Look up vulnerabilities across multiple sources
Correlate vulnerability advisories from national databases, CSAF providers and community feeds, link them to real-world sightings, and coordinate their disclosure — all in one place.
Trending over the last month
Sighting types
- Seen
- The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed
- The vulnerability has been validated from an analyst's perspective.
- Exploited
- The vulnerability was observed as exploited by the user who reported the sighting.
- Published Proof of Concept
- A public proof of concept is available for this vulnerability.
Ghost CVEs
All sightingsA Ghost CVE is a vulnerability identifier that appears in the wild — through GitHub Gists, security advisories, social media, or RSS feeds — yet remains marked as RESERVED or NOT_FOUND in the official CVE registries like NVD and MITRE. Also called "RESERVED BUT PUBLIC" CVEs, these ghosts highlight potential security blind spots where vulnerabilities are discussed publicly before official disclosure. They are detected from the sightings collected from these sources; the most recently sighted come first.
No Ghost CVE sighted recently.
| Identifier | Sightings | Sighted by | Last sighted |
|---|
Nothing to display yet.
The local copy of the GCVE registry is empty.
Nothing to display yet.