Live tracker of exploited and high-impact vulnerabilities
New vulnerabilities from CERTs, vendors, researchers and newsrooms in 180+ countries, checked automatically, with how widely each one is being exploited, warned about and covered.
Panic meter
ConnectingReading the room
- Researchers talking
- –
- News outlets covering
- –
- CERTs and agencies warning
- –
Distinct people and organisations discussing new vulnerabilities in the past 24 hours.
Trending now
Outbreak map
- Countries in the news
- –
- Agencies warning
- –
- Countries warned
- –
- Patient zero
- –
Daily panic
Vulnerabilities
Oracle vulnerabilities
Every Oracle vulnerability Vulnocalypse is tracking, newest first: whether it’s being exploited, which CERTs have warned about it and how widely it’s covered. Subscribe with the RSS feed for Oracle alerts.
- 30impact
Oracle E-Business Suite: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Oracle Diagnostics Inter
0 news outlets0 CERTs0 researchersCVSS 6.5 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA P
0 news outlets0 CERTs0 researchersCVSS 7.7 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported ver
0 news outlets0 CERTs0 researchersCVSS 7.6 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Sup
0 news outlets0 CERTs0 researchersCVSS 6.5 - 31impact
Oracle E-Business Suite: Vulnerability in the Oracle Engineering product of Oracle E-Business Suite (component: Change Management). Supported ve
0 news outlets0 CERTs0 researchersCVSS 5.3 - 52impact
OpenTelemetry: Unsafe Deserialization in RMI Instrumentation may Lead to Remote Code Execution
0 news outlets0 CERTs0 researchersCVSS 9.3 - 19impact
Oracle E-Business Suite: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported
0 news outlets0 CERTs0 researchersCVSS 3.1 - 25impact
Oracle E-Business Suite: Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: Internal Operatio
0 news outlets0 CERTs0 researchersCVSS 5.4 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).
0 news outlets0 CERTs0 researchersCVSS 6.5 - 25impact
Oracle E-Business Suite: Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). Supported versions that
0 news outlets0 CERTs0 researchersCVSS 5.4 - 38impact
Oracle E-Business Suite: Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Support
0 news outlets0 CERTs0 researchersCVSS 7.4 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle E-Business Suite Integrated SOA Gateway product of Oracle E-Business Suite (component: SOA P
0 news outlets0 CERTs0 researchersCVSS 7.5 - 38impact
Oracle E-Business Suite: Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported ve
0 news outlets0 CERTs0 researchersCVSS 7.4 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Internal Operations). Supported
0 news outlets0 CERTs0 researchersCVSS 6.5 - 30impact
Oracle E-Business Suite: Vulnerability in the iSupport product of Oracle E-Business Suite (component: Internal operations). Supported versions t
0 news outlets0 CERTs0 researchersCVSS 7.1 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers
0 news outlets0 CERTs0 researchersCVSS 6.5 - 38impact
Oracle E-Business Suite: Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported ve
0 news outlets0 CERTs0 researchersCVSS 7.4 - 16impact
Oracle E-Business Suite: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported
0 news outlets0 CERTs0 researchersCVSS 2.2 - 32impact
Oracle E-Business Suite: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers
0 news outlets0 CERTs0 researchersCVSS 7.5 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle Contract Lifecycle Management for Public Sector product of Oracle E-Business Suite (componen
0 news outlets0 CERTs0 researchersCVSS 7.2 - 32impact
Oracle E-Business Suite: Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: DB Privileges). S
0 news outlets0 CERTs0 researchersCVSS 7.8 - 38impact
Oracle E-Business Suite: Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported ve
0 news outlets0 CERTs0 researchersCVSS 7.4 - 33impact
Oracle E-Business Suite: Vulnerability in the Pasta product of Oracle E-Business Suite (component: Printing Engine). Supported versions that are
0 news outlets0 CERTs0 researchersCVSS 7.5 - 31impact
Oracle E-Business Suite: Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (component: Internal Operations). Supported
0 news outlets0 CERTs0 researchersCVSS 7.1 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). S
0 news outlets0 CERTs0 researchersCVSS 7.2 - 30impact
Oracle E-Business Suite: Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions
0 news outlets0 CERTs0 researchersCVSS 7.3 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Maintenance). Supported
0 news outlets0 CERTs0 researchersCVSS 7.5 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle HRMS (Republic of Korea) product of Oracle E-Business Suite (component: Korean Payroll). Su
0 news outlets0 CERTs0 researchersCVSS 6.5 - 36impact
Oracle E-Business Suite: Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported
0 news outlets0 CERTs0 researchersCVSS 6.8 - 32impact
