CVE Signal

Search ID

Technology

From

Min. hits

ID type (multi)

Severity (multi)

Sources (multi)

only in selected (exclusive)

Sort:

ID First Seen Last Seen Severity Sources TW Hits Total

loading…

cve signal — live data from postgres (alerts db). severity is extracted from real "CVSS X.X" mentions across sources, with NVD's official score taking priority over the text-regex fallback when available; without either, the CVE is shown as "n/a" (never guessed). the "Extract" button on each github repo uses the same mechanism as /get on telegram — it generates a temporary download link (5 min or 1 use). the PROJECTDISCOVERY source means a nuclei template was published (a real automated exploit/detection, not just a repo with the CVE's name in it) — when that template references a GitHub PoC, it's backed up automatically. the "Technology" filter/directory combines ProjectDiscovery (verified templates) with NVD (official database). all filters (date range, severity, sources, min. hits) apply to both the ID list and the technology directory. besides CVE, three national vulnerability identifiers are tracked: BDU (Russia/FSTEC, format BDU:YYYY-NNNNN), CNVD (China/CNCERT-CC, format CNVD-YYYY-NNNNN) and CNNVD (China/CNITSEC, format CNNVD-YYYYMM-NNN). when a source mentions a CVE alongside its BDU/CNVD/CNNVD equivalent, both are tracked as separate entries — they are not automatically cross-referenced/merged (that would require querying each national database's own record, not implemented yet). technology/CVSS enrichment (NVD, ProjectDiscovery) only covers CVE — non-CVE identifiers show no data there by design, not a bug.

Disclaimer. CVE Signal is a security research and informational tool. All vulnerability data is aggregated from public third-party sources and provided "as is", without warranty of any kind. It may be incomplete, delayed or inaccurate — always verify against official sources (NVD, vendor advisories) before acting. To the maximum extent permitted by law, CVE Signal and its operators accept no liability for any loss or damage arising from use of or reliance on this information. For lawful, authorized security use only; you are responsible for how you use it.

☕ Buy me a coffee