PULSEUnderground Intel

LIVE24signals / 24h

FEED

ransomanubis reclama a Fisher59 · Not Foundransompayload reclama a BW Office World · Retail & E-Commerceransompayload reclama a Brüninghoff Group · DE · Manufacturingransomglobal secret group reclama a Rosenberg & Pittinsky · US · Professional Servicesransomqilin reclama a Toyota Canarias · ES · Transportationransomlockbit5 reclama a chooseultimate.com · US · Retail & E-Commerceransomredact reclama a Baker Donelson · US · Professional Servicesransomn0n reclama a Vormittag Associates Inc · US · Not Foundransomglobal secret group reclama a Seminole Schools · US · Educationransomn0n reclama a Froggys Fog · US · Retail & E-Commerceransomincransom reclama a Seetelhotels.de · DE · Hospitalityransomqilin reclama a WalkingTree Technologies · IN · Technologyransomqilin reclama a SkyWorld Air Cargo · AE · Transportationransomqilin reclama a Johnson & Pace · GB · Not Foundransomanubis reclama a Fisher59 · Not Foundransompayload reclama a BW Office World · Retail & E-Commerceransompayload reclama a Brüninghoff Group · DE · Manufacturingransomglobal secret group reclama a Rosenberg & Pittinsky · US · Professional Servicesransomqilin reclama a Toyota Canarias · ES · Transportationransomlockbit5 reclama a chooseultimate.com · US · Retail & E-Commerceransomredact reclama a Baker Donelson · US · Professional Servicesransomn0n reclama a Vormittag Associates Inc · US · Not Foundransomglobal secret group reclama a Seminole Schools · US · Educationransomn0n reclama a Froggys Fog · US · Retail & E-Commerceransomincransom reclama a Seetelhotels.de · DE · Hospitalityransomqilin reclama a WalkingTree Technologies · IN · Technologyransomqilin reclama a SkyWorld Air Cargo · AE · Transportationransomqilin reclama a Johnson & Pace · GB · Not Found

CVE Watch399,070 in full archive

Vulnerabilities exploitable today

4,332in current view

Single score combining CVSS, KEV membership and EPSS. Every CVE with its own record — timeline from publication to active exploitation.

In KEV catalog1,748

New KEV · 24H0

Exploit Today ≥ 701,665

Distribution · last window

Critical
3,339
High
15,160
Medium
14,092
Low
1,351

Filters

Filters

Window

Severity

Flags

Vulnerabilities1–40 · 4,332

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2025-537709.8 CRI

KEVR80Microsoft SharePoint Deserialization of Untrusted Data Vulnerability77d CVE-2021-219859.8 CRI

KEVR80VMware vCenter Server Improper Input Validation Vulnerability69d CVE-2019-0708—

KEVR80Microsoft Remote Desktop Services Remote Code Execution Vulnerability—CVE-2023-06697.2 HIG

KEVR80Fortra GoAnywhere MFT Remote Code Execution Vulnerability75d CVE-2022-26134—

KEVR80Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability—CVE-2019-11510—

KEVR80Ivanti Pulse Connect Secure Arbitrary File Read Vulnerability—CVE-2014-6271—

KEV—80GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability—CVE-2021-26084—

KEVR80Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability—CVE-2024-23897—

KEVR80Jenkins Command Line Interface (CLI) Path Traversal Vulnerability—CVE-2023-49669.4 CRI

KEVR80Citrix NetScaler ADC and NetScaler Gateway Buffer Overflow Vulnerability81d CVE-2023-1671—

KEV—80Sophos Web Appliance Command Injection Vulnerability—CVE-2023-1389—

KEV—80TP-Link Archer AX-21 Command Injection Vulnerability—CVE-2019-197819.8 CRI

KEVR80Citrix ADC, Gateway, and SD-WAN WANOP Appliance Code Execution Vulnerability69d CVE-2024-218938.2 HIG

KEVR80Ivanti Connect Secure, Policy Secure, and Neurons Server-Side Request Forgery (SSRF) Vulnerability77d CVE-2023-32315—

KEV—80Ignite Realtime Openfire Path Traversal Vulnerability—CVE-2022-29464—

KEVR80WSO2 Multiple Products Unrestrictive Upload of File Vulnerability—CVE-2021-1498—

KEV—80Cisco HyperFlex HX Data Platform Command Injection Vulnerability—CVE-2024-7593—

KEV—80Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability—CVE-2015-1635—

KEV—80Microsoft HTTP.sys Remote Code Execution Vulnerability—CVE-2021-22005—

KEVR80VMware vCenter Server File Upload Vulnerability—CVE-2021-35464—

KEVR80ForgeRock Access Management (AM) Core Server Remote Code Execution Vulnerability—CVE-2021-344739.1 CRI

KEVR80Microsoft Exchange Server Remote Code Execution Vulnerability71d CVE-2024-218879.1 CRI

KEVR80Ivanti Connect Secure and Policy Secure Command Injection Vulnerability77d CVE-2021-26086—

KEV—80Atlassian Jira Server and Data Center Path Traversal Vulnerability—CVE-2018-13379—

KEVR80Fortinet FortiOS SSL VPN Path Traversal Vulnerability—CVE-2020-5902—

KEVR80F5 BIG-IP Traffic Management User Interface (TMUI) Remote Code Execution Vulnerability—CVE-2023-22518—

KEVR80Atlassian Confluence Data Center and Server Improper Authorization Vulnerability—CVE-2024-3400—

KEVR80Palo Alto Networks PAN-OS Command Injection Vulnerability—CVE-2021-4422810.0 CRI

KEVR80Apache Log4j2 Remote Code Execution Vulnerability70d CVE-2014-0160—

KEV—80OpenSSL Information Disclosure Vulnerability—CVE-2017-9841—

KEV—80PHPUnit Command Injection Vulnerability—CVE-2023-350789.8 CRI

KEVR80Ivanti Endpoint Manager Mobile Authentication Bypass Vulnerability76d CVE-2017-5638—

KEVR80Apache Struts Remote Code Execution Vulnerability—CVE-2021-451055.9 MED

——30Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.56d CVE-2023-444877.5 HIG

KEV—80HTTP/2 Rapid Reset Attack Vulnerability70d CVE-2023-35082—

KEVR80Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Authentication Bypass Vulnerability—CVE-2014-3566—

——30——CVE-2021-404389.0 CRI

KEVR80Apache HTTP Server-Side Request Forgery (SSRF)75d CVE-2023-27350—

KEVR80PaperCut MF/NG Improper Access Control Vulnerability—CVE-2017-7921—

KEV—80Hikvision Multiple Products Improper Authentication Vulnerability—