I built this for myself. I wanted one clean place to see every published CVE, ordered by what actually matters, instead of a firehose I’d have to filter by hand. It started as a side project, half for fun and half because I was serious about having it. In November 2026 I opened it up to everyone.
What it does
- One list of every published CVE, updated every few minutes, so new ones show up quickly.
- Ranked by what to fix first. Things that are being exploited, critical and still unpatched go on top. You can also sort by newest, most critical, most likely to be exploited, or whether a fix exists.
- Plain-language pages. Each CVE has a short “at a glance” reading and a description of the attack in ordinary words, so you don’t need to decode a score to understand it.
- Fix status at a glance, so you can tell what has a patch or advisory and what doesn’t.
- A silly side. Every CVE gets its own “I wake up” meme image, because security news is exhausting and a little humour helps.
Where the data comes from
All public sources: the official CVE program, the US National Vulnerability Database, CISA’s list of known exploited vulnerabilities and FIRST’s exploit-likelihood scores. I don’t add secret sauce on top of them. The value is in putting them in one place, sorted sensibly and explained simply.
My own decision engine, Zig, helps classify what kind of flaw it is and what software is affected.
A note
It’s an independent project and isn’t affiliated with the CVE program or its sponsors.
I’d love to hear what’s useful, what’s missing, or what annoys you. If you have an idea or want to build something related, get in touch.