$ vendors

Vendors

62 vendors and product lines we track. Search by name, or jump straight to a letter.

62 vendors

Most covered

~/vendors/microsoft

Microsoft

Windows, Exchange, Outlook, Azure, and the patch cycle.

400 CVEs73 articles

~/vendors/cisco

Cisco

IOS XE, ASA, and edge-device exploitation.

100 CVEs10 articles

~/vendors/supply-chain

Supply Chain

npm, PyPI, and dependency-chain compromises.

0 CVEs61 articles

~/vendors/ransomware

Ransomware

Extortion operators, payouts, and the tooling behind the campaigns.

0 CVEs53 articles

~/vendors/ivanti

Ivanti

Connect Secure, Policy Secure, and VPN appliance flaws.

35 CVEs2 articles

~/vendors/citrix

Citrix

NetScaler ADC, Gateway, and session-hijack flaws.

26 CVEs6 articles

All vendors & topics

#A B C D F G I J L M N O P R S T U V W Z

#

7-Zip — 7-Zip archive-parsing flaws and RCE bugs in the open-source Windows archiver.2 covered

A

Adobe — ColdFusion, Commerce, Reader, and Acrobat exploitation.98 covered AI & ML Platforms — CVEs in AI workflow tools, BI platforms, and LLM infrastructure.12 covered Apache — Log4j and other Apache Software Foundation project flaws.51 covered Apple — macOS, iOS, and Safari flaws — and the malware ecosystem targeting them.107 covered Arista — VeloCloud SD-WAN and network infrastructure vulnerabilities.5 covered Atlassian — Confluence, Jira, and collaboration-suite exploitation.15 covered

B

Barracuda Networks — Email Security Gateway appliance flaws.2 covered BeyondTrust — Remote Support, Privileged Remote Access, and PAM appliance disclosures.8 covered Browser — Chrome, Firefox, Safari, and extension-ecosystem exploitation.13 covered

C

Check Point — SmartConsole, gateway, and firewall advisories.14 covered CISA KEV & Exploit Status — CISA's Known Exploited Vulnerabilities catalog: confirmed in-the-wild exploitation, federal remediation deadlines, and what it means for everyone else.10 covered Cloud — M365, Google Workspace, and cloud-identity attacks.30 covered CVSS & Vulnerability Scoring — How vulnerabilities get scored, what the numbers actually mean, and why CVSS base score alone doesn't tell the whole risk story.1 covered

D

D-Link — Security vulnerabilities in D-Link routers, switches, and network devices.32 covered DD-WRT — Open-source router firmware — SSDP, UPnP, and other exposed-surface vulnerabilities.2 covered Discourse — Open-source community platform powering forums, docs sites, and developer communities worldwide.2 covered

F

F5 — BIG-IP and iControl REST management-plane flaws.12 covered Fortinet — FortiOS, FortiGate, and FortiProxy perimeter flaws.37 covered

G

Gitea — Self-hosted Git service CVEs and advisories.7 covered GitLab — GitLab CE/EE RCE and access-control flaws.13 covered GL.iNet — Firmware vulnerabilities in GL.iNet travel, SOHO, and prosumer routers.6 covered Google — Chrome, Android, Chrome Web Store, and Workspace exposure.80 covered

I

ICS / OT — Industrial control, operational tech, and air-gap threats.26 covered

J

JetBrains — TeamCity, YouTrack, and IDE-adjacent auth/RCE flaws.8 covered Juniper — Junos OS, SRX, and edge-network vulnerabilities.8 covered

L

Langflow — Open-source visual builder for LLM workflows — a recurring KEV catalog entry.8 covered Linux Kernel — Kernel LPEs, use-after-frees, and Android downstream fallout.20 covered

M

Mattermost — Security vulnerabilities in Mattermost collaboration platform.2 covered MCP Servers — Model Context Protocol server CVEs — SSRF, path traversal, and injection in LLM integration layers.3 covered MikroTik — RouterOS vulnerabilities and network device attacks.7 covered Mobile — iOS, Android, and mobile spyware.11 covered Mozilla — Firefox and Thunderbird zero-days, sandbox escapes, and MFSA advisories.18 covered

N

n8n — Open-source workflow automation with Enterprise SSO and OEM deployments.4 covered

O

OpenWrt — Open-source Linux router firmware vulnerabilities.5 covered Oracle — E-Business Suite, Fusion Middleware, WebLogic, Database, and the quarterly Critical Patch Update cycle.51 covered

P

Palo Alto Networks — PAN-OS, GlobalProtect, and firewall zero-days.17 covered Progress Software — Kemp LoadMaster, MOVEit, and the file-transfer/appliance patch cadence.13 covered PTC — Windchill PDMLink, FlexPLM, and the PLM/PDM software that sits between engineering and the shop floor.4 covered

R

RARLAB / WinRAR — WinRAR archive-handling and path-traversal flaws.6 covered Ruby on Rails — CVEs and security advisories across the Rails web framework and its component libraries.2 covered

S

SAP — NetWeaver, S/4HANA, AppRouter, and Commerce Cloud advisories.22 covered ServiceNow — ServiceNow Platform and Now Assist / AI Platform vulnerabilities.5 covered SimpleHelp — SimpleHelp remote-support server disclosures, patches, and KEV entries.5 covered SolarWinds — Access Rights Manager, Orion, and IT management platform flaws.16 covered SonicWall — Firewall, SMA, and SSL-VPN flaws — CISA KEV regulars.26 covered

T

Threat Intel & Field Notes — Malware families, threat-actor campaigns, takedowns, and research that doesn't hang on one CVE.256 covered

U

Ubiquiti — UniFi OS, UniFi Network, and edge gear on the LAN.13 covered

V

VMware — vCenter, ESXi, and Spring Framework RCE flaws.33 covered

W

Wireshark — Vulnerabilities, patch advisories, and security notes for the Wireshark protocol analyzer.1 covered WordPress — Core, plugin, and theme CVEs across the largest CMS attack surface on the web.28 covered WSO2 — Identity Server, API Manager, and integration platform flaws.3 covered

Z

Zimbra — Zimbra Collaboration Suite advisories and patches.5 covered Zoho — ManageEngine ADSelfService Plus, ADAudit Plus, and the APT-magnet product line.9 covered Zoom — Zoom Workplace, VDI Client, Meeting SDK — PSIRT advisories and desktop-client bugs.2 covered Zyxel — Firewall, ATP, USG, and edge-appliance vulnerabilities.14 covered