What is the difference between CVE, PYSEC and MAL?

CVE is the general catalogue of software vulnerabilities. PYSEC comes from the Python ecosystem's own advisory database. MAL marks a deliberately malicious package rather than a flawed one — supply-chain attack rather than programming error.

Is this every new vulnerability?

No. It is the most recent entries CIRCL has indexed, which is broad but not exhaustive, and there is always a lag between disclosure and publication.

Yes. It comes from CIRCL's vulnerability aggregator, refreshed through this site's pipeline. Nothing is invented or simulated, and if the source cannot be reached the saver reports that instead of drawing something plausible.

Does it cost anything or need an account?

No. Every screensaver here is free, runs in the browser and needs no sign-up. This one uses a public API that requires no key.

Newest Vulnerabilities Screensaver

The Newest Vulnerabilities screensaver lists the most recently published security advisories from CIRCL's aggregator, which indexes more than the CVE list alone. Three identifier families appear: CVE, PYSEC from the Python advisory database, and MAL — which marks a package that is itself malicious rather than merely flawed. It runs in the browser with nothing to install; press ESC to exit.

How the Newest Vulnerabilities screensaver works

The saver reads CIRCL's vulnerability aggregator, refreshed through this site's pipeline.

No account and no key: the request goes straight from your browser, or from this site's own refreshed copy of the feed where the source does not allow browser access.

Values are drawn on a canvas that resizes with the window, so it works on a laptop or a wall display.

If the source is unreachable the saver says so on screen rather than showing stale numbers as though they were current.

A worked example

Each entry leads with its identifier in colour — orange for CVE, amber for PYSEC, red for MAL — followed by the advisory text and the publication date. A MAL row is the one to notice: it means somebody uploaded hostile code to a package registry and it was caught, which is a different category of problem from a bug in honest software.

Settings & tips

Accent and Background recolour the display without changing the data.
Add it to a Multi-view grid to watch it alongside other live savers.
Press ESC at any time to leave fullscreen.

Frequently asked questions

What is the difference between CVE, PYSEC and MAL?: CVE is the general catalogue of software vulnerabilities. PYSEC comes from the Python ecosystem's own advisory database. MAL marks a deliberately malicious package rather than a flawed one — supply-chain attack rather than programming error.
Is this every new vulnerability?: No. It is the most recent entries CIRCL has indexed, which is broad but not exhaustive, and there is always a lag between disclosure and publication.
Is this real data?: Yes. It comes from CIRCL's vulnerability aggregator, refreshed through this site's pipeline. Nothing is invented or simulated, and if the source cannot be reached the saver reports that instead of drawing something plausible.
Does it cost anything or need an account?: No. Every screensaver here is free, runs in the browser and needs no sign-up. This one uses a public API that requires no key.

← All Security & Privacy screensavers