EU Vulnerability Database

• New vulnerabilityRuns when a new vulnerability (CVE) is added to the EU Vulnerability Database. Optionally only for a vendor, a product or a minimum score.
• New exploited vulnerabilityRuns when a vulnerability is added to CISA's or ENISA's known exploited vulnerabilities catalog. Optionally only for a vendor or a product.

• List latest vulnerabilitiesGet one of the short lists ENISA keeps on the EUVD's front page: the latest vulnerabilities, the latest known to be exploited, or the latest critical ones. Each comes with its CVE IDs, score, EPSS forecast, vendors and a link. No API key required.
• Search vulnerabilitiesSearch the EU Vulnerability Database by keywords, vendor, product, who assigned the ID, publication or update date, score, EPSS forecast, and whether and since when it is known to be exploited. Most recently updated first, up to 100 a page, with the total that match. No API key required.
• Get vulnerabilityLook up one vulnerability by its EUVD, CVE or GitHub advisory ID: its description, score and vector, EPSS forecast, whether and since when it is exploited, the affected products and versions, references, and the vendor and CERT advisories that cover it. An ID the EUVD doesn't hold comes back with 'found' set to false rather than failing the step. No API key required.
• Get advisoryGet one vendor or CERT security advisory held in the EUVD, such as a Cisco, Red Hat or CERT-Bund advisory: its title, summary, publisher, the products it covers, its links and every vulnerability in it with its score. No API key required.
• List known exploited vulnerabilitiesList the vulnerabilities in the known exploited catalogs EUVD merges, CISA's KEV and ENISA's EU KEV, newest first, with the date each was added and which catalogs list it. Narrow to one catalog or a range of dates. Updated daily. No API key required.
• Get exploitation evidenceSee the evidence that one vulnerability is being exploited: its entries in CISA's and ENISA's known exploited catalogs with the dates and notes, and the attacks honeypot sensors (Shadowserver) have seen against it in the last day, week, month and quarter, with the trend. Useful for deciding what to patch first. No API key required.

No actions match that.