PULSEUnderground Intel

EN VIVO34señales / 24h

FEED

ransomcurious worm reclama a benchmarkseniorliving.com · US · Healthcareransomaoqin reclama a Airblue · PK · Transportationransompanzer reclama a Ministry of Health Malaysia · MY · Government & Defenseransomkrybit reclama a cey-tech.com · CY · Technologyransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomincransom reclama a HELP Foundation · US · Otherransomincransom reclama a gamechangerwm.com · US · Professional Servicesransomincransom reclama a raymondjames.com · US · Financial Servicesransomthegentlemen reclama a Esri South Africa · ZA · Technologyransomthegentlemen reclama a MEGATRANS · AR · Transportationransomthegentlemen reclama a United Pharmacy · SA · Healthcareransomthegentlemen reclama a Clancy Systems International · US · Government & Defenseransomthegentlemen reclama a Orennia · SE · Energy & Utilitiesransomcurious worm reclama a benchmarkseniorliving.com · US · Healthcareransomaoqin reclama a Airblue · PK · Transportationransompanzer reclama a Ministry of Health Malaysia · MY · Government & Defenseransomkrybit reclama a cey-tech.com · CY · Technologyransommetaencryptor reclama a Promantra, Inc. · US · Technologyransomincransom reclama a CIMSA LOGISTICS · US · Transportationransomincransom reclama a HELP Foundation · US · Otherransomincransom reclama a gamechangerwm.com · US · Professional Servicesransomincransom reclama a raymondjames.com · US · Financial Servicesransomthegentlemen reclama a Esri South Africa · ZA · Technologyransomthegentlemen reclama a MEGATRANS · AR · Transportationransomthegentlemen reclama a United Pharmacy · SA · Healthcareransomthegentlemen reclama a Clancy Systems International · US · Government & Defenseransomthegentlemen reclama a Orennia · SE · Energy & Utilities

CVE Watch413,917 en archivo total

Vulnerabilidades explotables hoy

413,917en la vista actual

Score único combinando CVSS, membresía KEV y EPSS. Cada CVE con su ficha propia — timeline desde publicación hasta explotación activa.

En catálogo KEV1,779

Nuevos KEV · 24H0

Exploit Today ≥ 701,707

Distribución · última ventana

Crítico
5,607
Alto
22,525
Medio
20,851
Bajo
2,141

Filtros

Filtros

Ventana

Severidad

Filtros

Vulnerabilidades29,881–29,920 · 413,917

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2019-12643—

——28——CVE-2018-0989—

——28——CVE-2006-1872—

——28——CVE-2019-16871—

——28——CVE-2012-6506—

——28——CVE-2008-4223—

——28——CVE-2021-23330—

——28——CVE-2015-3078—

——28——CVE-2010-0580—

——28——CVE-2013-3335—

——28——CVE-2012-0895—

——28——CVE-2013-3332—

——28——CVE-2013-2728—

——28——CVE-2009-3938—

——28——CVE-2013-3331—

——28——CVE-2007-1473—

——28——CVE-2014-2610—

——28——CVE-2019-16276—

——28——CVE-2017-11794—

——28——CVE-2008-6186—

——28——CVE-2012-2025—

——28——CVE-2006-1630—

——28——CVE-2020-26693—

——28——CVE-2009-1705—

——28——CVE-2013-3609—

——28——CVE-2012-0882—

——28——CVE-2020-3229—

——28——CVE-2012-2026—

——28——CVE-2025-343015.4 MED

——28IPFire versions prior to 2.29 (Core Update 198) contain a stored cross-site scripting (XSS) vulnerability that allows an authenticated attacker to inject arbitrary JavaScript code into the COUNTRY_CODE parameter when creating a location group. When a user adds a new location group, the application issues an HTTP POST request with the ACTION parameter set to savelocationgrp, and the value of the COUNTRY_CODE parameter determines the flag displayed for that group. The value of this parameter is stored and later rendered in the web interface without proper sanitization or encoding, allowing malicious scripts to be executed in the context of other users viewing the affected page.24d CVE-2025-22604—

——28——CVE-2019-1313—

——28——CVE-2018-4062—

——28——CVE-2009-0464—

——28——CVE-2010-0581—

——28——CVE-2015-3133—

——28——CVE-2014-8888—

——28——CVE-2019-9592—

——28——CVE-2019-9591—

——28——CVE-2021-1723—

——28——CVE-2019-6804—