Vulnpedia
← Search vulnerabilities

Sources and coverage

References are combined by URL, with each source retained. Package advisories keep their original version ranges. Vendor assessments apply to the named product only.

PoC-in-GitHub supplies unverified repository candidates. ExploitDB, Metasploit and VulnCheck KEV / XDB supply concrete catalogued PoC resources. Nuclei detection templates, advisory exploit tags and GitHub searches do not qualify for a PoC badge. Listing a resource does not mean Vulnpedia has tested it. VulnCheck KEV exploitation reports remain separate from CISA KEV.

Primary records and signals

CVE.org CNA and ADP records · NVD via FKIE · CISA KEV · FIRST EPSS · ExploitDB · Nuclei

Recent records refresh daily; historical records refresh weekly. Current build: 2026-10-26T13:52:32.101Z. Sources cover different products and years; missing evidence is not evidence of safety.

GitHub Advisory Database (reviewed)

GitHub Advisory Database, adapted to CVE-keyed package and reference metadata.

CC-BY-4.0

PyPA Advisory Database

Python Packaging Authority advisory database, via OSV; adapted to CVE-keyed metadata.

CC-BY-4.0

Go Vulnerability Database

The Go Authors, Go Vulnerability Database, via OSV; adapted to CVE-keyed metadata.

CC-BY-4.0

RustSec Advisory Database

RustSec Advisory Database, via OSV; GHSA-derived content also attributed to GitHub Advisory Database. Adapted to CVE-keyed metadata.

CC0-1.0 AND CC-BY-4.0

PoC-in-GitHub

nomi-sec PoC-in-GitHub catalogue metadata. Linked repositories retain their own licenses; candidates are unverified.

CC0-1.0

Metasploit module catalogue

Copyright 2006-2026 Rapid7, Inc. Metasploit Framework module metadata, adapted to CVE-keyed candidates; no module code redistributed.

BSD-3-Clause

Red Hat Product Security CSAF/VEX

Contains Red Hat Security Data, copyright Red Hat, Inc., licensed under CC BY 4.0. See original source links.

CC-BY-4.0

ENISA European Vulnerability Database

ENISA EUVD identifier mappings and exploitation-source metadata, adapted to CVE-linked references. Third-party advisory text is not reproduced.

ENISA attribution terms

VulnCheck KEV

VulnCheck Known Exploited Vulnerabilities (VulnCheck KEV). Source-scoped exploitation reports and XDB catalogue metadata, adapted to explicit CVE records. Catalogue entries have not been tested by Vulnpedia.

Public use with prominent VulnCheck KEV attribution

Latest feed checks

  • osv-PyPI · ok · Retrieved 2026-10-26T13:48:16.896Z
  • osv-npm · ok · Retrieved 2026-10-26T13:48:26.785Z
  • osv-Maven · ok · Retrieved 2026-10-26T13:48:17.988Z
  • osv-Go · ok · Retrieved 2026-10-26T13:48:18.910Z
  • osv-crates_io · ok · Retrieved 2026-10-26T13:48:19.195Z
  • osv-RubyGems · ok · Retrieved 2026-10-26T13:48:19.570Z
  • osv-Packagist · ok · Retrieved 2026-10-26T13:48:21.068Z
  • osv-NuGet · ok · Retrieved 2026-10-26T13:48:21.452Z
  • osv-Pub · ok · Retrieved 2026-10-26T13:48:21.573Z
  • osv-SwiftURL · ok · Retrieved 2026-10-26T13:48:21.666Z
  • osv-GitHub_Actions · ok · Retrieved 2026-10-26T13:48:21.806Z
  • osv-_EMPTY_ · ok · Retrieved 2026-10-26T13:48:23.048Z
  • poc-in-github · ok · Retrieved 2026-10-26T13:48:25.825Z
  • metasploit · ok · Retrieved 2026-10-26T13:48:26.473Z
  • redhat-vex · ok · Retrieved 2026-10-26T13:51:44.344Z
  • euvd · ok · Retrieved 2026-10-26T13:48:20.295Z
  • vulncheck-kev · ok · Retrieved 2026-10-26T13:48:15.479Z

Source status and counts (JSON) · License notices