Skip to main content

Menu

Overview

DashboardPriority feed
Patch AdvisoriesEvery vendor

Tools

Vulnerability Search
Vulnerability AnalysisUpload a scan
Public DNS Checker
Subnet Calculator

Reference

Vuln ManagementTool comparison
Pen TestingVendor comparison
Methodology

Theme

Severity color is never themed.

Cross-Vendor Patch Advisories

Every vendor except Microsoft: CISA KEV advisories scored on the EVULNABLE Risk scale, Linux distribution advisories, and vendor security bulletins.

Overview
KEV
Linux
Vendor Bulletins

Browse Advisories

Minimum EPSS

CISA due date

Association Ransomware use only

Search CVE, vendor, product, or name

Vendor — all

Leave every box clear to show all 282 vendors.

7-Zip AMI ASUS Accellion Acclaim Systems Acronis Adminer Adobe Advantive Ajax.NET Professional Alcatel Amcrest Android Apache Apple Aquasecurity Arcadyan Arcserve Arista Arm Array Networks Artifex Atlassian Audinate Aviatrix BQE Balbooa Barracuda Networks BerriAI BeyondTrust Broadcom CWP Cacti ChakraCore Check Point Checkbox Cisco Citrix Cleo Code Aurora Commvault ConnectWise Craft CMS Crestron CrushFTP CyberPersons D-Link D-Link and TRENDnet DD-WRT Daemon Dahua Dasan Dassault Systèmes Dell Delta Electronics Digiever Docker DotNetNuke (DNN) DrayTek Drupal Edimax Elastic Embedthis Erlang Exim EyesOfNetwork F5 FXC FatPipe ForgeRock Fortinet Fortra FreeType Fuel CMS GIGABYTE GNU GeoVision Git GitLab Gitea Gladinet Gogs Google Grafana Labs Grandstream Hewlett Packard (HP) Hewlett Packard Enterprise (HPE) Hikvision Hitachi Vantara IBM IETF IGEL Ignite Realtime ImageMagick InduSoft Intel Ivanti JFrog JQuery Jenkins JetBrains JoomShaper Joomla! Joomlack Juniper Justice AV Solutions KNX Association Kaseya Kentico Kestra Kingsoft Kludex LG Langflow Lantronix Laravel Libraesva Liferay Linux LiteSpeed Looking Glass MDaemon MLflow Marimo McAfee MediaTek Meta Meta Platforms Metabase Micro Focus MikroTik MinIO Mirasvit Mitel MongoDB Motex Mozilla N-able NAKIVO NETGEAR NUUO Nagios Netis Netwrix NextGen Healthcare Nice North Grid Nostromo Notepad++ Novi Survey Npm package Nx OSGeo October CMS Omnissa OpenBSD OpenPLC OpenSSL Oracle PEAR PHP PHP Group PHPUnit PTC PTZOptics Paessler Palo Alto Networks PaperCut Perl Pi-hole PlaySMS Plex Prettier Primetek Progress ProjectSend Pulse Secure QNAP QNAP Systems Qlik Qualcomm Qualitia Quest RARLAB Rails Ray-Project React Native Community Realtek Red Hat Redis Rejetto Reolink Rockwell Roundcube Ruckus Wireless SAP SIMalliance SKYSEA SaltStack Samba Samsung Sangoma Schneider Electric ScienceLogic ServiceNow Siemens Sierra Wireless SimpleHelp Sitecore Smartbedded SmarterTools SolarView SolarWinds Soliton Systems K.K Sonatype SonicWall Sophos Splunk Spreadsheet::ParseExcel Srimax Sudo SugarCRM Sumavision Sunhillo Symantec Synacor SysAid TIBCO TP-Link TVT TanStack TeamT5 TeamViewer Teclib TeleMessage Telerik Tenda TerraMaster ThinkPHP Treck TCP/IP stack Trend Micro Trihedral Trimble TrueConf Twilio Ubiquiti Unitronics Unraid VMware VMware Tanzu Veeam Veritas Versa Vite WSO2 WatchGuard Wazuh WebKitGTK WebPros WebRTC Webmin Widget Factory Wing FTP Server WordPress XStream XWiki Yealink Yiiframework ZK Framework ZKTeco Zabbix Zoho Zyxel dotCMS iCagenda n8n ownCloud phpMyAdmin rConfig reviewdog tj-actions vBulletin

0 of 1,308 advisories match the current filters.

No advisories match the current filters.

Data sources & attribution

Known-exploitation status, required actions, ransomware association and remediation deadlines come from the CISA Known Exploited Vulnerabilities Catalog. Exploitation probability and percentile are provided by FIRST.org's EPSS, used under FIRST's open data terms.

Microsoft Patch Tuesday data is sourced from the Microsoft Security Update Guide; lifecycle milestones from endoflife.date. Linux distribution advisories come from Red Hat, Ubuntu and Debian; vendor bulletins from Adobe, Apple, Chrome, Cisco, Ivanti and Oracle, each linked to its own advisory.

About
Methodology
Privacy & data handling
Contact
Security policy
Terms of Use
Third-party notices

EVULNABLE is an independent project and is not affiliated with, sponsored by, or paid by any vendor it covers.