Look up a CVE in depth - CVSS, EPSS, CISA KEV, SSVC, CWE and exploit references - or list a product’s CVEs.
CVE Lookup pulls the full CVE 5.0 record from the CIRCL vulnerability database and layers on the signals that actually drive prioritisation: the CVSS base score & vector (recovered from the CNA or the CISA ADP), the EPSS exploitation probability, whether the CVE is in the CISA Known Exploited Vulnerabilities catalog (actively exploited in the wild), the CISA SSVC decision, the CWE weakness class, affected products/versions, and references split into exploit / patch / advisory.
Enter a CVE id for the full picture, or a vendor/product to list its CVEs - sorted with actively-exploited (KEV) issues first, then by CVSS. It closes the loop between recon and exploitation: fingerprint a version, then see what is known - and what is being exploited - against it.
CVSS rates theoretical severity. EPSS estimates the likelihood of exploitation in the next 30 days, and CISA KEV tells you it is *already* being exploited in the wild - together they prioritise what to fix/attack first far better than CVSS alone.
Not necessarily - patches, backports and configuration can mitigate a CVE. Use the result as a lead to verify against the actual target.