Ares CVE Tracker

Ares CVE Tracking puts enterprise-grade vulnerability intelligence directly in your hands. Built for security professionals, SOC analysts, and IT administrators who need to act fast when new threats emerge. REAL-TIME THREAT SCORING Every CVE is automatically scored using a composite threat model — not just CVSS. Ares weighs CVSS severity, CISA Known Exploited Vulnerability (KEV) status, EPSS exploitation probability, proof-of-concept availability, remote exploitability, and CWE risk class into a single 0–100 Threat Score. Results are classified into five actionable tiers: · IMMINENT (≥ 80) — Active exploitation likely · CRITICAL (≥ 60) — High-priority remediation · ELEVATED (≥ 40) — Monitor and plan response · MODERATE (≥ 20) — Standard patch cadence · LOW — Informational VENDOR-FOCUSED FILTERING Track only what matters to your environment. Ares ships with preset bookmarks for the most commonly targeted vendors — Cisco, Fortinet, Palo Alto, F5, Citrix, Juniper — and lets you add any custom CPE vendor keyword with smart autocomplete suggestions drawn from live NVD data. WATCH LIST Bookmark individual CVEs to a personal watch list and monitor them across refreshes. Ideal for tracking CVEs tied to open tickets or active incident response. THREAT INTELLIGENCE ENRICHMENT With an optional VulnCheck community token, Ares enriches every CVE with: · VulnCheck KEV status and exploit timeline data · Proof-of-concept repository links from VulnCheck XDB · Known threat actor attribution · MITRE ATT&CK tactic mapping derived from CWE CISA KEV & BOD COMPLIANCE DATES CVEs listed in the CISA Known Exploited Vulnerabilities catalog are flagged prominently, including the Binding Operational Directive (BOD) due date for federal agencies. EPSS SCORES FIRST EPSS (Exploit Prediction Scoring System) scores are fetched and displayed for every CVE, highlighting which vulnerabilities have the highest real-world exploitation probability. THREAT PULSE DASHBOARD A live chart compares CVE publication volume today vs. yesterday, giving you an at-a-glance sense of the current threat tempo across your tracked vendors. SECURITY NEWS Aggregates the latest security headlines from Bleeping Computer, The Hacker News, CISA Advisories, Dark Reading, and SecurityWeek — with automatic CVE reference extraction so you can jump from a news story directly to the relevant vulnerability. SECURITY & PRIVACY Your NVD and VulnCheck API keys are stored exclusively in the iOS Keychain — never in plain UserDefaults or iCloud. No account required. No data leaves your device except direct API calls to NIST, FIRST, and VulnCheck. DATA SOURCES · NIST NVD API 2.0 — CVE data, CVSS scores, CWE, CPE · CISA — Known Exploited Vulnerabilities catalog · FIRST — EPSS exploitation probability scores · VulnCheck — KEV enrichment, PoC repos, threat actors (optional) · MITRE — CWE enumeration and ATT&CK tactic framework This product uses the NVD API but is not endorsed or certified by the NVD.