ZEN SecDB

1. Status

   2026-10-24 18:35 UTC · 3 h ago

   Recently observed → Live

2. Status

   2026-10-23 02:26 UTC · 2 d ago

   Live → Recently observed

3. Status

   2026-10-20 09:28 UTC · 5 d ago

   Recently observed → Live

4. Status

   2026-10-19 20:34 UTC · 5 d ago

   Live → Recently observed

5. Status

   2026-10-11 15:24 UTC · 13 d ago

   Recently observed → Live

6. Status

   2026-10-11 02:23 UTC · 14 d ago

   Live → Recently observed

7. Tool surface changed

   2026-10-03 20:33 UTC · 21 d ago

   Changed the definition of "epss_timeseries", "feed_report", "feed_report_catalog" and 8 more

   epss_timeserieschanged

   annotations

   before
   —

   after
   {"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"EPSS history"}

   feed_reportchanged

   annotations

   before
   —

   after
   {"destructiveHint":false,"idempotentHint":true,"openWorldHint":false,"readOnlyHint":true,"title":"Run feed report"}

   feed_report_catalogchanged
8. Status

   2026-10-02 17:27 UTC · 22 d ago

   Recently observed → Live

9. Status

   2026-10-02 05:27 UTC · 23 d ago

   Live → Recently observed

10. Tool surface changed

    2026-09-27 01:24 UTC · 28 d ago

    Changed the definition of "vulnerability_search"

    vulnerability_searchchanged

    description

     ⟨32 unchanged words⟩ in Markdown and include a search summary.
    
    ## Searchable fields (Lucene syntax supported):
    - type: result type - cve, cwe, advisory, nasl, exploitdb, nuclei
    - id: exact identifier (e.g. id:CVE-2026-12345, id:RHSA-2026:1234)
    - title: resource title or name
    - summary: short summary
    - description: full description text
    - alias: known vulnerability names (e.g. alias:log4shell)
    - severity: critical, high, medium, low
    - kev: true/false — CISA KEV catalog membership
    - status: NVD status (CVE only) e.g. analyzed, modified
    - published: publication date (e.g. published:[2026-01-01 TO 2026-12-31])
    - modified: last modification date
    - source: CNA or advisory source (e.g. source:"Red Hat", source:fortinet)
    - cve: related CVE ID (e.g. cve:CVE-2026-44827)
    - cwe: related CWE ID (e.g. cwe:CWE-79)
    - tag: advisory tag (e.g. tag:scada, tag:ics)
    - attack_vector: network, adjacent, local, physical
    - cvss_score: CVSS base score (e.g. cvss_score:[7.0 TO 10.0])
    
    Default operator is AND. Use OR for alternatives, quotes for exact phrases, * for wildcards.
    
    ## Examples:
    - "apache struts rce" → RCE vulnerabilities in Apache Struts
    - "id:CVE-2026-44827" → exact CVE lookup
    - "source:fortinet AND severity:critical" → critical Fortinet advisories
    - "alias:log4shell" → Log4Shell by alias
    - "cve:CVE-2026-44827 AND type:exploitdb" → ExploitDB entries for a CVE
    - "cvss_score:[9.0 TO 10.0] AND kev:true" → critical KEV CVEs
    - "tag:scada AND severity:high" → high severity ICS/SCADA advisories
    
    ## When to use this tool
    Use this tool  ⟨109 unchanged words⟩ 

    326 words differ · removed ·
11. Tool surface changed

    2026-09-22 17:28 UTC · 1 mo ago

    Changed the definition of "purl_audit"

    purl_auditchanged

    outputSchema

    {"properties":{"report":{"items":{"additionalProperties":true,"description":"structured objects describing the advisories affecting  ⟨23 unchanged words⟩ 

    6 words differ · removed · added
12. Status

    2026-09-18 04:25 UTC · 1 mo ago

    Recently observed → Live

13. Status

    2026-09-16 18:31 UTC · 1 mo ago

    Live → Recently observed

14. TLS

    2026-09-12 14:24 UTC · 1 mo ago

    Certificate recorded, valid to 2027-02-06

15. Authorization

    2026-09-12 14:24 UTC · 1 mo ago

    Authorization not required

16. Tool surface

    2026-09-12 14:24 UTC · 1 mo ago

    First tool surface recorded: 11 tools (server version 26.8.1)

Showing the latest 16 events. The API returns up to 500 and filters by kind: ?kind=tool_surface_changed