Vulnerability Database

12-Month Intensity

Security bulletin trends by severity

0 1000 2000 3000 4000 Jun 25 Jul 25 Aug 25 Sep 25 Oct 25 Nov 25 Dec 25 Jan Feb Mar Apr May

CVSSv4 Base Score Distribution

Vulnerabilities by severity score for the past 7 days

9.0-10 7.0-8.9 4.0-6.9 0.1-3.9 0 500 1000 1500 2000

Attack Vector

Breakdown by attack vectors for the past 7 days

Remote Adjecent Local Physical

Latest Vulnerability Database Updates

Security Bulletins

View All
SB2026062605
Medium

SUSE update for the Linux Kernel
Patched
3h ago
SB2026062604
High

Fedora EPEL 9 update for chromium
Patched
4h ago
SB2026062603
High

Fedora EPEL 10.3 update for chromium
Patched
4h ago
SB2026062602
High

Fedora EPEL 10.2 update for chromium
Patched
4h ago
SB2026062601
High

Debian update for chromium
Patched
4h ago
SB20260625284
Medium

IBM MQ Appliance update for follow-redirects
Patched
4h ago
SB20260625283
Medium

Red Hat Enterprise Linux 10 update for kernel
Patched
5h ago
SB20260625282
Medium

Fedora EPEL 10.3 update for pdns-recursor
Patched
5h ago
SB20260625281
Medium

Fedora EPEL 10.2 update for pdns-recursor
Patched
5h ago
SB20260625280
Medium

Fedora 44 update for pdns-recursor
Patched
5h ago

Zero-Days

View All
#VU134649

Improper access control in LiteSpeed User-End cPanel Plugin
CVE-2026-54420
1w ago
#VU134581

Path traversal in Catalyst SD-WAN Manager (formerly SD-WAN vManage)
CVE-2026-20262
1w ago
#VU134383

Input validation error in PeopleSoft Enterprise PeopleTools
CVE-2026-35273
2w ago
#VU134153

Improper handling of exceptional conditions in Serv-U FTP Server
CVE-2026-28318
2w ago
#VU134147
Patch pending

Incomplete Comparison with Missing Factors in Arista Extensible Operating System (EOS)
CVE-2026-7473
2w ago
#VU134144

Improper authentication in Gaia
CVE-2026-50751
2w ago
#VU133930

Buffer overflow in Google Chrome
CVE-2026-1164
2w ago
#VU133402

Improper Encoding or Escaping of Output in Catalyst SD-WAN Manager (formerly SD-WAN vManage)
CVE-2026-20245
2w ago
#VU133164

Improper input validation in Google Android
CVE-2025-48595
3w ago
#VU132780

Embedded malicious code in arktype-adapter
CVE-2026-45321
3w ago

Exploits

View All
#VU135120
Other

Exploit for Cross-site scripting in ChurchCRM
ChurchCRM
1d ago
#VU126618
CVE-2026-42208
Metasploit

Exploit for SQL injection in LiteLLM
LiteLLM
2d ago
#VU105939
CVE-2025-29927
Metasploit

Exploit for Improper authorization in Next.js
Next.js
2d ago
#VU129550
CVE-2026-23918
Github

Exploit for Double free in Apache HTTP Server
Apache HTTP Server
3d ago
#VU131312
CVE-2026-41089
Github

Exploit for Stack-based buffer overflow in Windows Server
Windows Server
3d ago
#VU131377
CVE-2026-42945
Github

Exploit for Heap-based buffer overflow in NGINX Open Source and NGINX Plus
NGINX Open Source
3d ago
#VU119103
CVE-2025-55182
Github

Exploit for Deserialization of untrusted data in React
React
3d ago
#VU134649
CVE-2026-54420
Github

Exploit for Improper access control in LiteSpeed User-End cPanel Plugin and LiteSpeed WHM Plugin
LiteSpeed User-End cPanel Plugin
3d ago
#VU114554
CVE-2025-57819
Github

Exploit for SQL injection in FreePBX
FreePBX
3d ago

Vendor Spotlight - Last 7 Days

Linux Foundation

222 bulletins

Red Hat Inc.

90 bulletins

IBM Corporation

60 bulletins

Microsoft

10 bulletins

nVidia

1 bulletin