Security
CISA's Known Exploited Vulnerabilities catalogue: flaws attackers use now, with the date by which US agencies must patch them.
Look up a CVE
Severity (CVSS), the probability of exploitation in the next 30 days (EPSS) and whether attackers already use it (CISA KEV).
Sources: NIST NVD, FIRST EPSS, CISA KEV. CVSS says how bad a flaw is, EPSS how likely it is to be used. Patch first what is both severe and likely, and everything in KEV.
Loading…