Vulnerability Database

12-Month Intensity

Security bulletin trends by severity

0 1000 2000 3000 4000 Jun 25 Jul 25 Aug 25 Sep 25 Oct 25 Nov 25 Dec 25 Jan Feb Mar Apr May

CVSSv4 Base Score Distribution

Vulnerabilities by severity score for the past 7 days

9.0-10 7.0-8.9 4.0-6.9 0.1-3.9 0 500 1000 1500 2000

Attack Vector

Breakdown by attack vectors for the past 7 days

Remote Adjecent Local Physical

Latest Vulnerability Database Updates

Security Bulletins

View All
SB2026062909
High

Code Injection in Vim
Patched
15m ago
SB2026062908
Medium

Code Injection in Vim
Patched
15m ago
SB2026062907
Medium

Multiple vulnerabilities in Keycloak
Patched
15m ago
SB2026062906
Medium

OS Command Injection in Jenkins Git client plugin
Patched
31m ago
SB2026062905
Medium

Multiple vulnerabilities in Jenkins Script Security plugin
Patched
47m ago
SB2026062904
High

Red Hat Enterprise Linux 8 update for multiple packages
Patched
2h ago
SB2026062903
Medium

Red Hat Enterprise Linux 8 update for libxslt
Patched
5h ago
SB2026062902
High

Red Hat Enterprise Linux 10 update for thunderbird
Patched
5h ago
SB2026062901
Medium

Red Hat Enterprise Linux 10 update for mod_md
Patched
6h ago
SB2026062710
High

Fedora EPEL 10.2 update for chromium
Patched
1d ago

Zero-Days

View All
#VU134649

Improper access control in LiteSpeed User-End cPanel Plugin
CVE-2026-54420
1w ago
#VU134581

Path traversal in Catalyst SD-WAN Manager (formerly SD-WAN vManage)
CVE-2026-20262
1w ago
#VU134383

Input validation error in PeopleSoft Enterprise PeopleTools
CVE-2026-35273
2w ago
#VU134153

Improper handling of exceptional conditions in Serv-U FTP Server
CVE-2026-28318
2w ago
#VU134147
Patch pending

Incomplete Comparison with Missing Factors in Arista Extensible Operating System (EOS)
CVE-2026-7473
2w ago
#VU134144

Improper authentication in Gaia
CVE-2026-50751
2w ago
#VU133930

Buffer overflow in Google Chrome
CVE-2026-1164
2w ago
#VU133402

Improper Encoding or Escaping of Output in Catalyst SD-WAN Manager (formerly SD-WAN vManage)
CVE-2026-20245
3w ago
#VU133164

Improper input validation in Google Android
CVE-2025-48595
3w ago
#VU132780

Embedded malicious code in arktype-adapter
CVE-2026-45321
1mo ago

Exploits

View All
#VU135120
Other

Exploit for Cross-site scripting in ChurchCRM
ChurchCRM
4d ago
#VU126618
CVE-2026-42208
Metasploit

Exploit for SQL injection in LiteLLM
LiteLLM
5d ago
#VU105939
CVE-2025-29927
Metasploit

Exploit for Improper authorization in Next.js
Next.js
5d ago
#VU129550
CVE-2026-23918
Github

Exploit for Double free in Apache HTTP Server
Apache HTTP Server
6d ago
#VU131312
CVE-2026-41089
Github

Exploit for Stack-based buffer overflow in Windows Server
Windows Server
6d ago
#VU131377
CVE-2026-42945
Github

Exploit for Heap-based buffer overflow in NGINX Open Source and NGINX Plus
NGINX Open Source
6d ago
#VU119103
CVE-2025-55182
Github

Exploit for Deserialization of untrusted data in React
React
6d ago
#VU134649
CVE-2026-54420
Github

Exploit for Improper access control in LiteSpeed User-End cPanel Plugin and LiteSpeed WHM Plugin
LiteSpeed User-End cPanel Plugin
6d ago
#VU114554
CVE-2025-57819
Github

Exploit for SQL injection in FreePBX
FreePBX
6d ago

Vendor Spotlight - Last 7 Days

Linux Foundation

376 bulletins

Red Hat Inc.

84 bulletins

IBM Corporation

61 bulletins

Google

3 bulletins

nVidia

1 bulletin