Sources available in Vulnerability-Lookup project
Sources and Feeders Available in Vulnerability-Lookup
National Vulnerability Databases
- NVD CVE importer (API 2.0), with Fraunhofer FKIE NVD JSON feeds
- China National Vulnerability Database (CNNVD)
- JVN iPedia – Japanese vulnerability countermeasure database
- CERT-FR Alerts and Advisories
Community & Open Source Databases
- CVE Project – cvelist
- Cloud Security Alliance – GSD Database
- GitHub Advisory Database
- PySec Advisory Database
- OpenSSF Malicious Packages
- Moksha – Tor-based vulnerability feed (disabled by default)
CSAF-based Sources
- ABB
- ads-tec Industrial IT GmbH
- AUMA Riester GmbH & Co. KG
- Beckhoff Automation GmbH & Co. KG
- Bender GmbH & Co. KG
- Carlo Gavazzi Automation
- CERT-Bund
- CERT@VDE
- CISA
- Cisco
- CODESYS GmbH
- Endress+Hauser AG
- Festo SE & Co. KG
- Frauscher Sensortechnik GmbH
- Helmholz GmbH & Co. KG
- HIMA Paul Hildebrandt GmbH
- ifm electronic GmbH
- Janitza electronics GmbH
- Lenze SE
- MB connect line GmbH
- Mettler-Toledo GmbH
- Microsoft
- Miele & Cie KG
- Murrelektronik GmbH
- NCSC-NL
- Nozomi Networks
- Open-Xchange
- OpenSuse
- Pepperl+Fuchs SE
- Phoenix Contact GmbH & Co. KG
- Pilz GmbH & Co. KG
- Red Hat
- Sauter AG
- Schneider Electric
- Sick
- Siemens
- SMA Solar Technology AG
- Suse
- SWARCO TRAFFIC SYSTEMS GmbH
- Trumpf SE + Co. KG
- TuxCare
- VARTA Storage GmbH
- WAGO GmbH & Co. KG
- Weidmueller Interface GmbH & Co. KG
- Welotec GmbH
- Wiesemann & Theis GmbH
OSV Sources
- AlmaLinux
- Bitnami Vulnerability Database
- CleanStart OS packages
- Drupal Advisory Database
- Haskell Security Advisories
- OCaml Security Advisories
- OSS-Fuzz
- Rocky Linux
- RustSec Advisory Database
- Ubuntu Security Notices
Specialized Sources
- AVID – AI Vulnerability Database
- VARIoT – IoT vulnerabilities database
- Tailscale Security Bulletins
Enrichment Sources
- CISA ADP Vulnrichment – additional CVE analysis from CISA’s Authorized Data Publisher
- Red Hat CSAF VEX – product impact and remediation status
- SUSE CSAF VEX – product impact and remediation status
- Microsoft Security Response Center CSAF VEX – product impact and remediation status
Weakness & Attack Pattern Catalogs
Known Exploited Vulnerabilities Catalogs
Vulnerability-Lookup federates KEV catalogs using the GCVE BCP-07 format, enabling entries from different publishers to be compared side by side.
- CIRCL
- CISA Known Exploited Vulnerabilities Catalog (publisher’s catalog)
- ENISA EUVD / EU CSIRTs Network (publisher’s catalog)
- The Shadowserver Foundation
- Previdian (publisher’s website, formerly KEVIntel)
If you know additional sources or feeders to be added in Vulnerability-Lookup, don’t hesitate to open an issue.