PULSE
FEED
ransombarracuda reclama a EVINOKS · TR · Technologyransomqilin reclama a Danser · US · Otherransomvexy ransomware reclama a System Soft · BG · Technologyransomvexy ransomware reclama a JHAMF Group · BDransomemperador reclama a Punta Shopping · BR · Retail & E-Commerceransomnightspire reclama a **F*A *.Aransompayload reclama a Straze Garden Center · Retail & E-Commerceransompayload reclama a Kraft Lernen · DE · Educationransompayload reclama a SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) · DE · Government & Defenseransomrhysida reclama a Phoenix Charter Academy · US · Educationransomauditteam reclama a Pe***CT · NLransomauditteam reclama a jl***om · SGransomauditteam reclama a hn***rgransomauditteam reclama a ro***upransombarracuda reclama a EVINOKS · TR · Technologyransomqilin reclama a Danser · US · Otherransomvexy ransomware reclama a System Soft · BG · Technologyransomvexy ransomware reclama a JHAMF Group · BDransomemperador reclama a Punta Shopping · BR · Retail & E-Commerceransomnightspire reclama a **F*A *.Aransompayload reclama a Straze Garden Center · Retail & E-Commerceransompayload reclama a Kraft Lernen · DE · Educationransompayload reclama a SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) · DE · Government & Defenseransomrhysida reclama a Phoenix Charter Academy · US · Educationransomauditteam reclama a Pe***CT · NLransomauditteam reclama a jl***om · SGransomauditteam reclama a hn***rgransomauditteam reclama a ro***up
CVE Watch406,265 en archivo total

Vulnerabilidades explotables hoy

406,265en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,766
Nuevos KEV · 24H0
Exploit Today ≥ 701,698

Distribución · última ventana

  • Crítico
    5,582
  • Alto
    21,698
  • Medio
    20,219
  • Bajo
    2,102
Filtros
Filtros

Ventana

Severidad

Filtros

Vulnerabilidades11,521–11,560 · 406,265
CVECVSSEPSSKEVRExplotTítuloVis.
CVE-2010-3147—
97.3%
——29——
CVE-2019-14271—
97.3%
——29——
CVE-2014-1824—
97.3%
——29——
CVE-2022-28346—
97.3%
——29——
CVE-2022-27799—
97.3%
——29——
CVE-2004-1623—
97.3%
——29——
CVE-2016-4979—
97.3%
——29——
CVE-2020-24430—
97.3%
——29——
CVE-2005-0199—
97.3%
——29——
CVE-2004-0501—
97.3%
——29——
CVE-2019-1372—
97.3%
——29——
CVE-2011-1564—
97.3%
——29——
CVE-2023-49237—
97.3%
——29——
CVE-2016-3364—
97.3%
——29——
CVE-2010-1127—
97.3%
——29——
CVE-2025-560059.8 CRÍ
97.3%
——29An undocumented and unsafe feature in the PLY (Python Lex-Yacc) library 3.11 allows Remote Code Execution (RCE) via the `picklefile` parameter in the `yacc()` function. This parameter accepts a `.pkl` file that is deserialized with `pickle.load()` without validation. Because `pickle` allows execution of embedded code via `__reduce__()`, an attacker can achieve code execution by passing a malicious pickle file. The parameter is not mentioned in official documentation or the GitHub repository, yet it is active in the PyPI version. This introduces a stealthy backdoor and persistence risk. NOTE: A third-party states that this vulnerability should be rejected because the proof of concept does not demonstrate arbitrary code execution and fails to complete successfully.45d
CVE-2023-5702—
97.3%
——29——
CVE-2010-5278—
97.3%
——29——
CVE-2013-1861—
97.3%
——29——
CVE-2024-21901—
97.3%
——29——
CVE-2017-0265—
97.3%
——29——
CVE-2008-3862—
97.2%
——29——
CVE-1999-1094—
97.2%
——29——
CVE-2016-6855—
97.2%
——29——
CVE-2018-8897—
97.2%
——29——
CVE-2016-3358—
97.2%
——29——
CVE-2025-45797—
97.2%
——29——
CVE-2016-0188—
97.2%
——29——
CVE-2010-3937—
97.2%
——29——
CVE-2019-1250—
97.2%
——29——
CVE-2016-4051—
97.2%
——29——
CVE-2014-2814—
97.2%
——29——
CVE-2020-15921—
97.2%
——29——
CVE-2015-6141—
97.2%
——29——
CVE-2013-0094—
97.2%
——29——
CVE-2019-9881—
97.2%
——29——
CVE-2019-0674—
97.2%
——29——
CVE-2013-1600—
97.2%
——29——
CVE-2020-36197—
97.2%
——29——
CVE-2008-4381—
97.2%
——29——