Vulnerability Database

12-Month Intensity

Security bulletin trends by severity

0 1000 2000 3000 4000 Jun 25 Jul 25 Aug 25 Sep 25 Oct 25 Nov 25 Dec 25 Jan Feb Mar Apr May

CVSSv4 Base Score Distribution

Vulnerabilities by severity score for the past 7 days

9.0-10 7.0-8.9 4.0-6.9 0.1-3.9 0 200 400 600 800

Attack Vector

Breakdown by attack vectors for the past 7 days

Remote Adjecent Local Physical

Latest Vulnerability Database Updates

Security Bulletins

View All
SB2026061134
Medium

Multiple vulnerabilities in Microsoft Windows Kerberos
Patched
5m ago
SB2026061133
Low

Multiple vulnerabilities in Microsoft Secure Boot
Patched Public exploit
28m ago
SB2026061132
High

Red Hat Enterprise Linux 9 update for kernel
Patched
34m ago
SB2026061131
Critical

Debian update for chromium
Patched Exploited
37m ago
SB2026061130
Low

Multiple vulnerabilities in Microsoft Windows DWM Core Library
Patched
1h ago
SB2026061129
Medium

Red Hat Enterprise Linux 9 update for bind
Patched
1h ago
SB2026061128
High

Multiple vulnerabilities in Red Hat OpenShift Container Platform 4.15
Patched
1h ago
SB2026061127
Medium

Debian update for jackson-core
Patched
1h ago
SB2026061126
Medium

Multiple vulnerabilities in IBM SPSS Modeler
Patched
1h ago
SB2026061125
Medium

Multiple vulnerabilities in IBM Security Verify Directory
Patched
1h ago

Zero-Days

View All
#VU134153

Improper handling of exceptional conditions in Serv-U FTP Server
CVE-2026-28318
1d ago
#VU134147
Patch pending

Incomplete Comparison with Missing Factors in Arista Extensible Operating System (EOS)
CVE-2026-7473
1d ago
#VU134144

Improper authentication in Gaia
CVE-2026-50751
1d ago
#VU133930

Buffer overflow in Google Chrome
CVE-2026-1164
2d ago
#VU133402
Patch pending

Improper Encoding or Escaping of Output in Catalyst SD-WAN Manager (formerly SD-WAN vManage)
CVE-2026-20245
6d ago
#VU133164

Improper input validation in Google Android
CVE-2025-48595
1w ago
#VU132780

Embedded malicious code in arktype-adapter
CVE-2026-45321
1w ago
#VU132671

Embedded malicious code in Nx Console VSCode Extension
CVE-2026-48027
2w ago
#VU132313

Use of hard-coded credentials in KnowledgeDeliver
CVE-2026-5426
2w ago
#VU132249

Incorrect Privilege Assignment in LiteSpeed User-End cPanel Plugin
CVE-2026-48172
2w ago

Exploits

View All
#VU133475
Other

Exploit for Heap-based buffer overflow in SAIL
SAIL
3d ago
#VU133462
Other

Exploit for Heap-based buffer overflow in SAIL
SAIL
3d ago
#VU133421
Other

Exploit for Stored cross-site scripting in AVideo
AVideo
6d ago
#VU133403
Other

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Notepad++
Notepad++
6d ago
#VU133361
Other

Exploit for Authorization bypass through user-controlled key in ZoneMinder
ZoneMinder
6d ago
#VU133304
Other

Exploit for Code Injection in Craft CMS
Craft CMS
1w ago
#VU132756
CVE-2026-44490
Other

Exploit for Prototype pollution in axios
axios
1w ago
#VU132755
CVE-2026-44492
Other

Exploit for Server-Side Request Forgery (SSRF) in axios
axios
1w ago
#VU132751
CVE-2026-44489
Other

Exploit for Prototype pollution in axios
axios
1w ago

Vendor Spotlight - Last 7 Days

Linux Foundation

96 bulletins

Red Hat Inc.

60 bulletins

IBM Corporation

57 bulletins

Microsoft

25 bulletins

Apache Foundation

6 bulletins