Stack check · CISA KEV · nothing stored
Type the vendors and products you run. You'll see every vulnerability in them that attackers are confirmed to be exploiting, newest first, and you can subscribe to new ones.
Vendor ("Microsoft") matches all its products; product ("Exchange") matches just that one. Several words must all match ("cisco ios"). Your list isn't stored. It only lives in this page's address, so you can bookmark or share the result.
A personal feed of new confirmed-exploited CVEs for exactly these products. Add it to Outlook, Feedly, Slack (/feed subscribe), or any RSS reader.
The weekly threat brief, with exploited CVEs for exactly these products first. One email on Fridays, confirm by email, unsubscribe any time. Your address and product list are stored only to send you the brief.
Prefer push notifications? The Gociux app alerts you on your phone, with your list kept on the device.
Being on this list means the product is targeted, not that you're vulnerable. Versions, patches and exposure decide that. We can verify it for you.
How it works. Your terms are matched against the vendor and product of every entry in CISA's Known Exploited Vulnerabilities catalog, the list of CVEs with reliable evidence of exploitation in the wild. Exploitation probability is FIRST's EPSS (shown for the 100 most recent matches). Matching is by name, so check spelling if a product shows 0, and remember KEV only lists what CISA has confirmed. A product with no KEV entries can still have serious unpatched CVEs. Data is refreshed hourly; requests go to gociux.com only and nothing you enter is logged or kept.