was insufficient and could allow a controlled injection of the HAProxy configuration.1d CVE-2026-28493—