The Reference dataset for software vulnerability research.
Explore, benchmark, and analyze — CVEs spanning 1999 to 2026 across — vendors and — products with CVSS and EPSS scoring, linked GitHub and Linux-kernel patches, and AI-powered detection on your own code.
No signup · Open dataset · Updated continuously from CVE, GitHub & Linux-kernel patch data
Everything you need to benchmark risk
A complete workflow from broad analytics to the exact line of code that fixed a vulnerability.
Interactive CVE Analytics
Visualize 27 years of vulnerability data through interactive dashboards broken down by type, vendor, product, CVSS, EPSS, and publication date.
Learn moreAI-Powered Detection
Upload a file or an entire folder and let our Gemini-backed engine scan your own code for vulnerability patterns, with explainable, actionable findings.
Learn morePatch-Level Intelligence
Trace each CVE to its real fix across linked GitHub commits and Linux-kernel patches — down to the changed file and the exact function.
Learn moreSeverity & Exploitability Scoring
Benchmark risk with CVSS base scores and EPSS exploit-likelihood data, so you prioritize what is actually exploitable — not just what is reported.
Learn moreSlice the data any way you need
Every CVE is navigable across seven analytical dimensions.
From query to fix in three steps
Query the dataset
Search or filter the full CVE dataset by any dimension — type, vendor, product, score, or date.
Analyze severity & exploitability
Read CVSS base scores and EPSS exploit-likelihood, and spot trends across 27 years of data.
Drill to patch & detection
Open the GitHub or Linux-kernel patch that fixed it, then scan your own code with AI.