Changelog

A free CVE feed

  • New
  • Security

A public page at /cves lists the Critical and High CVEs NVD published in the last 7 days, what CISA added to its Known Exploited Vulnerabilities catalog in the last 30, and the EPSS odds of each being exploited. No account needed.

Latest CVEs is a free page for anyone who wants to know what was published this week and what attackers already use, whether or not they use ZeusQA.

  • Three sources, one entry per CVE. NVD supplies every CVE published in the last 7 days with a CVSS v3 severity of Critical or High. CISA's Known Exploited Vulnerabilities catalog marks the ones with confirmed exploitation. FIRST's EPSS adds the probability of exploitation in the next 30 days.
  • Two views. Latest Critical and High, newest first, with a Critical only filter. Exploited, with what CISA added to KEV in the last 30 days, its due date and whether it is used in ransomware campaigns. Both filter by CVE, vendor, product or words.
  • Fresh without a refresh. The sources are fetched again every 30 minutes and the page shows when.
  • Readable by agents. The same feed is markdown at /cves.md.

The page lists what was published. To know which advisories are in your own dependencies, with a briefing and a fix pull request, turn on vulnerability watch for a repository.

Part of the ZeusQA changelog. Follow new releases with the RSS feed.

Try it on your own site

Paste a URL, describe the flow in plain English, and watch a real browser do it. Three runs free, no card.