vciy
Vulnerability Index

CVE index

Every record this index holds, reachable five ways: by identifier, by what an authority moved this week, by vendor, by family or by hub. Every value on every record is dated, attributed, and opens its own receipt.

Open a record

Or check what you run

One product per line, the name then the version. See every CVE that touches it. No account. Your browser removes IP addresses and host names before anything is sent. Only product names and versions are checked, and nothing you paste is kept.

What moved

Added to CISA KEV this week

By vendor

linuxmicrosoftgoogleoracleibmadobeappleciscoqualcommapacheandroidmozillaredsourcecodesterdellsiemenshuaweijenkinsintelrsamsungcode-projectsgitlabnvidiajuniper

The 24 vendor tokens this index holds at least 200 records for, written as the index stores them: the first word of the affected product, lowercased. A vendor hub lists every record under that token, by date.

By family

Adobe flash player, use after free, 24 recordsAdobe premiere, CWE-788, 24 recordsCisco ios, improper input validation, 24 recordsF5 networks, inc. big-ip, improper input validation, 24 recordsIsc bind, CWE-617, 24 recordsJenkins, cross-site scripting, 24 recordsMicrosoft corporation windows, elevation of privilege, 24 recordsMicrosoft windows, improper input validation, 24 recordsMicrosoft windows, denial of service, 24 recordsMicrosoft windows, CWE-59, 24 recordsMicrosoft windows, security feature bypass, 24 recordsMicrosoft windows, improper privilege management, 24 recordsQualcomm, inc. snapdragon, use after free, 24 recordsQualcomm, inc. snapdragon auto, CWE-120, 24 recordsQualcomm, inc. snapdragon auto and 5 more names, out-of-bounds read, 24 recordsCisco ios, CWE-399, 23 recordsFoxit, use after free, 23 recordsGoogle chrome, buffer overflow, 23 recordsJenkins project jenkins, cross-site request forgery, 23 recordsMicrosoft windows server, improper input validation, 23 recordsQualcomm, inc. snapdragon auto, buffer overflow, 23 recordsQualcomm, inc. snapdragon auto and 5 more names, CWE-120, 23 recordsSiemens solid edge, out-of-bounds read, 23 recordsGit, path traversal, 22 records

The biggest defect families this index holds: records that share a product and a weakness class.

By hub

Google edit, 436 recordsGithub mint integer overflow, 315 recordsFoxitsoftware security bulletins, 286 recordsAPSB25-48, 226 recordsTotolink 36, 148 recordsGLSA-201406-32, 109 recordsAPSB24-28, 108 recordsAPSB18-21, 105 recordsOpenwall 6, 102 recordsOracle cspuaug2026, 99 recordsAPSB23-72, 98 recordsAPSB25-115, 97 recordsOracle cpujul2026, 96 recordsIbm 7283858, 90 recordsFoxitsoftware security bulletins, 88 recordsAPSB18-30, 87 recordsAPSB18-41, 86 recordsGentoo 201706 15, 86 recordsAPSB19-41, 83 recordsHpe display, 83 recordsAPSB19-18, 82 recordsTALOS-2017-0483, 81 recordsAPSB23-72, 79 recordsGithub 669 issuecomment 1117265726, 78 records

The biggest batches: records one advisory covers together.

What is held

Records407,803
Dated facts0
Everything on this page is free. Public data. Withholding it protects nothing.