Vulnerability
Search & Insights

Image

CVE Quick Search

A simple free tool to view the latest published vulnerabilities with insights from NIST, CISA and in the media with enriched threat intelligence.

Search the latest published CVEs
Search the latest published CVEs

Search CISA priority CVEs
Search CISA priority CVEs

Search media reports and advisories
Search media reports and advisories

NIST NVD CVEsCISA Priority CVEsMedia & Advisories

CVE Reports

Single page CVE report includes the below for time saving research.

Image

NIST NVD Data

U.S. NIST data on 30,000+ vendors, we sync and update every 30 minutes.

Image

Threat Checks

PoC scripts, links to ransomeware, APT and adversarial groups activity.

Image

Government Alerts

U.S. and U.K. government updates and alerts linked to CVE's.

Image

News

News and articles related to CVE's to help gauge media and expert sentiment.

Total New CVE(s)

20

Matching CISA Priority

0

Matching for Ransomware

0

NVD CVE DATA

NVD CVE(s) Published Past 24hrs

Blog & News Articles

Threat Intel Briefs

We compile and analyze vulnerability data, offering quarterly reports on the evolving threat landscape. Dive into our analysis covering:

Weakness trends and most attacked
Weakness trends and most attacked

Time-to-Exploit averages
Time-to-Exploit averages

Adversary stats for APT and State Sponsors
Adversary stats for APT and State Sponsors

And more data-driven intelligence...
And more data-driven intelligence...

View blogs
Image
Image

Vulnerability News

See whats making the headlines and got the media and experts talking.

Headlines from the web
Headlines from the web

Government alerts and advice
Government alerts and advice

Adversary and active exploitation
Adversary and active exploitation

Zero day
Zero day

Prev Next

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 73 (securityaffairs.com)

30 Nov 2025

Security Affairs newsletter Round 552 by Pierluigi Paganini – INTERNATIONAL EDITION (securityaffairs.com)

30 Nov 2025

CISA Adds Actively Exploited XSS Bug CVE-2021-26829 in OpenPLC ScadaBR to KEV (thehackernews.com)

30 Nov 2025

CISA Warns of OpenPLC ScadaBR cross-site scripting vulnerability Exploited in Attacks (cybersecuritynews.com)

29 Nov 2025

Hackers Registered 18,000 Holiday-Themed Domains Targeting ‘Christmas,’ ‘Black Friday,’ and ‘Flash Sale’ (cybersecuritynews.com)

28 Nov 2025

Inside Morte Loader: How Loader as a Service Builds Modern Botnets (socradar.io)

28 Nov 2025

New Mirai variant ShadowV2 tests IoT exploits amid AWS disruption (securityaffairs.com)

28 Nov 2025

Breaking the BeeStation: Inside Our Pwn2Own 2025 Exploit Journey (www.synacktiv.com)

27 Nov 2025

NVIDIA DGX Spark Vulnerabilities Let Attackers Execute Malicious Code and DoS Attacks (cybersecuritynews.com)

27 Nov 2025

Gitlab Patches Multiple Vulnerabilities that Enable Authentication Bypass and DoS Attacks (cybersecuritynews.com)

27 Nov 2025

Hackers Actively Exploiting IoT Vulnerabilities to Deploy New ShadowV2 Malware (cybersecuritynews.com)

27 Nov 2025

Angular HTTP Client Vulnerability Exposes XSRF Token to an Attacker-Controlled Domain (cybersecuritynews.com)

27 Nov 2025

New ASUS firmware patches critical AiCloud vulnerability (securityaffairs.com)

27 Nov 2025

New Unauthenticated DoS Vulnerability Crashes Next.js Servers with a Single Request (cybersecuritynews.com)

26 Nov 2025

Water Gamayun APT Hackers Exploit MSC EvilTwin Vulnerability to Inject Malicious Code (cybersecuritynews.com)

26 Nov 2025

Firefox browser vulnerability risks arbitrary code execution (www.scworld.com)

26 Nov 2025

Hackers Exploit NTLM Authentication Flaws to Target Windows Systems (cybersecuritynews.com)

26 Nov 2025

Old tech, new vulnerabilities: NTLM abuse, ongoing exploitation in 2025 (securelist.com)

26 Nov 2025

ASUS MyASUS Flaw Lets Hackers Escalate to SYSTEM-Level Access (cybersecuritynews.com)

25 Nov 2025

Apache Syncope Vulnerability Allows Attacker to Access Internal Database Content (cybersecuritynews.com)

25 Nov 2025

CVE-2025-50165: This Windows JPEG Vulnerability Proves Detection Isn’t Enough (securityboulevard.com)

25 Nov 2025

Zscaler Threat Hunting Discovers and Reconstructs a Sophisticated Water Gamayun APT Group Attack (securityboulevard.com)

25 Nov 2025

Dark Web Profile: Berserk Bear (socradar.io)

25 Nov 2025

Critical FluentBit Vulnerabilities Let Attackers to Cloud Environments Remotely (cybersecuritynews.com)

25 Nov 2025

Fluent Bit vulnerabilities could enable full cloud takeover (www.csoonline.com)

25 Nov 2025

CISA: Spyware and RATs used to target WhatsApp and Signal Users (securityaffairs.com)

25 Nov 2025

Canon Allegedly Breached by Clop Ransomware via Oracle E-Business Suite 0-Day Hack (cybersecuritynews.com)

25 Nov 2025

HashiCorp Vault Vulnerability Allow Attackers to Authenticate to Vault Without Valid Credentials (cybersecuritynews.com)

25 Nov 2025

NVIDIA’s Isaac-GROOT Robotics Platform Vulnerability Let Attackers Inject Malicious Codes (cybersecuritynews.com)

24 Nov 2025

Critical Flaw in Oracle Identity Manager Under Exploitation (www.darkreading.com)

24 Nov 2025

Maximum severity Grafana vulnerability fixed (www.scworld.com)

24 Nov 2025

PoC released for W3 Total Cache Vulnerability that Exposes 1+ Million Websites to RCE Attacks (cybersecuritynews.com)

24 Nov 2025

CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability (www.securityweek.com)

24 Nov 2025

Conflicts between URL mapping and URL based access control., (Mon, Nov 24th) (isc.sans.edu)

24 Nov 2025

CVE-2025-61757: Oracle Identity Manager Auth Bypass Flaw Added to CISA’s KEV (socradar.io)

24 Nov 2025

Tenda N300 Vulnerabilities Let Attacker to Execute Arbitrary Commands as Root User (cybersecuritynews.com)

24 Nov 2025

Attackers deliver ShadowPad via newly patched WSUS RCE bug (securityaffairs.com)

24 Nov 2025

Oracle OIM zero‑day: Pre‑auth RCE forces rapid patching across enterprises (www.csoonline.com)

24 Nov 2025

vLLM Vulnerability Enables Remote Code Execution Via Malicious Payloads (cybersecuritynews.com)

24 Nov 2025

ShadowPad Malware Actively Exploits WSUS Vulnerability for Full System Access (thehackernews.com)

24 Nov 2025

More News Headlines Here

Our Blog

Featured articles covering alerts, advisories, directives, monthly reviews and more. Visit Our Blog for more articles.

February 2024 was yet another intense month in the world of cybersecurity, marked by a flurry of active exploitations and vulnerability disclosures across various software and systems.

Emergency Directive (ED) - Supplemental Direction V1: ED 24-01: Mitigate Ivanti Connect Secure and

Organisations are encouraged to take immediate action to mitigate vulnerabilities affecting Ivanti

Frequently asked questions

Answers for commonly asked questions about CVEs and vulnerabilities.

View FAQs here