PULSEUnderground Intel

EN VIVO42señales / 24h

FEED

ransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomincransom reclama a HELP Foundation · US · Otherransomincransom reclama a gamechangerwm.com · US · Professional Servicesransomincransom reclama a raymondjames.com · US · Financial Servicesransomthegentlemen reclama a Esri South Africa · ZA · Technologyransomthegentlemen reclama a MEGATRANS · AR · Transportationransomthegentlemen reclama a United Pharmacy · SA · Healthcareransomthegentlemen reclama a Clancy Systems International · US · Government & Defenseransomthegentlemen reclama a Orennia · SE · Energy & Utilitiesransomthegentlemen reclama a City of Humboldt · CA · Government & Defenseransomthegentlemen reclama a Reso Tech Laurentides · CA · Technologyransomthegentlemen reclama a Darr Equipment · US · Manufacturingransomthegentlemen reclama a Municipalidad de Cieneguilla · PE · Government & Defenseransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomincransom reclama a HELP Foundation · US · Otherransomincransom reclama a gamechangerwm.com · US · Professional Servicesransomincransom reclama a raymondjames.com · US · Financial Servicesransomthegentlemen reclama a Esri South Africa · ZA · Technologyransomthegentlemen reclama a MEGATRANS · AR · Transportationransomthegentlemen reclama a United Pharmacy · SA · Healthcareransomthegentlemen reclama a Clancy Systems International · US · Government & Defenseransomthegentlemen reclama a Orennia · SE · Energy & Utilitiesransomthegentlemen reclama a City of Humboldt · CA · Government & Defenseransomthegentlemen reclama a Reso Tech Laurentides · CA · Technologyransomthegentlemen reclama a Darr Equipment · US · Manufacturingransomthegentlemen reclama a Municipalidad de Cieneguilla · PE · Government & Defense

CVE Watch413,655 en archivo total

Vulnerabilidades explotables hoy

413,655en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,779

Nuevos KEV · 24H0

Exploit Today ≥ 701,707

Distribución · última ventana

Crítico
5,614
Alto
22,423
Medio
20,902
Bajo
2,127

Filtros

Filtros

Ventana

Severidad

Filtros

Vulnerabilidades25,961–26,000 · 413,655

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2008-7245—

——28——CVE-2008-2076—

——28——CVE-2016-6207—

——28——CVE-2016-6296—

——28——CVE-2015-0325—

——28——CVE-2020-0882—

——28——CVE-2016-4162—

——28——CVE-2019-1010238—

——28——CVE-2009-0250—

——28——CVE-2004-1267—

——28——CVE-2020-354908.1 ALT

——28FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to org.apache.commons.dbcp2.datasources.PerUserPoolDataSource.35d CVE-2004-2627—

——28——CVE-2015-7663—

——28——CVE-2016-4163—

——28——CVE-2001-1473—

——28——CVE-2006-5101—

——28——CVE-2009-0243—

——28——CVE-2021-24237—

——28——CVE-2011-0628—

——28——CVE-2020-111138.8 ALT

——28FasterXML jackson-databind 2.x before 2.9.10.4 mishandles the interaction between serialization gadgets and typing, related to org.apache.openjpa.ee.WASRegistryManagedRuntime (aka openjpa).79d CVE-2016-4120—

——28——CVE-2017-2469—

——28——CVE-2021-229243.7 BAJ

——28libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or can be, case sensitive on many systems but not all, and caneven vary depending on used file systems.The comparison also didn't include the 'issuer cert' which a transfer can setto qualify how to verify the server certificate.29d CVE-2019-1681—

——28——CVE-2010-1283—

——28——CVE-2026-285179.8 CRÍ

——28openDCIM version 23.04, through commit 4467e9c4, contains an OS command injection vulnerability in report_network_map.php. The application retrieves the 'dot' configuration parameter from the database and passes it directly to exec() without validation or sanitization. If an attacker can modify the fac_Config.dot value, arbitrary commands may be executed in the context of the web server process.121d CVE-2001-14577.5 SIN

——28Buffer overflow in CrazyWWWBoard 2000p4 and 2000LEp5 allows remote attackers to execute arbitrary code via a long HTTP_USER_AGENT CGI environment variable.17h CVE-2021-4473—

——28——CVE-2008-3576—

——28——CVE-2016-4160—

——28——CVE-2018-8422—

——28——CVE-2017-2457—

——28——CVE-2007-6230—

——28——CVE-2019-17142—

——28——CVE-2008-4664—

——28——CVE-2019-8352—

——28——CVE-2002-1441—

——28——CVE-2010-4375—

——28——CVE-2014-0418—

——28——CVE-2017-2470—