Secure Hyperloop

VULNERABILITY INTELLIGENCE / RESEARCH GUIDE

CVE Radar: understand vulnerabilities before making decisions.

Search recent public security advisories, compare reported severity with evidence of exploitation, and open original records. Secure Hyperloop's free CVE Radar makes research more approachable without inventing risk scores.

Open the live CVE Radar

What can you find in the CVE Radar?

The CVE Radar brings together a recent window of reviewed GitHub Security Advisories and information from the CISA Known Exploited Vulnerabilities catalog. You can search by CVE identifier, advisory ID, package, or description and narrow findings by severity or known-exploited status.

A CVE identifier tracks a publicly disclosed vulnerability. A GHSA identifier tracks an advisory in GitHub's database. Some advisories include both; some GHSA records do not have a CVE ID.

Read CVSS and exploitation as different signals

CVSS describes the technical severity of a vulnerability according to a scoring framework. It is not a direct measure of whether attackers are exploiting that issue in your environment. CISA's KEV catalog identifies vulnerabilities with evidence of exploitation in the wild.

Use both: a critical CVSS finding may need urgent attention, but a KEV-listed vulnerability provides another strong prioritization signal. A vulnerability not matched in the currently available KEV data is not proof that exploitation is impossible.

A practical research workflow

  1. Search for a CVE, product or security advisory affecting your software inventory.
  2. Inspect the advisory's summary and any reported severity score.
  3. Check for a CISA KEV match and the date the vulnerability was added.
  4. Open the original security advisory and vendor guidance to confirm affected versions, mitigations and patches.
  5. Prioritize remediation based on asset exposure and business impact, not a dashboard label alone.

Coverage and freshness

The radar currently requests the latest reviewed GitHub advisories and the CISA KEV catalog from public sources when the website is opened or refreshed. The GitHub endpoint returns a limited recent set; it is not a complete archive of all CVEs. Source availability, browser networking and rate limits can affect freshness. The dashboard reports whether feeds are connected, partially available or offline.

For comprehensive CVE research, corroborate findings in the NIST National Vulnerability Database and official vendor advisories. This site is an educational research aid, not a vulnerability scanner.