Vulnerabilities by Software
What's exploited, what's new, and whether your version is affected.
896 new in 30 days
Linux kernel
Hundreds of CVEs a month. The exploited few are the ones that matter.
36 new in 30 days
GitLab
Self-managed GitLab. Twice-monthly security releases; critical ones are exploited fast.
30 new in 30 days
Node.js
Node.js itself, and Express apps. Next.js has its own page.
9 new in 30 days
OpenSSH
The remote login on almost every Linux server. Rare flaws, but serious ones.
8 new in 30 days
Apache Tomcat
The Java application server. Its flaws are often exploited soon after release.
5 new in 30 days
OpenSSL
The encryption library under most web, mail and VPN servers.
3 new in 30 days
Apache httpd
The Apache web server (httpd), still behind many cPanel and older servers.
2 new in 30 days
PHP
The language most websites run on. Old PHP versions are the commonest unpatched risk on web servers.
2 new in 30 days
React / Next.js
Server-side React and Next.js run on the server, so their flaws are server flaws.
1 new in 30 days
WordPress
Core flaws and fixes. Plugins are where most WordPress hacks start; add yours to your alerts.
1 new in 30 days
nginx
The web server and proxy in front of a large share of the web.
0 new in 30 days
Redis
The cache and queue behind many apps. Never expose it to the internet.
0 new in 30 days
Python
The language itself, not its packages. Old versions are the main risk.
0 new in 30 days
Git
Git on servers, laptops and build machines. Cloning an untrusted repo can be enough.
0 new in 30 days
Ubuntu / Debian packages
Security fixes across Ubuntu and Debian packages, and keeping releases supported.