Vulnerability Database

12-Month Intensity

Security bulletin trends by severity

0 1000 2000 3000 4000 Jun 25 Jul 25 Aug 25 Sep 25 Oct 25 Nov 25 Dec 25 Jan Feb Mar Apr May

CVSSv4 Base Score Distribution

Vulnerabilities by severity score for the past 7 days

9.0-10 7.0-8.9 4.0-6.9 0.1-3.9 0 500 1000 1500 2000

Attack Vector

Breakdown by attack vectors for the past 7 days

Remote Adjecent Local Physical

Latest Vulnerability Database Updates

Security Bulletins

View All
SB20260604114
Low

NVIDIA for RHEL 10 update for kernel
Patched
1h ago
SB20260604113
Medium

Red Hat Enterprise Linux 10 update for php
Patched
1h ago
SB20260604112
Medium

Red Hat Enterprise Linux 9 update for fence-agents
Patched
1h ago
SB20260604111
Medium

Red Hat Enterprise Linux 9 update for fence-agents
Patched
1h ago
SB20260604110
High

Red Hat Enterprise Linux 8 update for kernel
Patched
1h ago
SB20260604109
High

Red Hat Enterprise Linux 9 update for kernel
Patched
1h ago
SB20260604108
Medium

Red Hat Enterprise Linux 8 update for bind9.16
Patched
2h ago
SB20260604107
Medium

Red Hat Enterprise Linux 9 update for mysql
Patched
2h ago
SB20260604106
Medium

Red Hat Enterprise Linux 10 update for kernel
Patched
2h ago
SB20260604105
Medium

Fedora 43 update for webkitgtk
Patched
3h ago

Zero-Days

View All
#VU133164

Improper input validation in Google Android
CVE-2025-48595
2d ago
#VU132780

Embedded malicious code in arktype-adapter
CVE-2026-45321
6d ago
#VU132671

Embedded malicious code in Nx Console VSCode Extension
CVE-2026-48027
1w ago
#VU132313

Use of hard-coded credentials in KnowledgeDeliver
CVE-2026-5426
1w ago
#VU132249

Incorrect Privilege Assignment in LiteSpeed User-End cPanel Plugin
CVE-2026-48172
1w ago
#VU132106

Relative Path Traversal in Apex One
CVE-2026-34926
1w ago
#VU132036

Input validation error in Windows Defender
CVE-2026-45498
2w ago
#VU132035

Link following in Microsoft Malware Protection Engine
CVE-2026-41091
2w ago
#VU131560
Patch pending

Stored cross-site scripting in Microsoft Exchange Server
CVE-2026-42897
2w ago
#VU131450

Improper authentication in Catalyst SD-WAN Controller (formerly SD-WAN vSmart)
CVE-2026-20182
2w ago

Exploits

View All
#VU133361
Other

Exploit for Authorization bypass through user-controlled key in ZoneMinder
ZoneMinder
7h ago
#VU133304
Other

Exploit for Code Injection in Craft CMS
Craft CMS
1d ago
#VU132756
CVE-2026-44490
Other

Exploit for Prototype pollution in axios
axios
6d ago
#VU132755
CVE-2026-44492
Other

Exploit for Server-Side Request Forgery (SSRF) in axios
axios
6d ago
#VU132751
CVE-2026-44489
Other

Exploit for Prototype pollution in axios
axios
6d ago
#VU125787
CVE-2026-34197
Metasploit

Exploit for Code Injection in ActiveMQ
ActiveMQ
6d ago
#VU132750
CVE-2026-44494
Other

Exploit for Prototype pollution in axios
axios
6d ago
#VU132370
CVE-2026-42097
Other

Exploit for Authentication bypass using an alternate path or channel in Sparx Pro Cloud Server
Sparx Pro Cloud Server
1w ago
#VU132369
CVE-2026-42096
Other

Exploit for Improper access control in Sparx Pro Cloud Server
Sparx Pro Cloud Server
1w ago

Vendor Spotlight - Last 7 Days

Linux Foundation

384 bulletins

IBM Corporation

58 bulletins

Red Hat Inc.

48 bulletins

Google

2 bulletins

Cisco Systems, Inc

2 bulletins