CVE coverage
Every CVE we process, and what you have against it
We pull new CVEs from NVD every 15 minutes, and update CISA KEV and EPSS as they publish. Every hour we assess what came in and, where we can, build a detection rule, a check for the agent or a mitigation. This list shows every CVE we have assessed and where it stands, so you know what LogPulse watches for you.
Updated every hour
A rule only counts once it is tested and published. How a rule works is not on this page: the rules run in your own LogPulse environment.
We build every detection with great care, but no two environments are the same. Log sources, parsing and configuration differ, so test a detection in your own environment before you rely on it.
What the columns mean
- CVSS
- How severe the vulnerability is, on a scale from 0 to 10, as NIST NVD scores it. From 9 up it is critical.
- EPSS
- The chance that the vulnerability is exploited in the next 30 days, calculated by FIRST. A low CVSS with a high EPSS still deserves attention.
- CISA KEV
- The US government's list of vulnerabilities that are known to be exploited in the wild. We pick these up first.
- Detection rule
- A tested search that raises a notable as soon as someone tries to exploit the vulnerability in your logs. Once published it reaches every LogPulse environment within 15 minutes.
- Agent check
- A read-only check the LogPulse agent runs on every server and workstation. It sees whether the vulnerable version is installed, so you know where to patch.
- Mitigation
- The steps that take the risk away, with the vendor's advisory as the source. You find them on the CVE's own page.
A published detection rule sees exploitation attempts.
Exploitation does not show in logs, but the agent finds the vulnerable version on your hosts.
Assessed, and a rule is being built.
Exploitation leaves no trace in logs. Patching or applying the mitigation is the way here.
In the news and not assessed yet. We take these first.
See which CVEs affect your own systems
In LogPulse the Detection Hub puts this list next to the software on your own servers and workstations. You see which CVEs are about you and switch on the rule where it is needed.