Vulnerability-Lookup facilitates quick correlation of vulnerabilities from various sources, independent of vulnerability IDs, and streamlines the management of Coordinated Vulnerability Disclosure (CVD).

Vulnerability-Lookup is also a collaborative platform where users can comment on security advisories and create bundles.

This software is under AGPLv3 license. You are welcome to copy, modify or redistribute the source code according to the Affero GPL license.

Log in or create an account to join our community of contributors and start contributing today.

You can read the official documentation as well as the documentation dedicated to the API.

A user manual is also available.

Found a bug? Report it here.

Security advisories

Vulnerability-Lookup consolidates vulnerabilities from multiple sources.

• CVE List v5 Creative Commons Attribution 4.0 International (CC BY 4.0) 318683 vulnerabilities
• NVD Public Domain vulnerabilities
• FKIE NVD vulnerabilities
• GitHub Creative Commons Attribution 4.0 International (CC BY 4.0) vulnerabilities
• PySec Creative Commons Attribution 4.0 International (CC BY 4.0) vulnerabilities
• emb3d Creative Commons Attribution 4.0 International (CC BY 4.0) vulnerabilities
• GSD Creative Commons Zero v1.0 Universal vulnerabilities
• OpenSSF Malicious Packages Apache License 2.0 vulnerabilities
• CSAF CERT-Bund vulnerabilities
• CSAF NCSC-NL vulnerabilities
• CSAF Trustsource vulnerabilities
• CSAF Siemens vulnerabilities
• CSAF Red Hat Creative Commons Attribution 4.0 International (CC BY 4.0) vulnerabilities
• CSAF CISA vulnerabilities
• CSAF CISCO vulnerabilities
• CSAF Sick vulnerabilities
• CSAF Nozomi Networks vulnerabilities
• CSAF Open-Xchange vulnerabilities
• CSAF Microsoft vulnerabilities
• VARIoT Creative Commons Attribution 4.0 International (CC BY 4.0) vulnerabilities
• JVNDB 3121 vulnerabilities
• Tailscale 35 vulnerabilities
• CIRCL vulnerabilities
• CSAF Suse Creative Commons Attribution 4.0 International (CC BY 4.0) vulnerabilities
• CSAF OpenSuse Creative Commons Attribution 4.0 International (CC BY 4.0) vulnerabilities
• CNVD vulnerabilities

Sightings

This page lists the sources and tools we use to collect sightings.

We are dedicated to regularly publishing comprehensive JSON dumps of all integrated sources as open data, with updates provided on a consistent basis.

Additionally, we release AI datasets and models on Hugging Face.

Operator of the instance: Computer Incident Response Center Luxembourg (CIRCL)

Email: info@circl.lu

More information about this instance.