Vulnerability Database

12-Month Intensity

Security bulletin trends by severity

0 1000 2000 3000 4000 Aug 25 Sep 25 Oct 25 Nov 25 Dec 25 Jan Feb Mar Apr May Jun Jul

CVSSv4 Base Score Distribution

Vulnerabilities by severity score for the past 7 days

9.0-10 7.0-8.9 4.0-6.9 0.1-3.9 0 500 1000 1500 2000

Attack Vector

Breakdown by attack vectors for the past 7 days

Remote Adjecent Local Physical

Latest Vulnerability Database Updates

Security Bulletins

View All
SB2026080552
High

Multiple vulnerabilities in n8n
Patched
25m ago
SB2026080551
Medium

Code Injection in Hestia Control Panel
Patched
32m ago
SB2026080550
Medium

Multiple vulnerabilities in tesseract
Patched
42m ago
SB2026080549
Medium

SUSE update for rsyslog
Patched
1h ago
SB2026080548
Medium

Fedora 45 update for rubygem-actioncable, rubygem-actionmailbox, rubygem-actionmailer, rubygem-actionpack, rubygem-actiontext, rubygem-actionview, rubygem-activejob, rubygem-activemodel, rubygem-activerecord, rubygem-activestorage, rubygem-activesupport,

Patched
1h ago
SB2026080547
Medium

Debian update for botan3
Patched
1h ago
SB2026080546
Medium

Resource exhaustion in JSON-java
Patched
1h ago
SB2026080545
High

Missing Authentication for Critical Function in KubePi
Patched
2h ago
SB2026080544
Low

Authorization bypass through user-controlled key in KubePi
Patched
2h ago
SB2026080543
Medium

Red Hat Enterprise Linux 9 update for postgresql
Patched
4h ago

Zero-Days

View All
#VU140802

Authentication bypass using an alternate path or channel in N-central
CVE-2026-18577
2d ago
#VU140037

Use of Hard-coded Password in Cisco Secure Firewall Management Center (formerly Firepower Management Center, FMC)
CVE-2026-20316
1w ago
#VU139241

Improper authentication in Gaia
CVE-2026-16232
1w ago
#VU138320

Path traversal in ShareFile storage zones controller
CVE-ID: N/A
2w ago
#VU137578

Server-Side Request Forgery (SSRF) in SonicWall SMA 1000
CVE-2026-15409
3w ago
#VU137579

Code Injection in SonicWall SMA 1000
CVE-2026-15410
3w ago
#VU137541

Missing Authentication for Critical Function in Microsoft SharePoint Server
CVE-2026-56164
3w ago
#VU137539

Insufficient granularity of access control in Microsoft Windows
CVE-2026-56155
3w ago
#VU135974

Improper authentication in SimpleHelp
CVE-2026-48558
1mo ago
#VU135916

Input validation error in Windchill
CVE-2026-12569
1mo ago

Exploits

View All
#VU140958
Other

Exploit for Code Injection in Langflow
Langflow
7h ago
#VU140077
CVE-2025-8943
Metasploit

Exploit for Incomplete List of Disallowed Inputs in Flowise
Flowise
6d ago
#VU140051
Other

Exploit for Prototype pollution in draw.io
draw.io
6d ago
#VU132211
CVE-2026-46300
Metasploit

Exploit for Improper control of a resource through its lifetime in Linux kernel
Linux kernel
1w ago
#VU139995
CVE-2026-60004
Other

Exploit for Code Injection in Gitea
Gitea
1w ago
#VU134939
CVE-2026-48907
Metasploit

Exploit for Arbitrary file upload in JCE
JCE
1w ago
#VU139917
Other

Exploit for Input validation error in Freecad
Freecad
1w ago
#VU139902
Other

Exploit for Path traversal in Freecad
Freecad
1w ago
#VU139904
Other

Exploit for XML External Entity injection in Freecad
Freecad
1w ago

Vendor Spotlight - Last 7 Days

Red Hat Inc.

143 bulletins

IBM Corporation

64 bulletins

Linux Foundation

11 bulletins

Google

9 bulletins

Microsoft

8 bulletins