Live Vulnerability Intelligence

Vulnerability Watch

A live security-engineering view of recently disclosed and actively exploited vulnerabilities, enriched with CVSS severity, CISA Known Exploited Vulnerabilities, FIRST EPSS probability, affected products and risk-based prioritization.

NIST NVDCISA KEVFIRST EPSS
TOP RISK
CVEs Published
—
NVD · LAST 30 DAYS
Known Exploited Added
—
CISA KEV · LAST 30 DAYS
Critical Candidates
—
CURRENT DATASET
Combined Candidates
—
RECENT NVD + RECENT KEV
Priority curve
—
Highest score in queue, ranked left to right
Known exploited share
0%
—
Exposure snapshot
Avg EPSS—
Network-reachable—
Top vendor—
Disclosure timeline
CVEs published per day · last 14 days · red = High / Critical
01

Priority Queue

Next sync —
Connecting to vulnerability feed…LIVE DATA
02

Methodology

Prioritization Model

Severity is not the same as priority.

The queue combines technical severity with exploitation evidence and attacker prerequisites.

  • CVSS contributes technical severity.
  • CISA KEV strongly increases priority because exploitation is known.
  • EPSS contributes exploitation-likelihood context.
  • Public exploit references, ransomware use, network exposure, privileges and user interaction influence urgency.
Data Handling

Normalized and served at the edge.

The interface reads a normalized snapshot produced by a Cloudflare Worker.

  • NIST NVD provides CVE metadata, CVSS, CWE, CPE and references.
  • CISA KEV identifies vulnerabilities known to be exploited in the wild.
  • FIRST EPSS provides probabilistic exploitation likelihood.
  • Site retains the latest successful dataset between refreshes.