Searching through 3M+ vulnerabilities and exploits
Every vulnerability. One database.
Products
Vulnerability IntelligenceQuery the Vulners database to get enriched context for CVE, including all metrics, exploitability, and correlated real-world risk signals.
Learn moreAssessmentInstantly turn software inventories or host data into vulnerability reports. Make vulnerability assessment a seamless feature in your product.
Learn moreDatasetsFetch the connected world of vulnerability intelligence. Export full datasets and see how CVEs, advisories, exploits, and observations link together.
Learn moreAlertsStay updated about vulnerabilities that matter to you with real-time push and pull notifications. Trigger actions automatically when new vulnerabilities appear.
Learn moreExploitsTrack fresh PoCs and wild exploitation listings as they appear. Instantly see if they can affect your assets and what needs to be prioritized for remediation.
Learn moreMCPUse Vulners MCP to power your AI agents. Break through the LLM knowledge cut-off and use real-time vulnerability insight.
Learn moreSolutions
White LabelBuild Faster, Earn More, and Innovate Freely
Learn moreData FeedsBring Vulnerability Intelligence Into Your Stack
Learn moreMCP for AI AgentsShip Trustworthy Security Answers, Fast
Learn moreSecurity Automation SDKProduct-Ready Context from 200+ Sources
Learn moreExploits & KEVPrioritize What’s Actively Dangerous
Learn moreResources
Blog
May 21 • 8 min. read
View more articlesLibrary Audit: from a PURL to vulnerabilities and compromisesMany npm and PyPI compromises never get a CVE — the package is yanked and an OSV advisory is shipped instead. Library Audit takes raw PURLs from any ecosystem to flag CVE-tracked vulnerabilities and registry-yanked compromises before `pip install`, not the morning after.
Apr 19 • 5 min. readYour asset inventory doesn't wait for NVDNIST moved the NVD to risk-based enrichment on April 15 — a quarter of recent CVEs now arrive Not Scheduled. Vulners has been filling the CPE gap since February 2024. Here is the four-source configuration layer and how to use it.
Mar 4 • 6 min. readSBOM Audit: from a file upload to a prioritized vulnerability reportYou have an SBOM. Now what? Vulners SBOM Analyzer turns a standard SPDX or CycloneDX file into a vulnerability report enriched with CVSS, EPSS, AI Score, exploit references, and fix versions — in the browser or via a single API call.