home.social

#vulnerabilitylookup — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #vulnerabilitylookup, aggregated by home.social.

fetched live
  1. 📊 Vulnerability Report — July 2026 is out

    vulnerability-lookup.org/2026/

    A record of published CVEs (+23% over June) and 61,263 sightings.

    4 SharePoint flaws in CISA KEV in 4 weeks, a chained WordPress core pair topping the sightings, and a wave of Joomla extensions.

    We put 5 KEV catalogs side by side: 65 vulnerabilities entered at least one in July — watching only CISA would have missed nearly half.

    #CTI #KEV #VulnerabilityLookup #VulnerabilityReport #GCVE #CVE #OpenSource #CyberSecurity

  2. vulnerability-lookup 6.0 will be released this week with many (really, many!) new features.

    One of the smaller, but important, additions is support for multiple SSVC views alongside CVSS. When SSVC information is available from an ADP (such as CISA) , or from additional sources such as GCVE, it is now displayed by default.

    This allows users to more easily compare the different severity and prioritization assessments associated with a vulnerability.

    The CIRCL vulnerability-lookup instance is running the pre-release of 6.0 -
    vulnerability.circl.lu/vuln/cv

    #cve #gcve #opensource #vulnerabilitylookup #opendata #vulnerabilitymanagement #cyberecurity #ssvc

    @gcve
    @circl

  3. 🚀 Vulnerability-Lookup 5.5.0 is out!

    🔐 Full Role-Based Access Control replaces the legacy admin flags
    🤖 AI-suggested MITRE ATT&CK techniques on the vulnerability page, powered by our model trained with VulnTrain
    🇪🇺 EUVD ID allocation pipeline
    🛠️ Feeder supervision, new VEX sources & feeders

    👉 vulnerability-lookup.org/2026/

    #VulnerabilityLookup #cybersecurity #opensource #CVE #MITREATTACK

  4. You can now browse VEX statements in Vulnerability-Lookup!

    The new VEX page lets you explore 220k+ vendor VEX records (Red Hat, Microsoft MSRC, more coming), filter by source, search by CVE ID or title, see product statuses at a glance (fixed, known affected, not affected, under investigation) and pivot straight to the related vulnerability.

    🔎 vulnerability.circl.lu/vex/
    🧩 API: vulnerability.circl.lu/api/vex/

    #VEX #VulnerabilityLookup #CVE #GCVE #OpenSource #CyberSecurity

  5. Vulnerability-Lookup 5.4.0 released! 🚀

    Highlights:
    🔎 VEX enrichment from Red Hat CSAF VEX documents — new /api/vex endpoints, a VEX tab and a VEX badge on vulnerability pages
    🔐 Per-user enable/disable of CNA publication
    📬 Admin overview for KEV catalog e-mail subscriptions, richer digest e-mails
    🛠️ Feeder robustness fixes

    vulnerability-lookup.org/2026/