PULSEUnderground Intel

LIVE7signals / 24h

FEED

ransomqilin reclama a Impact Centre Chrétien · HT · Otherransomincransom reclama a Louisville Bar Association · US · Professional Servicesransomqilin reclama a Clausing · DE · Manufacturingransomqilin reclama a CLLS Co Ltd · SG · Not Foundransomstorm reclama a United Group of Companies · US · Otherransomstorm reclama a Sawyer Savings Bank · US · Financial Servicesransombravox reclama a MEDICOS · FR · Healthcareransomspacebears reclama a Hitech Distribuzione Informatica S.r.l. (HTDI) · IT · Technologyransomstorm reclama a Pioneer Bank · US · Financial Servicesransomthegentlemen reclama a Hartfiel Automation · DE · Manufacturingransomqilin reclama a Astro Electroplating · US · Manufacturingransomqilin reclama a Filtronic · GB · Manufacturingransomqilin reclama a EISNER ZT GMBH · AT · Professional Servicesransomqilin reclama a John C Saunders, CPA · US · Professional Servicesransomqilin reclama a Impact Centre Chrétien · HT · Otherransomincransom reclama a Louisville Bar Association · US · Professional Servicesransomqilin reclama a Clausing · DE · Manufacturingransomqilin reclama a CLLS Co Ltd · SG · Not Foundransomstorm reclama a United Group of Companies · US · Otherransomstorm reclama a Sawyer Savings Bank · US · Financial Servicesransombravox reclama a MEDICOS · FR · Healthcareransomspacebears reclama a Hitech Distribuzione Informatica S.r.l. (HTDI) · IT · Technologyransomstorm reclama a Pioneer Bank · US · Financial Servicesransomthegentlemen reclama a Hartfiel Automation · DE · Manufacturingransomqilin reclama a Astro Electroplating · US · Manufacturingransomqilin reclama a Filtronic · GB · Manufacturingransomqilin reclama a EISNER ZT GMBH · AT · Professional Servicesransomqilin reclama a John C Saunders, CPA · US · Professional Services

CVE Watch356,659 in full archive

Vulnerabilities exploitable today

356,659in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,662

New KEV · 24H0

Exploit Today ≥ 701,605

Distribution · last window

Critical
2,528
High
10,661
Medium
6,811
Low
680

Filters

Window

Severity

Flags

Vulnerabilities327,921–327,960 · 356,659

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-3908—

——2——CVE-2026-3176—

——2——CVE-2021-34391—

——2——CVE-2025-40229—

——2——CVE-2025-12563—

——2——CVE-2024-26999—

——2——CVE-2025-40232—

——2——CVE-2025-12056—

——2——CVE-2026-40875—

——2——CVE-2025-69237—

——2——CVE-2026-178456.1 MED

——2Inappropriate implementation in CSS in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to inject arbitrary scripts or HTML (UXSS) via a crafted HTML page. (Chromium security severity: Medium)5d CVE-2023-53784—

——2——CVE-2025-66085—

——2——CVE-2024-41811—

——2——CVE-2023-53787—

——2——CVE-2024-27817—

——2——CVE-2025-31162—

——2——CVE-2025-40255—

——2——CVE-2025-37786—

——2——CVE-2025-14290—

——2——CVE-2020-0110—

——2——CVE-2023-39984—

——2——CVE-2025-11172—

——2——CVE-2023-39985—

——2——CVE-2023-54138—

——2——CVE-2025-12038—

——2——CVE-2024-28951—

——2——CVE-2025-40247—

——2——CVE-2022-34355—

——2——CVE-2026-449036.1 MED

——2Prometheus is an open-source monitoring system and time series database. From 2.49.0 to before 3.5.3 and 3.11.3, in the Prometheus server's legacy web UI (enabled via the command-line flag --enable-feature=old-ui), the histogram heatmap chart view does not escape le label values when inserting them into the HTML for use as axis tick mark labels. An attacker who can inject crafted metrics can execute JavaScript in the browser of any Prometheus user who views the metric in the heatmap chart UI. This vulnerability is fixed in 3.5.3 and 3.11.3.15d CVE-2023-21395—

——2——CVE-2025-38328—

——2——CVE-2025-40234—

——2——CVE-2026-630956.5 MED

——2Dendrite through 0.13.8 contains an improper authorization vulnerability in the Matrix Client-Server API that allows any authenticated local user to delete third-party identifier bindings belonging to other users by submitting an arbitrary address and medium to the account deletion endpoint without ownership verification. Attackers can exploit the unverified Forget3PID handler to remove a victim's email or MSISDN binding and subsequently rebind the address through an identity server to hijack the victim's password reset flow.22d CVE-2024-29074—

——2——CVE-2025-61786—

——2——CVE-2023-3747—

——2——CVE-2026-25645—

——2——CVE-2023-54131—

——2——CVE-2024-39442—