Terms of Service & Disclaimer

Vulnerability records on LuminCVE (CVE ids, descriptions, CVSS scores and vectors, weakness ids and references) come from the National Vulnerability Database (NVD), run by the U.S. National Institute of Standards and Technology (NIST), through its public CVE API 2.0.

We fetch new CVEs on a schedule and store a copy. That copy can lag behind the NVD, and the NVD itself can lag behind vendor disclosures. Scores and descriptions may change after we fetch them. For the authoritative record, follow the NVD link on each CVE page.

We only keep CVEs with a CVSS base score of 7.0 or higher in the main stream. A CVE that isn't listed may still affect you.

The risk summary, root cause, affected versions, remediation steps and shell commands on each CVE page are generated by an AI model from the NVD record. They exist to speed up triage. They can be incomplete, out of date, or wrong.

• Test before you run. Check every patch and command in a staging environment before running it in production.
• Verify with the vendor. Confirm affected versions and fixed releases against the vendor advisory linked in the references.
• Use your own judgement. A CVSS score doesn't know about your network. Whether a CVE matters to you depends on your exposure and compensating controls.

LuminCVE assumes no liability for downtime, data loss, misconfiguration, security incidents or any other damage that results from acting, or not acting, on information shown on this site.

This product uses data from the NVD API but is not endorsed or certified by the NVD.

LuminCVE has no affiliation with NIST, the NVD, MITRE or the CVE Program. "CVE" is a registered trademark of The MITRE Corporation. NVD data is provided by NIST at nvd.nist.gov.

The site and everything on it are provided "as is" and "as available", without warranties of any kind, express or implied, including accuracy, completeness, fitness for a particular purpose and non-infringement. We don't guarantee the site will be available or error-free. To the fullest extent the law allows, our total liability for any claim related to the site is zero.

Use the site for defending systems you own or are authorised to protect. Don't:

• scrape the site or hammer the search and lookup endpoints (we rate-limit them);
• try to break, overload or get around the site's security;
• use the information to attack systems you have no permission to test.

Alerts are a best-effort service. We may delay, batch or stop them at any time, and they should never be your only source of vulnerability notifications. How we handle your address is covered in the Privacy Policy.

We may update these terms. The date at the top shows the latest version, and continuing to use the site means you accept it. Questions: contact@lumincve.com. Spotted a wrong triage? Tell us at security@lumincve.com and we'll fix it.