feed: livevuln intel, fast.

$ vendors

Vendors

67 vendors and product lines we track. Search by name, or jump straight to a letter.

67 vendors

Most covered

~/vendors/microsoft

Microsoft

Windows, Exchange, Outlook, Azure, and the patch cycle.

404 CVEs94 articles

~/vendors/cisco

Cisco

IOS XE, ASA, and edge-device exploitation.

106 CVEs31 articles

~/vendors/ransomware

Ransomware

Extortion operators, payouts, and the tooling behind the campaigns.

0 CVEs76 articles

~/vendors/supply-chain

Supply Chain

npm, PyPI, and dependency-chain compromises.

0 CVEs66 articles

~/vendors/citrix

Citrix

NetScaler ADC, Gateway, and session-hijack flaws.

28 CVEs21 articles

~/vendors/ivanti

Ivanti

Connect Secure, Policy Secure, and VPN appliance flaws.

40 CVEs8 articles

Most-exploited products

Every product with 3+ CVEs in our dataset and at least one on CISA KEV, ranked by KEV entries. Each page lists its exploited CVEs with CVSS, EPSS and patch-by dates.

All vendors & topics

#A B C D E F G I J L M N O P R S T U V W Z

#

7-Zip — 7-Zip archive-parsing flaws and RCE bugs in the open-source Windows archiver.2 covered

A

Adobe — ColdFusion, Commerce, Reader, and Acrobat exploitation.109 covered AI & ML Platforms — CVEs in AI workflow tools, BI platforms, and LLM infrastructure.17 covered Apache — Log4j and other Apache Software Foundation project flaws.58 covered Apple — macOS, iOS, and Safari flaws — and the malware ecosystem targeting them.112 covered Arista — VeloCloud SD-WAN and network infrastructure vulnerabilities.7 covered Atlassian — Confluence, Jira, and collaboration-suite exploitation.19 covered

B

Barracuda Networks — Email Security Gateway appliance flaws.3 covered BeyondTrust — Remote Support, Privileged Remote Access, and PAM appliance disclosures.10 covered Browser — Chrome, Firefox, Safari, and extension-ecosystem exploitation.16 covered

C

Check Point — SmartConsole, gateway, and firewall advisories.18 covered CISA KEV & Exploit Status — CISA's Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, federal remediation deadlines, and what it means for everyone else.14 covered Cloud — M365, Google Workspace, and cloud-identity attacks.42 covered CVSS & Vulnerability Scoring — How vulnerabilities get scored, what the numbers actually mean, and why CVSS base score alone doesn't tell the whole risk story.1 covered

D

D-Link — Security vulnerabilities in D-Link routers, switches, and network devices.34 covered DD-WRT — Open-source router firmware — SSDP, UPnP, and other exposed-surface vulnerabilities.2 covered Discourse — Open-source community platform powering forums, docs sites, and developer communities worldwide.2 covered Drupal — Security advisories and CVEs for the Drupal CMS — core, modules, and themes.8 covered

E

Eptura — Vulnerabilities in Eptura's Archibus and workplace management platform.4 covered

F

F5 — BIG-IP and iControl REST management-plane flaws.18 covered Fortinet — FortiOS, FortiGate, and FortiProxy perimeter flaws.56 covered Fortra — Security tool vulnerabilities from Fortra (formerly HelpSystems).5 covered

G

Gitea — Self-hosted Git service CVEs and advisories.7 covered GitLab — GitLab CE/EE RCE and access-control flaws.21 covered GL.iNet — Firmware vulnerabilities in GL.iNet travel, SOHO, and prosumer routers.6 covered Google — Chrome, Android, Chrome Web Store, and Workspace exposure.96 covered

I

ICS / OT — Industrial control, operational tech, and air-gap threats.33 covered

J

JetBrains — TeamCity, YouTrack, and IDE-adjacent auth/RCE flaws.22 covered Juniper — Junos OS, SRX, and edge-network vulnerabilities.8 covered

L

Langflow — Open-source visual builder for LLM workflows — a recurring KEV catalog entry.32 covered Linux Kernel — Kernel LPEs, use-after-frees, and Android downstream fallout.25 covered

M

Mattermost — Security vulnerabilities in Mattermost collaboration platform.2 covered MCP Servers — Model Context Protocol server CVEs — SSRF, path traversal, and injection in LLM integration layers.4 covered MikroTik — RouterOS vulnerabilities and network device attacks.9 covered Mobile — iOS, Android, and mobile spyware.14 covered Mozilla — Firefox and Thunderbird zero-days, sandbox escapes, and MFSA advisories.20 covered

N

n8n — Open-source workflow automation with Enterprise SSO and OEM deployments.5 covered

O

OpenWrt — Open-source Linux router firmware vulnerabilities.5 covered Oracle — E-Business Suite, Fusion Middleware, WebLogic, Database, and the quarterly Critical Patch Update cycle.59 covered

P

Palo Alto Networks — PAN-OS, GlobalProtect, and firewall zero-days.22 covered PHP — Vulnerabilities in the PHP scripting language and its ecosystem.11 covered Progress Software — Kemp LoadMaster, MOVEit, and the file-transfer/appliance patch cadence.13 covered PTC — Windchill PDMLink, FlexPLM, and the PLM/PDM software that sits between engineering and the shop floor.10 covered

R

RARLAB / WinRAR — WinRAR archive-handling and path-traversal flaws.6 covered Ruby on Rails — CVEs and security advisories across the Rails web framework and its component libraries.3 covered

S

SAP — NetWeaver, S/4HANA, AppRouter, and Commerce Cloud advisories.22 covered ServiceNow — ServiceNow Platform and Now Assist / AI Platform vulnerabilities.6 covered SimpleHelp — SimpleHelp remote-support server disclosures, patches, and KEV entries.10 covered SolarWinds — Access Rights Manager, Orion, and IT management platform flaws.16 covered SonicWall — Firewall, SMA, and SSL-VPN flaws — CISA KEV regulars.33 covered

T

Threat Intel & Field Notes — Malware families, threat-actor campaigns, takedowns, and research that doesn't hang on one CVE.294 covered

U

Ubiquiti — UniFi OS, UniFi Network, and edge gear on the LAN.13 covered

V

VMware — vCenter, ESXi, and Spring Framework RCE flaws.34 covered

W

WAVLINK — WAVLINK router and network device security updates.4 covered Wireshark — Vulnerabilities, patch advisories, and security notes for the Wireshark protocol analyzer.1 covered WordPress — Core, plugin, and theme CVEs across the largest CMS attack surface on the web.39 covered WSO2 — Identity Server, API Manager, and integration platform flaws.6 covered

Z

Zimbra — Zimbra Collaboration Suite advisories and patches.6 covered Zoho — ManageEngine ADSelfService Plus, ADAudit Plus, and the APT-magnet product line.9 covered Zoom — Zoom Workplace, VDI Client, Meeting SDK — PSIRT advisories and desktop-client bugs.2 covered Zyxel — Firewall, ATP, USG, and edge-appliance vulnerabilities.16 covered