Oracle E-Business Suite: Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported ver
0 news outlets0 CERTs0 researchersCVSS 7.5 - 25impact
Oracle E-Business Suite: Vulnerability in the Oracle Compensation Workbench product of Oracle E-Business Suite (component: Total Compensation Sta
0 news outlets0 CERTs0 researchersCVSS 5.4 - 33impact
Oracle E-Business Suite: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: HTML UI). Supported versions that ar
0 news outlets0 CERTs0 researchersCVSS 6.1 - 18impact
Oracle E-Business Suite: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Internal Operations). Supported v
0 news outlets0 CERTs0 researchersCVSS 3.1 - 25impact
Oracle E-Business Suite: Vulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: Internal Operations). Supported ve
0 news outlets0 CERTs0 researchersCVSS 5.4 - 32impact
Oracle E-Business Suite: Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Other Issues). Support
0 news outlets0 CERTs0 researchersCVSS 7.8 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supp
0 news outlets0 CERTs0 researchersCVSS 7.5 - 23impact
Oracle E-Business Suite: Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Support
0 news outlets0 CERTs0 researchersCVSS 4.3 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: Approvals). Supported versions th
0 news outlets0 CERTs0 researchersCVSS 6.1 - 37impact
Oracle E-Business Suite: Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Internal operations). Supported versio
0 news outlets0 CERTs0 researchersCVSS 7.4 - 33impact
Oracle E-Business Suite: Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported v
0 news outlets0 CERTs0 researchersCVSS 7.5 - 26impact
Oracle E-Business Suite: Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Web Utilities). Suppo
0 news outlets0 CERTs0 researchersCVSS 4.9 - 32impact
Oracle E-Business Suite: Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: Internal Operations). Support
0 news outlets0 CERTs0 researchersCVSS 7.1 - 32impact
Oracle E-Business Suite: Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Sup
0 news outlets0 CERTs0 researchersCVSS 7.1 - 20impact
Oracle E-Business Suite: Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported
0 news outlets0 CERTs0 researchersCVSS 3.3 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). S
0 news outlets0 CERTs0 researchersCVSS 7.2 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported
0 news outlets0 CERTs0 researchersCVSS 6.5 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations).
0 news outlets0 CERTs0 researchersCVSS 7.5 - 31impact
Oracle E-Business Suite: Vulnerability in the Oracle Bills of Material product of Oracle E-Business Suite (component: Internal Operations). Supp
0 news outlets0 CERTs0 researchersCVSS 7.2 - 34impact
Oracle E-Business Suite: Vulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content Manager Catalog). Supported
0 news outlets0 CERTs0 researchersCVSS 7.2 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component: ADADMIN). Supported versions
0 news outlets0 CERTs0 researchersCVSS 7.5 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Support
0 news outlets0 CERTs0 researchersCVSS 7.6 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Documents). Supported
0 news outlets0 CERTs0 researchersCVSS 7.5 - 29impact
Oracle E-Business Suite: Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions
0 news outlets0 CERTs0 researchersCVSS 7.0 - 29impact
Oracle E-Business Suite: Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). S
0 news outlets0 CERTs0 researchersCVSS 6.7 - 25impact
Oracle E-Business Suite: Vulnerability in the Oracle Trade Management product of Oracle E-Business Suite (component: Claim LOV). Supported versi
0 news outlets0 CERTs0 researchersCVSS 5.4 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle US Federal Human Resources product of Oracle E-Business Suite (component: Internal Operation
0 news outlets0 CERTs0 researchersCVSS 6.5 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers
0 news outlets0 CERTs0 researchersCVSS 7.5 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal Operations). Supporte
0 news outlets0 CERTs0 researchersCVSS 6.5 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Support
0 news outlets0 CERTs0 researchersCVSS 7.7 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle HRMS (India) product of Oracle E-Business Suite (component: Indian Payroll). Supported vers
0 news outlets0 CERTs0 researchersCVSS 6.5 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations).
0 news outlets0 CERTs0 researchersCVSS 7.5 - 32impact
Oracle E-Business Suite: Vulnerability in the Oracle Partner Management product of Oracle E-Business Suite (component: Internal Operations). Sup
0 news outlets0 CERTs0 researchersCVSS 7.1 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle Capacity product of Oracle E-Business Suite (component: Internal Operations). Supported ver
0 news outlets0 CERTs0 researchersCVSS 7.6 - 32impact
Oracle E-Business Suite: Vulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component: Internal Operations).
