High-Severity Share
Awaiting CVSS-rated records
Verified vulnerability intelligence, official cybersecurity advisories and trusted reporting on attacks, campaigns and threat research. Every item links to its original publisher and carries a clear evidence label.
Coverage is being verified against the synchronized NVD window.
Computed from the selected period. These gauges describe the dataset and do not represent organisational risk.
Awaiting CVSS-rated records
Awaiting CVSS vector data
Awaiting official reference data
Recent CVE records correlated with NVD severity, CISA exploitation evidence and FIRST EPSS forecasting.
Reloading checks for the newest data already published by the automated synchronization. It does not start a new source synchronization.
| CVE | Vendor / Product | Severity | CVSS | EPSS | KEV | Published | Sources |
|---|---|---|---|---|---|---|---|
Intelligence synchronization pending Verified records will appear after the first successful source synchronization. | |||||||
Action-focused security notices from government authorities and official product security teams. Items are source-attributed and link to the controlling publication. Selecting Nepal automatically opens the complete preserved NCSC Nepal archive because its source pages do not consistently expose machine-readable publication dates.
Only authoritative source items will be shown here.
Recent reporting on breaches, attacks, malware, campaigns and defensive research from national cyber authorities and first-party security research teams.
Trusted source items will appear after their scheduled synchronization.
Every record preserves attribution to its original publisher. The 15-minute cron heartbeat processes a limited number of due sources per run. Core vulnerability sources and most advisory and news feeds have four-hour refresh targets. NCSC Nepal has a 12-hour target. A failed source keeps its last verified cache and retries on the next heartbeat.
This product uses data from the NVD API but is not endorsed or certified by the NVD.
CVE® and the CVE List are copyright The MITRE Corporation and are used under the CVE Terms of Use. CVE is a trademark of The MITRE Corporation.
EPSS data is provided by FIRST with attribution. EPSS is a probability forecast and does not confirm exploitation.
Government and vendor advisory records retain source attribution and link to the controlling official publication. Innomerc summaries and correlation are independently prepared.
News cards store only limited factual metadata and short feed summaries. Full reports remain with NCSC UK, Google Threat Intelligence, Microsoft Security and Unit 42.
NCSC Nepal entries use concise English display labels, retain the original source title and always link to the controlling government publication. The complete preserved NCSC archive is available through the Nepal filter. Innomerc does not reproduce or translate the full advisory content. Rights holders may request correction or removal through our contact page.
No listed source endorses Innomerc Tech or Innomerc Threat Radar. When information differs, the linked original publication controls.
Clear answers about the signals, sources and limits of this public intelligence service.
It correlates public vulnerability records, exploitation signals, probability forecasts, official advisories and trusted threat reporting into one research view. It supports prioritisation but does not replace product-specific testing or professional risk assessment.
A vulnerability receives this label only when it appears in the CISA Known Exploited Vulnerabilities catalog.
No. EPSS estimates the probability of exploitation activity. It is a forecast, not evidence that a vulnerability has been exploited in a specific organisation.
Officially confirmed identifies content published by a government or national cyber authority. Research-reported identifies a first-party finding from the security research team named on the card. Neither label means that Innomerc independently verified every underlying event.
A lightweight cron heartbeat runs every 15 minutes and processes only sources that are due. Most sources target four hours, while NCSC Nepal targets 12 hours. Failed sources retry on the next heartbeat without deleting their last verified data.
Select Nepal under Cybersecurity Advisories. The Radar automatically switches to All and displays the complete preserved NCSC Nepal archive because the source does not consistently publish machine-readable dates.
The Radar uses the CVE Program, NIST NVD, CISA, FIRST EPSS, Microsoft MSRC, NCSC Nepal, Ubuntu Security Notices, NCSC UK, Google Threat Intelligence, Microsoft Security Blog and Unit 42. Original publications remain the controlling sources.
The public live view is intentionally limited to 30 days for vulnerabilities and 90 days for general advisories and news. This protects accuracy and performance on shared hosting and mobile devices. NCSC Nepal is handled separately through its complete preserved archive.
No. It is a public intelligence display and does not scan visitor devices, networks or applications.
Innomerc Cyber Threat Intelligence adds organisation-specific context, monitoring and analyst guidance to public intelligence.