PatchTheCEVData sources
Result of the last update run, per feed. "Failed" means the feed was unreachable or changed format; that CVE then simply shows no entry from it.
- alpine: 30 found, 0 no record, 0 failed
- amazon: 10 found, 110 no record, 0 failed
- arch: 0 found, 120 no record, 0 failed
- cvelist: 1 found, 0 no record, 0 failed
- cveorg: 5 found, 0 no record, 0 failed
- debian: 3 found, 0 no record, 0 failed
- epss: 136 found, 0 no record, 0 failed
- exploitdb: 1 found, 0 no record, 0 failed
- fedora: 120 found, 0 no record, 0 failed
- ghsa: 120 found, 0 no record, 0 failed
- kev: 1 found, 0 no record, 0 failed
- metasploit: 1 found, 0 no record, 0 failed
- msrc: 6 found, 0 no record, 0 failed
- nuclei: 1 found, 0 no record, 0 failed
- nvd: 1 found, 0 no record, 0 failed
- nvd-source: 1 found, 0 no record, 0 failed
- osv: 47 found, 73 no record, 0 failed
- poc: 6 found, 114 no record, 0 failed
- redhat: 15 found, 105 no record, 0 failed
- suse: 0 found, 120 no record, 0 failed
- trickest: 25 found, 95 no record, 0 failed
- ubuntu: 3 found, 8 no record, 25 failed (switched off this run)
- vulnrichment: 113 found, 7 no record, 0 failed
Also used: NVD (CVE details), CISA KEV (exploited), EPSS (exploit likelihood), CVE Program records (new CVEs before NVD analysis).
Advisory and coverage feeds
144 feeds are read every run; 108 were reachable in the last one. CVE ids found in them are linked on each CVE page.
Government and CERT (22)
- CISA Alerts and Advisories: reachable
- CISA ICS Advisories: reachable
- CISA Known Exploited (blog): reachable
- NCSC UK: reachable
- CERT-EU: reachable
- CERT-FR Alerts: reachable
- CERT-FR Advisories: reachable
- BSI CERT-Bund: reachable
- JPCERT/CC: reachable
- JVN: reachable
- CERT/CC Vulnerability Notes: reachable
- Canadian Cyber Centre: reachable
- Australian ACSC: unreachable (ReadTimeout)
- HKCERT: reachable
- CERT-In India: reachable
- CERT-SE Sweden: reachable
- NCSC Netherlands: reachable
- CSIRT Italia: reachable
- CERT Polska: reachable
- CERT-UA: reachable
- US-CERT NVD Recent (NIST): unreachable (HTTP 404)
- DHS ICS-CERT Alerts: unreachable (HTTP 404)
Vendor security teams (26)
- Microsoft MSRC Update Guide: reachable
- Cisco Security Advisories: reachable
- Oracle Security Alerts: reachable
- Adobe Security Bulletins: unreachable (HTTP 403)
- Fortinet PSIRT: reachable
- Palo Alto Networks: reachable
- Citrix Security Bulletins: reachable
- VMware / Broadcom: unreachable (HTTP 404)
- Juniper Security: reachable
- SonicWall PSIRT: reachable
- F5 Security Advisories: unreachable (HTTP 404)
- Apple Security Updates: reachable
- Google Chrome Releases: reachable
- Android Security Bulletins: unreachable (HTTP 404)
- Google Cloud Security Bulletins: unreachable (HTTP 404)
- AWS Security Bulletins: reachable
- Mozilla Security Advisories: unreachable (HTTP 404)
- Atlassian Security: unreachable (HTTP 404)
- GitLab Security Releases: reachable
- SAP Security Notes: unreachable (HTTP 404)
- IBM PSIRT: unreachable (HTTP 404)
- Intel Security Advisories: unreachable (HTTP 403)
- Siemens ProductCERT: reachable
- Ivanti Security Advisories: unreachable (HTTP 404)
- Red Hat Product Security Blog: reachable
- Zero Day Initiative Published (Trend): unreachable (SSLError)
Linux and OS distributions (17)
- Ubuntu Security Notices: reachable
- Debian Security Advisories: reachable
- Amazon Linux 2023 ALAS: reachable
- Amazon Linux 2 ALAS: reachable
- Arch Linux Advisories: reachable
- Gentoo GLSA: reachable
- FreeBSD Security Advisories: reachable
- SUSE Security Announce: unreachable (HTTP 404)
- Rocky Linux Errata: reachable
