Look up a company, product, or open-source package in public vulnerability records. Known-exploited entries are the ones already used in real attacks.
Records read here
- NVD — U.S. National Vulnerability Database
- CISA KEV — known exploited vulnerabilities
- EUVD — ENISA European vulnerability database
- OSV — open-source package advisories
- GitHub Security Advisories
- EPSS — chance of exploitation in 30 days
Opened on their own sites
- Censys — exposed hosts
- Shodan — internet-connected devices
- Exploit-DB — public exploit index
- crt.sh — certificates, when you search a domain
Try a search
Glassline reads public advisories only. It does not scan networks, run exploits, or retrieve stolen data.