Vulnerability Database

12-Month Intensity

Security bulletin trends by severity

0 1000 2000 3000 4000 Jun 25 Jul 25 Aug 25 Sep 25 Oct 25 Nov 25 Dec 25 Jan Feb Mar Apr May

CVSSv4 Base Score Distribution

Vulnerabilities by severity score for the past 7 days

9.0-10 7.0-8.9 4.0-6.9 0.1-3.9 0 200 400 600 800

Attack Vector

Breakdown by attack vectors for the past 7 days

Remote Adjecent Local Physical

Latest Vulnerability Database Updates

Security Bulletins

View All
SB2026060850
High

Red Hat Enterprise Linux 8 update for firefox
Patched
44m ago
SB2026060849
High

Red Hat Enterprise Linux 10 update for firefox
Patched
44m ago
SB2026060848
High

Red Hat Enterprise Linux 9 update for firefox
Patched
44m ago
SB2026060847
High

Red Hat Enterprise Linux 9 update for firefox
Patched
44m ago
SB2026060846
High

Red Hat Enterprise Linux 9 update for firefox
Patched
44m ago
SB2026060845
Medium

Red Hat Enterprise Linux 9 update for bind
Patched
1h ago
SB2026060844
Medium

Red Hat Enterprise Linux 10 update for podman
Patched
1h ago
SB2026060843
Low

Open redirect in authlib
Patched
2h ago
SB2026060842
Medium

Infinite loop in PyPDF
Patched
2h ago
SB2026060841
Medium

Multiple vulnerabilities in PyPDF
Patched
2h ago

Zero-Days

View All
#VU133402
Patch pending

Improper Encoding or Escaping of Output in Catalyst SD-WAN Manager (formerly SD-WAN vManage)
CVE-2026-20245
3d ago
#VU133164

Improper input validation in Google Android
CVE-2025-48595
6d ago
#VU132780

Embedded malicious code in arktype-adapter
CVE-2026-45321
1w ago
#VU132671

Embedded malicious code in Nx Console VSCode Extension
CVE-2026-48027
1w ago
#VU132313

Use of hard-coded credentials in KnowledgeDeliver
CVE-2026-5426
1w ago
#VU132249

Incorrect Privilege Assignment in LiteSpeed User-End cPanel Plugin
CVE-2026-48172
2w ago
#VU132106

Relative Path Traversal in Apex One
CVE-2026-34926
2w ago
#VU132036

Input validation error in Windows Defender
CVE-2026-45498
2w ago
#VU132035

Link following in Microsoft Malware Protection Engine
CVE-2026-41091
2w ago
#VU131560
Patch pending

Stored cross-site scripting in Microsoft Exchange Server
CVE-2026-42897
3w ago

Exploits

View All
#VU133475
Other

Exploit for Heap-based buffer overflow in SAIL
SAIL
6h ago
#VU133462
Other

Exploit for Heap-based buffer overflow in SAIL
SAIL
6h ago
#VU133421
Other

Exploit for Stored cross-site scripting in AVideo
AVideo
3d ago
#VU133403
Other

Exploit for Time-of-check Time-of-use (TOCTOU) Race Condition in Notepad++
Notepad++
3d ago
#VU133361
Other

Exploit for Authorization bypass through user-controlled key in ZoneMinder
ZoneMinder
4d ago
#VU133304
Other

Exploit for Code Injection in Craft CMS
Craft CMS
5d ago
#VU132756
CVE-2026-44490
Other

Exploit for Prototype pollution in axios
axios
1w ago
#VU132755
CVE-2026-44492
Other

Exploit for Server-Side Request Forgery (SSRF) in axios
axios
1w ago
#VU132751
CVE-2026-44489
Other

Exploit for Prototype pollution in axios
axios
1w ago

Vendor Spotlight - Last 7 Days

IBM Corporation

64 bulletins

Red Hat Inc.

54 bulletins

Linux Foundation

34 bulletins

Apache Foundation

6 bulletins

Cisco Systems, Inc

5 bulletins