News
Vulnerability-Lookup 2.16.0 released
We’re delighted to announce the release of Vulnerability-Lookup 2.16.0 — packed with exciting new features! There should have been a video here but your browser does not seem to support it. What’s New Backend Introduced source-scoped kvrocks counters and source-scoped sorted indexes for vulnerability advisories by state (published, updated, reserved). (#211, PR #215) Examples of newly available queries:
September 19, 2025
Vulnerability Report - August 2025
All vulnerability reports Introduction This vulnerability report has been generated using data aggregated on Vulnerability-Lookup, with contributions from the platform’s community.
September 11, 2025
Two New feeds from CERT-FR (ANSSI) integrated in Vulnerability-Lookup
Two New feeds from CERT-FR are now integrated in Vulnerability-Lookup. Thanks to the great work of Raphaël Vinot, we now have two new feeders: CERT-FR Alerte, and CERT-FR Avis We were impressed by the excellent quality of these feeds, which allowed us to automatically extract impacted products (CPE vendors & names) and references to enrich our Kvrocks indexes. Correlations As with all our sources, advisories from CERT-FR are now automatically correlated with the other 27 (!) sources available on the CIRCL instance: https://vulnerability.circl.lu/about#sources
August 29, 2025
Vulnerability Report - July 2025
All vulnerability reports Introduction This vulnerability report has been generated using data aggregated on Vulnerability-Lookup, with contributions from the platform’s community.
August 23, 2025
Vulnerability-Lookup 2.15.0 released
We are excited to announce the release of Vulnerability-Lookup 2.15.0! This version brings new features, performance improvements, and several bug fixes. What’s New Detecting vulnerabilities known only through sightings The dashboard now highlights vulnerabilities discovered via our sighting tools, including scraping social networks, MISP, Nuclei templates, Shadowserver, Gist, and more. This gives you better visibility of unpublished advisories.
August 22, 2025
Vulnerability-Lookup 2.14.0 released
We’re glad to announce verion 2.14.0 of Vulnerability-Lookup! This version introduces several new features, enhancements, and fixes. What’s New New Watchlist View You can now view your monitored products and their related vulnerabilities directly in the browser, mirroring the structure of email notifications. Authenticated RSS/Atom feeds are available. (#181) There should have been a video here but your browser does not seem to support it. (enable audio in the screencast)
July 25, 2025
Vulnerability-Lookup 2.13.0 released
We’re excited to announce the release of Vulnerability-Lookup 2.13.0! This version introduces several new features, enhancements, and fixes. What’s New Support for VLAI Severity Classification in Chinese For vulnerabilities originating from the CNVD source, Vulnerability-Lookup now leverages the ML-Gateway to perform inference using the CIRCL/vulnerability-severity-classification-chinese-macbert-base model. (0b85b2d) More information is available on VLAI Severity Classification (preprint for the 25V4C-TC: 2025 Vulnerability Forecasting Technical Colloquia. Darwin College Cambridge, UK).
July 11, 2025
Vulnerability Report - June 2025
All vulnerability reports Introduction This vulnerability report has been generated using data aggregated on Vulnerability-Lookup, with contributions from the platform’s community.
July 7, 2025
Beyond CVEs: Mastering the Landscape with Vulnerability-Lookup
We had the pleasure of presenting at FIRST.org 2025, showcasing the Vulnerability-Lookup and GCVE.eu initiatives. Although CVEs are a cornerstone of vulnerability management, they often provide an incomplete view of the security landscape. Vulnerability-Lookup, a new open-source project developed by CIRCL, addresses this limitation by offering a comprehensive and enriched vulnerability intelligence platform that goes beyond basic CVE data. The platform aggregates and correlates information from diverse sources, including exploit databases, vulnerability scanners, product advisories, and community contributions. This integration delivers a more complete picture of vulnerability threats. We demonstrate how this enhanced level of detail empowers security professionals to move beyond simple patch management and adopt proactive, actionable, risk-based strategies.
June 25, 2025
Vulnerability-Lookup 2.12.0 released
We’re glad to announce the immediate availability of Vulnerability-Lookup version 2.12.0. What’s New CWE statistics Users can now access CWE occurrence statistics by year and optionally by month. The vulnerability detail page also displays the associated CWEs, with a direct link to the CWE detail page, which includes potential mitigations. New Kvrocks indexes are used for the lookup. (#140) by Léa This update enhances accessibility by making it easier for everyone to explore trends in common weaknesses over time directly through the web interface.
June 20, 2025