0 news outlets0 CERTs0 researchersCVSS 7.1 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Product Diagnostic Tools).
0 news outlets0 CERTs0 researchersCVSS 6.5 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component: Role Summary). Supported
0 news outlets0 CERTs0 researchersCVSS 7.7 - 38impact
Oracle E-Business Suite: Vulnerability in the Oracle Mobile Application Server product of Oracle E-Business Suite (component: MWA Terminal Server
0 news outlets0 CERTs0 researchersCVSS 7.4 - 37impact
Oracle E-Business Suite: Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Support
0 news outlets0 CERTs0 researchersCVSS 7.4 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item Catalog). Supported version
0 news outlets0 CERTs0 researchersCVSS 7.7 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All Miscellaneous EDI Issues). S
0 news outlets0 CERTs0 researchersCVSS 7.2 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported ve
0 news outlets0 CERTs0 researchersCVSS 7.2 - 26impact
Oracle E-Business Suite: Vulnerability in the Oracle Order Management product of Oracle E-Business Suite (component: Transaction Entry). Support
0 news outlets0 CERTs0 researchersCVSS 5.3 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal Operations). Supported ve
0 news outlets0 CERTs0 researchersCVSS 6.5 - 33impact
Oracle E-Business Suite: Vulnerability in the Installed Base product of Oracle E-Business Suite (component: Create Item Instance). Supported ver
0 news outlets0 CERTs0 researchersCVSS 7.6 - 32impact
Oracle E-Business Suite: Vulnerability in the Oracle Report Manager product of Oracle E-Business Suite (component: Internal Operations). Support
0 news outlets0 CERTs0 researchersCVSS 7.1 - 30impact
Oracle E-Business Suite: Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities). Supported versions
0 news outlets0 CERTs0 researchersCVSS 7.1 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Internal Operations). S
0 news outlets0 CERTs0 researchersCVSS 6.6 - 31impact
Oracle E-Business Suite: Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported ve
0 news outlets0 CERTs0 researchersCVSS 7.1 - 33impact
Oracle E-Business Suite: Vulnerability in the iProcurement product of Oracle E-Business Suite (component: Requisition Management). Supported ver
0 news outlets0 CERTs0 researchersCVSS 7.5 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (component: PO View Document). Supported vers
0 news outlets0 CERTs0 researchersCVSS 6.5 - 34impact
Oracle E-Business Suite: Vulnerability in the Order Capture product of Oracle E-Business Suite (component: Internal Operations). Supported versi
0 news outlets0 CERTs0 researchersCVSS 7.2 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger Update Transform, Repor
0 news outlets0 CERTs0 researchersCVSS 7.2 - 26impact
Oracle E-Business Suite: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers
0 news outlets0 CERTs0 researchersCVSS 5.4 - 19impact
Oracle E-Business Suite: Vulnerability in the Oracle Concurrent Processing product of Oracle E-Business Suite (component: Concurrent Requests).
0 news outlets0 CERTs0 researchersCVSS 3.1 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle Email Center product of Oracle E-Business Suite (component: Message Component). Supported v
0 news outlets0 CERTs0 researchersCVSS 6.5 - 38impact
Oracle E-Business Suite: Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Support
0 news outlets0 CERTs0 researchersCVSS 7.4 - 22impact
Oracle E-Business Suite: Vulnerability in the Production Scheduling product of Oracle E-Business Suite (component: Internal Operations). Support
0 news outlets0 CERTs0 researchersCVSS 4.5 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component: Java Server Issues).
