Vulns
A free, public vulnerability feed from Fencer. One entry per vulnerability, merged from the public sources listed
here and flagged by what attackers exploit. No account, no API key.
Data from the CVE Program, GitHub, OSV, NIST NVD, CISA, ENISA, FIRST, OffSec, Rapid7, ProjectDiscovery,
the Haskell, R Consortium, OCaml and Julia security advisory databases, Bitnami, Anchore, Debian, Red Hat (CC BY 4.0), SUSE, openSUSE, AlmaLinux, Rocky Linux, Canonical (Ubuntu), Alpine Linux, Microsoft (Azure Linux, MIT), the Arch Linux security team, CISA's ICS and IT advisories and Red Hat VEX (CC BY 4.0) under their respective terms; Ubuntu and Alpine fixes are
CC BY-SA 4.0. This product uses data from the NVD API but is not endorsed or certified by
the NVD. ATT&CK technique mappings by the MITRE Center for Threat-Informed Defense (Apache-2.0); © 2026 The MITRE Corporation, reproduced
and distributed with the permission of The MITRE Corporation; ATT&CK® is a registered trademark of The MITRE Corporation. Ransomware
groups from the Ransomware Vulnerability Matrix by BushidoUK,
CC BY 4.0, reformatted per
CVE. Maintainers' repository security advisories from GitHub: facts and a link only, the advisories stay with their authors on GitHub. Zero-day listings from Google Project Zero's 0day In-the-Wild tracker. End-of-life data from endoflife.date (MIT).