Free CVE Database Search & CVSS / EPSS Calculator

Search over 250,000 Common Vulnerabilities and Exposures. Inspect CVSS v3.1 / v4.0 metrics, check CISA KEV exploitation status, assess EPSS weaponization probabilities, and download vendor remediation guides.

Search CVE Database
NIST NVD & CISA KEV SynchronizerSeverity: 8.1 High

$ wesecurex-cve --id CVE-2024-6387

[TITLE] OpenSSH Server (sshd) Remote Code Execution ('regreSSHion')

[CVSS v3.1] 8.1 (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)

[EPSS Score] 94.2% (Top 1% weaponization likelihood in next 30 days)

[CISA KEV] Added to CISA Known Exploited Vulnerabilities Catalog

[PATCH] Upgrade OpenSSH to version 9.8p1 or newer; set LoginGraceTime 0 as temporary workaround

Featured High-Impact CVE Analyses

CVE-2024-380779.8 Critical
Windows Remote Desktop Licensing

Remote code execution flaw allowing unauthenticated network attackers to execute arbitrary code.

CVE-2024-6387 (regreSSHion)8.1 High
OpenSSH Server (sshd)

Signal handler race condition in OpenSSH allowing unauthenticated root code execution on glibc Linux.

CVE-2024-45779.8 Critical
PHP-CGI Windows Argument Injection

Bypass of CVE-2012-1823 in Windows locales allowing unauthenticated remote command execution.

CVE-2023-48638.8 High
libwebp Heap Buffer Overflow

OOB write in libwebp rendering pipeline exploited in the wild to compromise browsers and native apps.

Need Automated Continuous Audits?

Upgrade from Single-Check to Automated DAST Vulnerability Scanner

Full-scale active fuzzing for OWASP Top 10, SQLi, XSS, SSRF & BOLA. Scale with automated schedules, Slack alerts, 150+ monthly credits, and compliance PDF exports on our paid tiers.

Headless Chromium SPA crawlerActive OWASP Top 10 fuzzingAutomated SQLi & XSS verification
Explore Paid Plans (from $9/mo)Launch Free Instant DAST Scan

Frequently Asked Questions

What is the difference between CVSS and EPSS scores?

CVSS (Common Vulnerability Scoring System) measures the theoretical severity and technical impact of a vulnerability (rated 0.0 to 10.0). EPSS (Exploit Prediction Scoring System) measures the empirical probability that a vulnerability will actually be exploited in the wild over the next 30 days (0% to 100%). Security teams prioritize flaws with both high CVSS and high EPSS.

How often is the WeSecureX vulnerability database updated?

WeSecureX synchronizes continuously with the NIST National Vulnerability Database (NVD), CISA Known Exploited Vulnerabilities (KEV) Catalog, MITRE CVE list, and vendor advisories (Ubuntu, Debian, Red Hat, GitHub Advisory Database) in near real-time.

What is CISA KEV and why does it mandate faster patching?

The CISA Known Exploited Vulnerabilities (KEV) catalog lists CVEs that have confirmed, active weaponized exploitation by cybercriminals or state-sponsored APT groups. Federal agencies and compliant organizations are legally required to patch KEV flaws within strict timelines (often 14 to 21 days).

How does WeSecureX automate CVE detection across web assets?

WeSecureX DAST & Surface Recon automatically detects software libraries, CMS platforms (WordPress, Drupal), web frameworks (Next.js, Laravel, Django), and server daemons (Nginx, Apache, OpenSSH), cross-referencing version strings against known CVEs with zero false-positive prioritization.