CVE Database The Whole Corpus, One Lattice.

Every advisory Actuator Security has published, drawn as a single molecule. The nucleus is the corpus; the large atoms are vulnerability classes and the vendors with more than one finding; each small atom is one CVE, bonded simultaneously to its class and its vendor.

Colour

drag to spin · scroll to zoom · shift-drag to pan

Zoom 100%

How to read it.

Atom colour is the vulnerability class, which is set for every entry. Switch to Severity to colour by CVSS base score instead - atoms with no published score go grey.
A ring around an atom means the install reach of that app is known; the figure is in the detail panel.
A hollow atom is a reserved CVE ID whose advisory is not yet public.
Bonds run CVE → class and CVE → vendor, so vendors with repeat findings pull their advisories into a visible cluster.

Sources. Vulnerability classes, products and descriptions come from the published advisory index. CVSS base scores, vectors, CWE mappings and publication dates are read from the NVD record for each CVE, so nothing on this page is a self-assigned score.Proof-of-concept links point at github.com/actuator/cve.

Full Disclosure List

Text equivalent of the lattice above

The lattice is the primary view, but every entry in it is also published as plain text for screen readers and for anyone who would rather read than spin - it is in the page source directly above, and mirrored in full at github.com/actuator/cve. Disclosure timing for all of it follows the 90-day coordinated disclosure policy.