Vulnerabilities
Critical CVEs, zero-days, patch advisories, and vulnerability research.
Loading…
Frequently Asked Questions
What is a CVE?
A CVE (Common Vulnerabilities and Exposures) is a standardized identifier for a publicly known cybersecurity vulnerability. Each CVE ID (e.g. CVE-2024-12345) uniquely identifies a specific flaw so security teams, vendors, and researchers can coordinate on patches and mitigations.
How do I track CVE alerts and vulnerability updates?
You can track CVEs through the NIST National Vulnerability Database (NVD), CISA Known Exploited Vulnerabilities catalog, and Nightwatch News, which brings vulnerability updates together with references to the original records.
What is a zero-day vulnerability?
A zero-day is a vulnerability that is actively exploited before the vendor has released a patch. The term "zero-day" refers to the fact that developers have had zero days to fix the flaw before it was weaponized.