Vulnerability Database

12-Month Intensity

Security bulletin trends by severity

0 1000 2000 3000 4000 Jul 25 Aug 25 Sep 25 Oct 25 Nov 25 Dec 25 Jan Feb Mar Apr May Jun

CVSSv4 Base Score Distribution

Vulnerabilities by severity score for the past 7 days

9.0-10 7.0-8.9 4.0-6.9 0.1-3.9 0 500 1000 1500 2000

Attack Vector

Breakdown by attack vectors for the past 7 days

Remote Adjecent Local Physical

Latest Vulnerability Database Updates

Security Bulletins

View All
SB2026070912
High

Multiple vulnerabilities in IBM MQ Operator and Queue manager container images
Patched
1m ago
SB2026070911
Low

Stored cross-site scripting in AI SEO/GEO Analyzer module for Drupal
Patched
13m ago
SB2026070910
Low

Cross-site scripting in Siteimprove Analytics module for Drupal
Patched
16m ago
SB2026070909
High

Multiple vulnerabilities in Google Chrome
Patched
26m ago
SB2026070908
High

Multiple vulnerabilities in Google ChromeOS LTS
Patched
29m ago
SB2026070907
Medium

Multiple vulnerabilities in Wireshark
Patched
30m ago
SB2026070906
High

SQL injection in Location Selector module for Drupal
Patched
54m ago
SB2026070905
Low

Red Hat Enterprise Linux 8 update for the perl:5.32 module
Patched
2h ago
SB2026070904
Low

Red Hat Enterprise Linux 9 update for kernel
Patched
5h ago
SB2026070903
Low

Red Hat Enterprise Linux 10 update for kernel
Patched
6h ago

Zero-Days

View All
#VU135974

Improper authentication in SimpleHelp
CVE-2026-48558
1w ago
#VU135916

Input validation error in Windchill
CVE-2026-12569
1w ago
#VU134649

Improper access control in LiteSpeed User-End cPanel Plugin
CVE-2026-54420
3w ago
#VU134581

Path traversal in Catalyst SD-WAN Manager (formerly SD-WAN vManage)
CVE-2026-20262
3w ago
#VU134383

Input validation error in PeopleSoft Enterprise PeopleTools
CVE-2026-35273
3w ago
#VU134153

Improper handling of exceptional conditions in Serv-U FTP Server
CVE-2026-28318
4w ago
#VU134147
Patch pending

Incomplete Comparison with Missing Factors in Arista Extensible Operating System (EOS)
CVE-2026-7473
4w ago
#VU134144

Improper authentication in Gaia
CVE-2026-50751
4w ago
#VU133930

Buffer overflow in Google Chrome
CVE-2026-1164
1mo ago
#VU133402

Improper Encoding or Escaping of Output in Catalyst SD-WAN Manager (formerly SD-WAN vManage)
CVE-2026-20245
1mo ago

Exploits

View All
#VU137079
Other

Exploit for Code Injection in Grav CMS
Grav CMS
19h ago
#VU137080
Other

Exploit for Missing Authorization in Grav CMS
Grav CMS
19h ago
#VU136931
CVE-2022-24716
Exploit-DB

Exploit for Path traversal in Icinga Web 2
Icinga Web 2
2d ago
#VU136932
CVE-2022-24715
Exploit-DB

Exploit for Path traversal in Icinga Web 2
Icinga Web 2
2d ago
#VU136931
CVE-2022-24716
Metasploit

Exploit for Path traversal in Icinga Web 2
Icinga Web 2
2d ago
#VU89410
CVE-2024-27822
Metasploit

Exploit for Permissions, Privileges, and Access Controls in macOS
macOS
2d ago
#VU136839
Other

Exploit for Improper Output Neutralization for Logs in OPNsense
OPNsense
5d ago
#VU136831
Other

Exploit for Incorrect authorization in OPNsense
OPNsense
5d ago
#VU136838
CVE-2026-58394
Other

Exploit for Stored cross-site scripting in OPNsense
OPNsense
5d ago

Vendor Spotlight - Last 7 Days

Red Hat Inc.

71 bulletins

IBM Corporation

54 bulletins

Linux Foundation

38 bulletins

Juniper Networks, Inc.

24 bulletins

Cisco Systems, Inc

2 bulletins