Vulnerability-Lookup

• Vulnerability-Lookup New Vulnerability for a ProductTriggers when a vulnerability affecting a vendor's product is newly published, with its id, title, description, severity, CVSS score, weaknesses and link
• Vulnerability-Lookup New VulnerabilityTriggers when a source publishes a new vulnerability record: new CVEs by default, or GitHub advisories, a vendor's advisories and more, with its id, title, severity, CVSS score and link

• Get vulnerabilityLook up one vulnerability by its id (CVE, GitHub advisory, PyPI, Red Hat and many more) and get it in plain fields: title, description, severity and CVSS score, weaknesses (CWEs), affected products and versions, references, its EPSS chance of being exploited and whether CISA lists it as known exploited. Unknown ids come back with 'found' set to false.
• List recent vulnerabilitiesList the newest vulnerabilities from one source: new CVEs by default, or GitHub advisories, PyPI, a vendor's advisories (such as csaf_cisco or csaf_redhat) and dozens more. Optionally only those changed since a day or tied to one weakness (CWE).
• Search vulnerabilitiesSearch vulnerability descriptions for words, such as a product name or 'remote code execution jenkins'. Searches the CVE list unless other sources are chosen.
• List vendorsFind vendors with known vulnerabilities, most recently changed first, optionally those whose name contains some text. Use a name with 'List vendor products' or 'List product vulnerabilities'.
• List vendor productsList a vendor's products that have known vulnerabilities, most recently changed first, optionally those whose name contains some text.
• List product vulnerabilitiesList the vulnerabilities affecting one vendor's product, such as apache log4j, newest first, optionally only those published or changed since a day.
• Search vulnerabilities by CPEList the vulnerabilities for the vendor and product a CPE name identifies, such as cpe:2.3:a:apache:log4j. CPE is the standard naming scheme scanners and asset inventories use for software.
• Get weakness (CWE)Look up a software weakness in MITRE's CWE list, such as CWE-79 (cross-site scripting): what it is, its consequences, how to prevent it, related weaknesses and attack patterns, and real vulnerabilities it caused.
• Get attack pattern (CAPEC)Look up an attack pattern in MITRE's CAPEC list, such as CAPEC-66 (SQL injection): how the attack works step by step, what it needs, its severity, how to defend against it and the weaknesses it exploits.
• Get EPSS scoreGet a CVE's EPSS score: FIRST's daily estimate of the chance it is exploited in the next 30 days, and how that ranks among all CVEs. Useful for deciding what to patch first.
• Get known-exploited statusCheck whether a vulnerability is known to be exploited in the wild, across every known-exploited (KEV) catalog Vulnerability-Lookup gathers, such as CISA's, Shadowserver's and its own, with each catalog's notes.
• List known-exploited vulnerabilitiesList entries in the known-exploited (KEV) catalogs Vulnerability-Lookup gathers, such as everything listed this week, with the catalog, its confidence and its notes.
• List sightingsList sightings: reports that a vulnerability was seen discussed, exploited, given a public proof of concept or patched, with where it was seen. Filter by vulnerability, kind and dates.
• List commentsList the comments analysts have left on vulnerabilities, such as notes on exploitation or mitigation, newest first. Filter by vulnerability, author and dates.
• List bundlesList bundles: write-ups that group related vulnerabilities, such as those in one campaign or report. Filter by a vulnerability they mention, author and dates.
• List most sighted vulnerabilitiesRank the vulnerabilities with the most sightings, a measure of what attackers and researchers are talking about, optionally for a date range or one kind of sighting such as exploited.
• List top vendorsRank the vendors with the most vulnerabilities published, for all time, a year or one month.
• List top weaknessesRank the weaknesses (CWEs) most often behind vulnerabilities, for all time, a year or one month.
• Get vendor VEX statementsGet what vendors such as Red Hat and SUSE say about a vulnerability in their VEX statements: their severity, and how many of their products are fixed, affected or not affected.
• List detection rulesList ready-made detection rules (Sigma, YARA, Suricata, Sagan and others) from Rulezet that spot attempts to exploit a vulnerability, with each rule's text.

No actions match that.