What is the CVE Check from n'guard.swiss?

The CVE Check is a free tool that lets you see which vulnerabilities are currently being actively exploited. It is based on global data.

How do I search for a vulnerability in the CVE Check?

You can search by CVE ID, vendor or product. The results are enriched with KEV, EPSS and CVSS.

Does the CVE Check cost anything?

No, according to the page description, the CVE Check is free of charge.

Who is behind the CVE Check?

The CVE Check comes from n'guard.swiss, the cyber security brand of n'cloud.swiss AG in Seengen. You can get in touch by email at info@nguard.swiss or by phone on +41 62 511 82 82.

CVE Intelligence

ENEnglish

LiveGlobal vulnerability landscape

CVE Intelligence

Which flaws are being exploited right now?

Check Sie eine CVE-ID oder suchen Sie nach Hersteller und Product. Die CVE Intelligence zeigt, ob eine Vulnerability weltweit aktiv angegriffen wird, wie wahrscheinlich ein Angriff ist und wie dringend Sie handeln sollten.

Examples:

actively exploited vulnerabilities

newly exploited in 30 days

new critical CVEs in 7 days

Search result

Actively exploited

Entries in the CISA KEV catalogue, newest first

CVE	Product	Vulnerability	Added	EPSS

Recently published

Vulnerabilities from the NVD in the last four months, newest first

CVE	Product	Description (English)	Published	CVSS	EPSS

Global situation

What attackers are exploiting right now.

Recently confirmed as actively exploited

Latest entries in the CISA KEV catalogue, with the patch deadline for US federal agencies

CVE	Product	Vulnerability	Added	Deadline	EPSS
Loading …

Newly exploited vulnerabilities per month

Additions to the CISA KEV catalogue, last 12 months

Most affected vendors

New KEV entries from the last 90 days

Early warning

Where the next attack is likely.

New critical vulnerabilities

CVSS 9.0 or higher, published in the last 7 days (NVD)

CVE	Product	CVSS	Date
Loading …

Highest probability of exploitation

Recent CVEs with the highest EPSS score for the next 30 days

How to read the result

Three questions, three sources.

Is she being exploited?

The US agency CISA’s Known Exploited Vulnerabilities Catalog lists vulnerabilities for which active attacks have been proven. If a CVE is there, it takes precedence over everything else.

How likely is an attack?

FIRST’s EPSS daily estimates for each CVE the probability that it will be exploited in the next 30 days. Values over 10% are high, over 50% are very high.

How severe is it?

The NVD’s CVSS score describes the potential damage on a scale from 0 to 10. From 9.0 a vulnerability counts as critical; it can then usually be exploited remotely without authentication.

Grenzen der CVE Intelligence

Die CVE Intelligence zeigt die öffentlich bekannte Lage. Ob eine Vulnerability in Ihrer Umgebung tatsächlich ausnutzbar ist, hängt von Version, Konfiguration und Erreichbarkeit ab. Das klärt ein Penetration test oder die laufende Überwachung durch einen SOC.

FAQ

Answers on CVE, KEV and EPSS.

What is a CVE?

CVE stands for Common Vulnerabilities and Exposures. Every publicly known software or hardware vulnerability receives a unique identifier such as CVE-2024-3400. Manufacturers, authorities and security teams around the world are talking about the same gap.

Which vulnerabilities should I patch first?

First, everything that’s in the CISA Catalog of Actively Exploited Vulnerabilities (KEV). Then vulnerabilities with a high probability of exploitation (EPSS) and only then by CVSS value. A high CVSS value alone says nothing about whether a vulnerability is actually being attacked.

Why a US source for Swiss companies?

Attackers exploit the same vulnerabilities worldwide. The KEV catalogue is the most comprehensive public list of vulnerabilities known to be exploited, and Switzerland’s Federal Office for Cybersecurity (BACS) also uses it as a reference. What is listed there is attacked in Switzerland too.

Where does the data come from and how current is it?

From CISA’s Known Exploited Vulnerabilities Catalog, FIRST’s Exploit Prediction Scoring System and NIST’s National Vulnerability Database. The picture is updated every three hours, individual lookups are cached for six hours. No personal data is stored.

If your systems are affected

The list knows the flaws. We check whether they are open in your environment.

A penetration test from n'guard shows which vulnerabilities in your environment are actually exploitable. The Managed SOC detects attacks on it around the clock.

Request a penetration test Discover Managed SOC