MSRXTools / Vulnerabilities
CVE lookup
Everything about one CVE on one page: description, CVSS scores, exploitation in the wild (CISA KEV), EPSS probability, affected products and fixed package versions. Or search a product for its newest CVEs.
Runs on our server
Loading tool…
Good to know
- CVSS says how bad a vulnerability could be; EPSS says how likely it is to be attacked soon; KEV says it already is. Prioritise with all three.
- New CVEs often wait days or weeks for NVD analysis. The vendor's own score (CNA) and record from CVE.org fill the gap here.
- “Fixed in” versions come from OSV.dev and apply to that package ecosystem only. Vendor appliances list their fixes in the advisory references.
Related tools
Exploited vulnerabilities, last 365 days
Every vulnerability CISA confirmed as exploited in the wild in the past year, live: php2shell, React2Shell, WordPress, SharePoint, Citrix, Fortinet and more. Search and filter.Dependency vulnerability scanner
Drop in a lockfile (npm, yarn, pnpm, pip, Poetry, uv, Go, Cargo, Ruby, Composer, Maven, NuGet) and see every package with a known vulnerability, what is being exploited, and the version that fixes it.CVSS 4.0 and 3.1 calculator
Score a vulnerability with CVSS 4.0 or 3.1, explained in plain words, or paste a vector to see what it means.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.
Every vulnerability CISA confirmed as exploited in the wild in the past year, live: php2shell, React2Shell, WordPress, SharePoint, Citrix, Fortinet and more. Search and filter.Dependency vulnerability scanner
Drop in a lockfile (npm, yarn, pnpm, pip, Poetry, uv, Go, Cargo, Ruby, Composer, Maven, NuGet) and see every package with a known vulnerability, what is being exploited, and the version that fixes it.CVSS 4.0 and 3.1 calculator
Score a vulnerability with CVSS 4.0 or 3.1, explained in plain words, or paste a vector to see what it means.Website vulnerability scanner
Paste a URL. Get a SWOT security report scored out of 10: HTTPS, TLS, headers, cookies, content, DNS and email, with fixes.