Vulnerability Database

12-Month Intensity

Security bulletin trends by severity

0 1000 2000 3000 4000 Jul 25 Aug 25 Sep 25 Oct 25 Nov 25 Dec 25 Jan Feb Mar Apr May Jun

CVSSv4 Base Score Distribution

Vulnerabilities by severity score for the past 7 days

9.0-10 7.0-8.9 4.0-6.9 0.1-3.9 0 1000 2000 3000 4000

Attack Vector

Breakdown by attack vectors for the past 7 days

Remote Adjecent Local Physical

Latest Vulnerability Database Updates

Security Bulletins

View All
SB2026073028
Low

Insufficient logging in VMware ESXi
Patched
14m ago
SB2026073027
Medium

Out-of-bounds write in VMware ESXi
Patched
21m ago
SB2026073026
High

Multiple vulnerabilities in Arista VeloCloud Orchestrator
Patched Exploited
25m ago
SB2026073025
Critical

Two RCE vulnerabilities in VMware vCenter Server
Patched
37m ago
SB2026073024
Medium

IBM Maximo Scheduler Optimization update for PostCSS
Patched
1h ago
SB2026073023
Medium

Multiple vulnerabilities in IBM Open SDK for Rust on AIX
Patched
1h ago
SB2026073022
High

Red Hat Enterprise Linux 8 update for vim
Patched
1h ago
SB2026073021
Medium

SQL injection in Plugin Organizer plugin for WordPress
Patched
1h ago
SB2026073020
Low

Stored cross-site scripting in Blazer
Patched
2h ago
SB2026073019
Medium

Incorrect Behavior Order in guzzle
Patched
2h ago

Zero-Days

View All
#VU140037

Use of Hard-coded Password in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC)
CVE-2026-20316
20h ago
#VU139241

Improper authentication in Gaia
CVE-2026-16232
1w ago
#VU138320

Path traversal in ShareFile storage zones controller
CVE-ID: N/A
1w ago
#VU137578

Server-Side Request Forgery (SSRF) in SonicWall SMA 1000
CVE-2026-15409
2w ago
#VU137579

Code Injection in SonicWall SMA 1000
CVE-2026-15410
2w ago
#VU137541

Missing Authentication for Critical Function in Microsoft SharePoint Server
CVE-2026-56164
2w ago
#VU137539

Insufficient granularity of access control in Microsoft Windows
CVE-2026-56155
2w ago
#VU135974

Improper authentication in SimpleHelp
CVE-2026-48558
1mo ago
#VU135916

Input validation error in Windchill
CVE-2026-12569
1mo ago
#VU134649

Improper access control in LiteSpeed User-End cPanel Plugin
CVE-2026-54420
1mo ago

Exploits

View All
#VU140077
CVE-2025-8943
Metasploit

Exploit for Incomplete List of Disallowed Inputs in Flowise
Flowise
3h ago
#VU140051
Other

Exploit for Prototype pollution in draw.io
draw.io
4h ago
#VU132211
CVE-2026-46300
Metasploit

Exploit for Improper control of a resource through its lifetime in Linux kernel
Linux kernel
18h ago
#VU139995
CVE-2026-60004
Other

Exploit for Code Injection in Gitea
Gitea
1d ago
#VU134939
CVE-2026-48907
Metasploit

Exploit for Arbitrary file upload in JCE
JCE
1d ago
#VU139917
Other

Exploit for Input validation error in Freecad
Freecad
1d ago
#VU139902
Other

Exploit for Path traversal in Freecad
Freecad
1d ago
#VU139904
Other

Exploit for XML External Entity injection in Freecad
Freecad
1d ago
#VU139901
CVE-2026-34789
Other

Exploit for Code Injection in Freecad
Freecad
1d ago

Vendor Spotlight - Last 7 Days

Linux Foundation

355 bulletins

Red Hat Inc.

66 bulletins

IBM Corporation

48 bulletins

Microsoft

7 bulletins

Google

2 bulletins