0 news outlets0 CERTs0 researchersCVSS 7.5 - 29impact
Oracle E-Business Suite: Vulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component: Internal Operations). S
0 news outlets0 CERTs0 researchersCVSS 7.0 - 25impact
Oracle E-Business Suite: Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Mobile Applications). Supported ve
0 news outlets0 CERTs0 researchersCVSS 5.4 - 36impact
Oracle Corporation Oracle: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE
0 news outlets0 CERTs0 researchersCVSS 7.8 - 32impact
Oracle E-Business Suite: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers
0 news outlets0 CERTs0 researchersCVSS 7.5 - 34impact
Oracle E-Business Suite: Vulnerability in the Oracle Project Contracts product of Oracle E-Business Suite (component: Internal Operations). Supp
0 news outlets0 CERTs0 researchersCVSS 7.7 - 29impact
Oracle E-Business Suite: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers
0 news outlets0 CERTs0 researchersCVSS 7.0 - 30impact
Oracle E-Business Suite: Vulnerability in the Applications DBA product of Oracle E-Business Suite (component: Internal Operations). Supported ve
0 news outlets0 CERTs0 researchersCVSS 6.5 - 30impact
Oracle E-Business Suite: Vulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business Suite (component: LOV)
0 news outlets0 CERTs0 researchersCVSS 6.8 - 33impact
Oracle E-Business Suite: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal Operations). Supported vers
0 news outlets0 CERTs0 researchersCVSS 7.5 - 25impact
Oracle E-Business Suite: Vulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll Year End). Supported ve
0 news outlets0 CERTs0 researchersCVSS 5.4 - 31impact
Oracle E-Business Suite: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Payroll). Supported versions that ar
0 news outlets0 CERTs0 researchersCVSS 6.6 - 29impact
Oracle E-Business Suite: Vulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Element Types, Links, Entries). Supp
0 news outlets0 CERTs0 researchersCVSS 6.5
Sources
CERTs and cyber security agencies, national news outlets in every country we could find, vendor advisories, research blogs and the security press. Every source is polled on its own schedule, by RSS where possible and by headless browser where not. Broken feeds are repaired automatically; anything still failing is listed here.
Sources admin
Enter the admin token from your server’s .env file (ADMIN_TOKEN). It’s sent once to start a session and isn’t stored in this browser.
Recent sign-in activity
Pipeline, last 24 hours
How many articles each type of source produced, how many were read in full, and how many were linked to a vulnerability. “Unmatched” are articles that look like vulnerability news but couldn’t be linked; the reasons and examples show what to improve.
Add a source
Coverage
All sources
How it works
Vulnocalypse reads vulnerability registries, government CERTs, vendor advisories, research blogs and newsrooms around the clock, links everything that refers to the same vulnerability, and only shows what passes automated validation.
What gets into the feed
A vulnerability is admitted when it is corroborated, either through a published CVE record or through at least two independent organisations, and its impact score reaches 60 out of 100. Anything listed in a known-exploited catalogue is admitted regardless of score. Once admitted, an entry stays, so the feed never flickers.
Impact score
Up to 30 points for severity (CVSS, or inferred from the description when no score exists), 25 for exploitation, 15 for blast radius by product category (edge devices and identity systems score highest), 15 for attention from news, CERTs and researchers, 10 for EPSS exploitation probability, and 5 for pre-authentication. Every entry shows its breakdown.
Exploitation status
We only mark something exploited when there is a citable source: a KEV listing (CISA, VulnCheck or ENISA), a statement from the vendor or a government agency, CISA’s SSVC assessment, or at least two independent organisations reporting attacks with no later denial from the vendor. Phrases like “no evidence of exploitation” are detected and count against a claim.
Validation, without humans
Identifiers are checked against the CVE List; rejected or non-existent CVEs are dropped. Titles, vendors, products and CVSS come from the official record rather than from headlines. Wire stories syndicated across outlets are counted once. Roundups that list dozens of CVEs only count the ones they actually discuss. Reports without an identifier wait for corroboration and are merged into the right CVE once one is assigned. Every decision is logged and shown on each vulnerability’s page.
The Panic meter
Three numbers over the past 24 hours, counting only vulnerabilities first seen in the last 14 days: distinct researchers posting about them, distinct news organisations covering them, and distinct CERTs and agencies warning about them. Each is ranked against its own 90-day history, weighted 35% CERTs, 35% news and 30% researchers, and stretched so the top levels stay rare. Each day’s score is split across the vulnerabilities that caused it.
The outbreak map
The map shows two things for every country: how many national news outlets are covering new vulnerabilities, and whether the national CERT or cyber security agency has issued a warning. National outlets are read directly, through local-language Google News editions, and through GDELT, which attributes coverage in over 100 languages to its source country. International security press is left off the map so it shows national attention, not trade coverage. Replay the spread to watch a vulnerability travel from patient zero across the world.
Subscribe
- Everything (RSS), also as Atom and JSON Feed
- Exploited only and KEV-listed only
- Updates: new KEV listings, exploitation changes and public exploits for tracked vulnerabilities
- Per vendor:
/feed.xml?vendor=Fortinet, or by score:/feed.xml?min_score=80
Use it from an AI agent
Vulnocalypse runs a read-only MCP server. Add it to any MCP client as a remote server:
https://vulnocalypse.com/mcpTools: get_feed, search_vulnerabilities, get_vulnerability, check_exposure (send the products you run and get back anything that affects them), get_panic and explain_panic_day. The JSON API is documented at /api/docs.