- AlmaLinux Errata: unreachable (HTTP 404)
- Alpine Security: unreachable (HTTP 404)
- Linux Kernel CVE Announce: reachable
- Ubuntu Blog Security: unreachable (HTTP 404)
- Fedora Magazine: reachable
- openSUSE Security: reachable
- NixOS Security Tracker: reachable
- Oracle Linux Blog: unreachable (HTTP 403)
Open-source projects and ecosystems (24)
- Node.js Vulnerabilities: reachable
- Kubernetes Official CVE Feed: unreachable (HTTP 404)
- Jenkins Security Advisories: reachable
- Drupal Security: reachable
- WordPress Core Releases: reachable
- Wordfence Intelligence: reachable
- Spring Security Advisories: reachable
- Apache Tomcat Security: unreachable (HTTP 404)
- nginx Security Advisories: unreachable (HTTP 404)
- OpenSSL Vulnerabilities: unreachable (HTTP 404)
- curl Security: unreachable (HTTP 404)
- PostgreSQL Security: unreachable (HTTP 404)
- Go Vulnerability Database: unreachable (HTTP 400)
- Rust Blog: reachable
- Django Weblog: reachable
- Ruby News: reachable
- PHP Releases: reachable
- Redis Releases: reachable
- Elastic Security Announcements: reachable
- Grafana Releases: reachable
- Docker Engine Releases: reachable
- Kubernetes Releases: reachable
- Git Releases: reachable
- Linux Kernel Stable Releases: reachable
Security researchers (41)
- Zero Day Initiative Published: reachable
- Google Project Zero: unreachable (HTTP 200)
- Cisco Talos: reachable
- Talos Vulnerability Reports: unreachable (HTTP 404)
- Unit 42 (Palo Alto): reachable
- Rapid7 Blog: reachable
- Tenable Research Advisories: unreachable (HTTP 404)
- Qualys Blog: reachable
- Mandiant / Google Cloud Threat Intel: reachable
- Microsoft Security Blog: reachable
- watchTowr Labs: reachable
- Horizon3.ai: reachable
- GreyNoise Labs: unreachable (HTTP 403)
- VulnCheck Blog: unreachable (HTTP 404)
- Wiz Research: reachable
- Check Point Research: reachable
- Packet Storm Files: unreachable (SSLError)
- Exploit-DB Latest: reachable
- oss-security list: reachable
- SANS Internet Storm Center: reachable
- Trail of Bits: reachable
- PortSwigger Research: reachable
- NCC Group Research: reachable
- SentinelOne Labs: reachable
- Elastic Security Labs: unreachable (HTTP 200)
- Datadog Security Labs: reachable
- Volexity: reachable
- Huntress: reachable
- Kaspersky Securelist: reachable
- ESET WeLiveSecurity: reachable
- Sophos Threat Research: unreachable (ReadTimeout)
- Malwarebytes Labs: reachable
- CrowdStrike Blog: reachable
- Aqua Security Blog: reachable
- Sysdig Threat Research: reachable
- Snyk Security: reachable
- JFrog Security Research: reachable
- Proofpoint Threat Insight: reachable
- Zero Day Initiative Upcoming: reachable
- Full Disclosure (SecLists): reachable
- Bugtraq (SecLists): reachable
Security news (14)
- BleepingComputer: reachable
- The Hacker News: reachable
- Krebs on Security: reachable
- SecurityWeek: reachable
- The Record: reachable
- Help Net Security: reachable
- The Register Security: reachable
- Ars Technica Security: unreachable (HTTP 404)
- Security Affairs: reachable
- Dark Reading: reachable
- Schneier on Security: reachable
- LWN.net Security: reachable
- GitHub Security Blog: reachable
- Cloudflare Security Blog: reachable
Security news (14)
- BleepingComputer: reachable
- The Hacker News: reachable
- Krebs on Security: reachable
- SecurityWeek: reachable
- The Record: reachable
- Help Net Security: reachable
- The Register Security: reachable
- Ars Technica Security: unreachable (HTTP 404)
- Security Affairs: reachable
- Dark Reading: reachable
- Schneier on Security: reachable
- LWN.net Security: reachable
- GitHub Security Blog: reachable
- Cloudflare Security Blog: reachable