Browse by type of software
Pick what you run. Each group lists every product in it and the CVEs ranked by priority.
Software A to Z Windows KB finder Windows KB by version Linux Vendors Check my software
Operating systems
Windows, Linux, macOS, Android and iOS vulnerabilities and the updates that fix them.
785 CVEs · 75 critical · 13 exploited · 14 products
Web browsers
Chrome, Firefox, Edge, Safari and the engines behind them.
629 CVEs · 110 critical · 2 exploited · 7 products
Microsoft products and KB updates
Windows, Office, Exchange, SharePoint, Active Directory and the KB updates that fix them.
273 CVEs · 37 critical · 6 exploited · 17 products
Web servers and proxies
nginx, Apache, Tomcat, HAProxy and other servers that face the internet.
75 CVEs · 19 critical · 1 exploited · 11 products
Programming languages and frameworks
Node.js, PHP, Python, Java, Spring, Django and the libraries built on them.
858 CVEs · 114 critical · 5 exploited · 32 products
Databases
MySQL, PostgreSQL, MongoDB, Redis, Oracle, SQL Server and search engines.
254 CVEs · 21 critical · 2 exploited · 17 products
Cloud, containers and DevOps
AWS, Azure, Kubernetes, Docker, Jenkins, GitLab, Terraform and CI/CD tools.
360 CVEs · 62 critical · 9 exploited · 26 products
Monitoring and logging
Grafana, Kibana, Splunk, Prometheus, Zabbix and Nagios.
49 CVEs · 3 critical · 7 products
Firewalls, VPNs and network gear
Cisco, Fortinet, Palo Alto, Citrix, F5, Juniper, Ivanti, SonicWall and VPN products.
139 CVEs · 36 critical · 28 exploited · 20 products
Routers, cameras and IoT
TP-Link, D-Link, Netgear, Hikvision, Dahua, NAS devices and wireless.
107 CVEs · 19 critical · 3 exploited · 11 products
Virtualization and backup
VMware, Hyper-V, Veeam, Commvault and storage.
53 CVEs · 9 critical · 8 products
Identity and access
Active Directory, Okta, Keycloak, LDAP and single sign-on.
27 CVEs · 7 critical · 4 products
Email, DNS and file transfer
Postfix, Exim, Dovecot, BIND, Samba, FTP and managed file transfer tools.
155 CVEs · 13 critical · 2 exploited · 8 products
Websites, CMS and e-commerce
WordPress, Drupal, Joomla, Magento, WooCommerce and Moodle.
356 CVEs · 61 critical · 4 exploited · 10 products
Business and collaboration apps
Zoom, Slack, Confluence, Jira, SAP, Salesforce, Adobe and remote support tools.
123 CVEs · 18 critical · 9 exploited · 23 products
Core tools and libraries
OpenSSL, OpenSSH, curl, Git, GnuPG, archivers and other building blocks.
141 CVEs · 11 critical · 1 exploited · 13 products
Hardware, chips and firmware
Intel, AMD, NVIDIA, Qualcomm, Dell, HP, Lenovo, Samsung, Huawei and Xiaomi.
112 CVEs · 9 critical · 1 exploited · 11 products
Security software
Antivirus, EDR and security product vulnerabilities from Sophos, Trend Micro, McAfee, Symantec, CrowdStrike and others.
19 CVEs · 4 critical · 3 exploited · 4 products
Industrial control and OT
Siemens, Schneider Electric, Rockwell, ABB, Mitsubishi, Honeywell, Moxa and other ICS and SCADA products.
156 CVEs · 17 critical · 6 exploited · 3 products
AI and machine learning
TensorFlow, PyTorch, Jupyter, LangChain and LLM tools.
43 CVEs · 7 critical · 1 exploited · 5 products
Find it by what you have
| You have | Example | What to do |
|---|---|---|
| A CVE id | CVE-2024-3094 | Type it in the search box on the home page, or open /cve/CVE-2024-3094.html. |
| A Windows KB number | KB5034441 | Use the Windows KB finder: it lists the CVEs that update fixes. |
| A Linux advisory id | USN-6000-1, RHSA-2024:1234, DSA-5600-1 | Paste it in the search box: the CVEs it fixes are listed with the fixed package version. |
| A GitHub or package advisory | GHSA-xxxx-xxxx-xxxx | Paste it in the search box to find the CVE and the fixed version. |
| A software name | nginx, WordPress, Chrome | Open its page under Browse by type. If we do not have one, the search box checks NVD live. |
| A product name from a scan | openssl 1.1.1, log4j 2.14 | Use Check my software: paste the package list and it matches versions. |
| A vendor name | Cisco, Microsoft, Fortinet | Open Vendors to see every CVE for that vendor. |