Universal security lookup
Search the currently published vulnerability and threat IP data.
YOUR SECURITY INTELLIGENCE, SIMPLIFIED
Know the risk.
Find the fix.
Clear, useful vulnerability intelligence for the technologies you rely on. Discover verified advisories, understand exposure, and find the right patch without digging through dozens of sources.
PUBLIC ADVISORY FEEDS▦
CVE
Security intelligenceAcross applications, cloud & infrastructure
Vulnerability tracking ✓
38 technology groups
TECHNOLOGY INTELLIGENCE
Explore vulnerabilities by platform
See which platforms have advisories first published today, yesterday or two days ago. Click a technology or section heading to explore its published vulnerabilities and available fixes.
38Technologies tracked
New in 30 daysAll indexed CVEs
No matching technologies. Try another name or product.
All 38 technology categories appear above. “New” means first published in the last 30 days; “total” includes older indexed advisories. Zero does not establish that a product is secure.
SECURITY WORKSPACE
My Technology Stack & Security Lookup
Find indexed CVEs, product names and reported IPs. Select your technology areas to see relevant advisories. Your selections remain in this browser.
My Technology Stack
Choose the technologies you manage. Stored only in this browser.
This is a local convenience watchlist. It does not verify your deployed versions or send alerts.
OVERVIEW
Vulnerability intelligence at a glance
Summary totals include all indexed advisories. Use the date filter to see newly published CVEs. These counts do not represent vulnerabilities on your infrastructure.
HOURLY COLLECTION ✦ OPEN SOURCES
Vulnerabilities by technology
CVE and GHSA records by technology across the full indexed archive.
No indexed advisories match this reporting period. Select All indexed for older records.
All indexed includes historical records. New in 30 days uses original publication dates. Provider data may be incomplete during a source outage; zero means no indexed match, not a confirmed absence of vulnerabilities.
Focus areas
Recent high impact disclosures, confirmed exploitation and important updates. Select an item to see its details.
SECURITY ADVISORIES
Explore published advisories
Browse newly disclosed advisories first. Switch to Updated or Full archive to see older CVEs.
Latest indexed advisoriesRed pulsing labels identify original disclosure dates: Today, Yesterday, or within the last three Toronto calendar days. An advisory updated today is not necessarily newly disclosed.
| CVE / Advisory | Severity | Affected technology | Description | Published | Details |
|---|
No matching advisories in the current dataset.
No matching advisories were originally published in the selected period. Switch to Full archive for older CVEs. A zero count does not mean a product is safe.
!
Public advisories describe potentially vulnerable products, not CVEHarbor visitor systems. Confirm affected versions and prerequisites against vendor sources before patching a production environment.
NETWORK THREAT INTELLIGENCE
Reported suspicious IP addresses
Publicly reported scanning sources and botnet command-and-control infrastructure. Review before adding to firewall or WAF rules.
Important: These are third-party observations, not proof of attempted exploitation against your systems. Scanning and botnet C2 activity are different categories. Never automatically block all addresses: check source evidence, local logs, allowlists, shared-cloud ownership and age first.
Threat intelligence collection has not been verified.
Firewall import templates
Cumulative Suspicious IP Block group and new additions since the last published snapshot. Downloads require administrator review. Sophos incremental updates require merging the existing group members.
No verified threat IP data available yet.
Sources: SANS Internet Storm Center and abuse.ch Feodo Tracker. Attribution: SANS Technology Institute, Internet Storm Center. This page is a review aid, not a production-ready blocklist or proof of current malicious activity.
IT ADMINISTRATOR TOOLKIT
Security Operations Centre
Software lifecycle tracking, verified package vulnerability lookups, browser-local remediation records and firewall configuration exports.
Security Patch & End of Life Tracker
Published product lifecycle information. Check vendor support terms, extended support and edition differences before planning an upgrade.
Loading source information.
Vendor advisories: Microsoft Security Update Guide · Ubuntu security notices · PHP support · EndOfLife data.
Software Version Vulnerability Checker
Enter a package ecosystem, exact package name and version. OSV checks reported affected package versions. FortiOS and other appliance products are not covered by this package checker.
Search reports against the OSV vulnerability database. No matching records is not evidence of safety.
Vulnerability Remediation Tracker
Track CVE work locally on this device. No account, synchronization or server-side storage. Avoid entering customer secrets.
Records are stored only in this browser.
0 trackedFirewall & WAF Intelligence Center
Review sourced indicator observations and download configuration templates. Never deploy an unreviewed or permanently growing blocklist to production.
Loading indicators
FortiGate
Full and incremental commands for the persistent Suspicious IP Block group. Confirm VDOM, existing objects, firmware and change approval.
Sophos Firewall
XML API templates. Incremental host group membership requires merging with current firewall members. Do not replace an existing HostList with the delta alone.
Other WAF & firewall vendors
Palo Alto, Cisco, Check Point, Cloudflare and Imperva exporters are not yet available. Vendor-specific commands must be validated before release.
A suspicious IP observation is not an approved block decision. Review shared infrastructure, stale indicators, false positives and allowlists.
PERSONAL SECURITY WORKSPACE
CVEHarbor Accounts & Cloud Sync
Optional email sign in to sync your technology stack and remediation records between devices. Your existing local records remain available without an account.
Checking whether the account service is available...
Sync actions replace the destination dataset only after confirmation. Export local remediation records before replacing them.
Notifications are not being sent yet. Preferences are saved for the future email service. No delivery is promised until alert processing is activated.
The account API requires Cloudflare Workers, a D1 database, and verified SMTP2GO sender configuration. Until setup is complete, continue using local tracking and exports.
TRUST & TRANSPARENCY
Source first. Clarity always.
CVEHarbor is being built to turn technical advisories into decisions people can act on. Each record distinguishes published, last source update and first indexed. Feed health is visible. A record being indexed does not mean it has been independently reproduced or that your systems are affected.
Explore CISA Known Exploited Vulnerabilities ↗01
VerifyCollect GitHub reviewed advisories, NVD entries and CISA KEV data each hour, alongside dated historical vendor advisories. Historical records retain their original disclosure dates.
02
ExplainInclude confirmed affected versions, impact, fixes and exploitation status.
03
ReviewDeduplicate records and display source timestamps, feed failures and coverage limitations.