Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

Browse by type of software

Pick what you run. Each group lists every product in it and the CVEs ranked by priority.

Software A to Z Windows KB finder Windows KB by version Linux Vendors Check my software

Operating systems

Windows, Linux, macOS, Android and iOS vulnerabilities and the updates that fix them.

785 CVEs · 75 critical · 13 exploited · 14 products

Web browsers

Chrome, Firefox, Edge, Safari and the engines behind them.

629 CVEs · 110 critical · 2 exploited · 7 products

Microsoft products and KB updates

Windows, Office, Exchange, SharePoint, Active Directory and the KB updates that fix them.

273 CVEs · 37 critical · 6 exploited · 17 products

Web servers and proxies

nginx, Apache, Tomcat, HAProxy and other servers that face the internet.

75 CVEs · 19 critical · 1 exploited · 11 products

Programming languages and frameworks

Node.js, PHP, Python, Java, Spring, Django and the libraries built on them.

858 CVEs · 114 critical · 5 exploited · 32 products

Databases

MySQL, PostgreSQL, MongoDB, Redis, Oracle, SQL Server and search engines.

254 CVEs · 21 critical · 2 exploited · 17 products

Cloud, containers and DevOps

AWS, Azure, Kubernetes, Docker, Jenkins, GitLab, Terraform and CI/CD tools.

360 CVEs · 62 critical · 9 exploited · 26 products

Monitoring and logging

Grafana, Kibana, Splunk, Prometheus, Zabbix and Nagios.

49 CVEs · 3 critical · 7 products

Firewalls, VPNs and network gear

Cisco, Fortinet, Palo Alto, Citrix, F5, Juniper, Ivanti, SonicWall and VPN products.

139 CVEs · 36 critical · 28 exploited · 20 products

Routers, cameras and IoT

TP-Link, D-Link, Netgear, Hikvision, Dahua, NAS devices and wireless.

107 CVEs · 19 critical · 3 exploited · 11 products

Virtualization and backup

VMware, Hyper-V, Veeam, Commvault and storage.

53 CVEs · 9 critical · 8 products

Identity and access

Active Directory, Okta, Keycloak, LDAP and single sign-on.

27 CVEs · 7 critical · 4 products

Email, DNS and file transfer

Postfix, Exim, Dovecot, BIND, Samba, FTP and managed file transfer tools.

155 CVEs · 13 critical · 2 exploited · 8 products

Websites, CMS and e-commerce

WordPress, Drupal, Joomla, Magento, WooCommerce and Moodle.

356 CVEs · 61 critical · 4 exploited · 10 products

Business and collaboration apps

Zoom, Slack, Confluence, Jira, SAP, Salesforce, Adobe and remote support tools.

123 CVEs · 18 critical · 9 exploited · 23 products

Core tools and libraries

OpenSSL, OpenSSH, curl, Git, GnuPG, archivers and other building blocks.

141 CVEs · 11 critical · 1 exploited · 13 products

Hardware, chips and firmware

Intel, AMD, NVIDIA, Qualcomm, Dell, HP, Lenovo, Samsung, Huawei and Xiaomi.

112 CVEs · 9 critical · 1 exploited · 11 products

Security software

Antivirus, EDR and security product vulnerabilities from Sophos, Trend Micro, McAfee, Symantec, CrowdStrike and others.

19 CVEs · 4 critical · 3 exploited · 4 products

Industrial control and OT

Siemens, Schneider Electric, Rockwell, ABB, Mitsubishi, Honeywell, Moxa and other ICS and SCADA products.

156 CVEs · 17 critical · 6 exploited · 3 products

AI and machine learning

TensorFlow, PyTorch, Jupyter, LangChain and LLM tools.

43 CVEs · 7 critical · 1 exploited · 5 products

Find it by what you have

You haveExampleWhat to do
A CVE idCVE-2024-3094Type it in the search box on the home page, or open /cve/CVE-2024-3094.html.
A Windows KB numberKB5034441Use the Windows KB finder: it lists the CVEs that update fixes.
A Linux advisory idUSN-6000-1, RHSA-2024:1234, DSA-5600-1Paste it in the search box: the CVEs it fixes are listed with the fixed package version.
A GitHub or package advisoryGHSA-xxxx-xxxx-xxxxPaste it in the search box to find the CVE and the fixed version.
A software namenginx, WordPress, ChromeOpen its page under Browse by type. If we do not have one, the search box checks NVD live.
A product name from a scanopenssl 1.1.1, log4j 2.14Use Check my software: paste the package list and it matches versions.
A vendor nameCisco, Microsoft, FortinetOpen Vendors to see every CVE for that vendor.