CVE Database
Search the NIST National Vulnerability Database. Live data — CVSS scores, CWE mappings, severity and references.
Loading vulnerabilities
Related Vulnerability Research
CVSS 3.1 base score calculator. Compute scores from attack vector, complexity, privileges, scope and impact metrics.
Security advisory schedules and patch cadence for Cisco, Fortinet, Microsoft, Palo Alto, Juniper and 20+ vendors.
Exploit methodology reference: vulnerability classes, weaponisation lifecycle, PoC-to-exploit pipeline and detection opportunities.
Layered mitigation playbooks for RCE, SQLi, SSRF, Deserialization, Auth Bypass and XXE. WAF rules and compensating controls when patches can't deploy immediately.
Patch prioritisation framework: CVSS score, CISA KEV status, exploit availability and environmental context scoring.
Frequently Asked Questions
What is a CVE?
A Common Vulnerabilities and Exposures (CVE) ID is a unique, standardised identifier assigned to a publicly disclosed cybersecurity vulnerability, maintained by the CVE Program sponsored by CISA and MITRE.
What's the difference between a CVE and a CVSS score?
The CVE is the identifier for the vulnerability itself; CVSS (Common Vulnerability Scoring System) is a separate numeric severity rating from 0 to 10 describing how easy and impactful it is to exploit.
Where does this CVE data come from?
Live queries against the NIST National Vulnerability Database (NVD), which enriches raw CVE records with CVSS scores, CWE weakness mappings and reference links.
What is a CWE?
Common Weakness Enumeration — a category describing the underlying software weakness type behind a CVE (e.g. CWE-79 Cross-Site Scripting, CWE-89 SQL Injection), useful for spotting patterns across multiple CVEs.