WORLDEYE PRO TOOL

Vulnerability Scanner Online — Check a Host for Known CVEs

Match a host's detected services against the public CVE database and see which known, published vulnerabilities may apply — a CVE checker for the servers you run.

TARGET — IP OR HOSTNAME

PREVIEW — WORLDEYE PRO
Open in WorldEye

EXAMPLE RESULT — FORMAT ONLY, NOT A LIVE CHECK

Vuln Sweep of a sample host

Service
203.0.113.10 — Apache httpd 2.4.x on 443/tcp
Match 1
CVE-2021-44790 — critical — candidate match, verify version
Match 2
CVE-2023-25690 — high — candidate match, verify version
Other services
SSH on 22/tcp — no known CVE matched
Note
Known published issues only — not a penetration test

This is the shape of a real result, shown with a documentation-range example address and real public CVE identifiers for illustration. The live sweep runs inside WorldEye's RECON board and is included with WorldEye Pro — only ever scan systems you own or are authorised to test.

What this vulnerability sweep is — and what it is not

  • This is NOT a penetration test. It does not exploit anything, attempt logins, or probe for unknown flaws. It matches the services a host appears to run against known, published CVEs — nothing more.
  • It can only find known, published issues. A clean result means no known CVE matched the detected services; it says nothing about zero-days, weak passwords, misconfiguration, or flaws in your own application code.
  • Matches are based on detected service banners, which can be incomplete, customised, or deliberately misleading. Treat every match as a lead to verify against the actual software version, not a confirmed compromise.
  • Only scan systems you own or are authorised to test. Checking your own servers is routine maintenance; scanning strangers' systems can breach their terms and, in some places, the law.

Most breaches do not start with a brand-new attack. They start with a known vulnerability — published, catalogued with a CVE number, often patched months earlier — sitting unpatched on a server nobody remembered. A vulnerability scanner exists to catch exactly that: identify the services a host runs and their versions, then check them against the public record of known flaws. If your web server's banner matches a version with a published critical CVE, you want to learn that from a report, not from an incident.

WorldEye's Vulnerability Sweep lives in the RECON board and works the honest end of this trade. It detects the services on a host — usually starting from a port scan in the same board — reads what those services report about themselves, and matches them against known CVEs, returning the CVE identifiers, severity, and a plain description for each candidate match. It never exploits a match to prove it: proof-by-exploit is penetration testing, a different discipline that belongs in an authorised engagement with a specialist tool, not a quick online sweep.

Read the result as a patching checklist, not a verdict. Each match says: this service looks like a version that a published CVE applies to — go and confirm the real version, and patch or upgrade if it does. And read a clean result just as carefully: it means no known issue matched what the host revealed, which is good news about patching hygiene and no guarantee at all about everything else.

How it works

  1. 1Open the RECON board on the WorldEye globe and choose Vuln Sweep in the Network & Host group.
  2. 2Enter an IP address or hostname you own or are authorised to test.
  3. 3Run the sweep. WorldEye detects the host's services and versions, then matches them against the public CVE record.
  4. 4Work through each match: CVE identifier, severity, affected service, and what the published issue is.
  5. 5Verify matches on the host itself — confirm the installed version, apply the vendor patch or upgrade, then re-run the sweep to confirm the match clears.

Run Vulnerability Sweep in WorldEye

Vulnerability Sweep runs live in WorldEye's RECON board — RECON board → Network & Host → Vuln Sweep — and is included with WorldEye Pro. Create a free account to explore the board and its free tools, and upgrade when you need the Pro modules.

Open the globeCreate a free accountSee WorldEye Pro

Vulnerability scanning questions

Is this a penetration test?+
No, and the distinction matters. A penetration test actively tries to break in — exploiting flaws, testing credentials, chaining weaknesses — under a formal authorisation. This sweep is passive by comparison: it reads the services a host presents and matches them against published CVEs. It finds candidates for patching; it never attempts to exploit them.
What is a CVE?+
CVE stands for Common Vulnerabilities and Exposures. Each CVE is a unique numbered entry in a public catalogue describing one known vulnerability in a named product and version range — for example a flaw in a specific web server release. Vendors, researchers and scanners all use the same numbers, so a CVE ID in your result is something you can look up and act on precisely.
The sweep found nothing. Is my server secure?+
It means no known, published CVE matched the services and versions your host revealed at scan time. That is a genuinely good sign for patching, but it cannot speak to zero-day flaws, weak or reused passwords, configuration mistakes, vulnerabilities in your own code, or services the scan could not fingerprint. Security is a practice, not a scan result.
Can a match be a false positive?+
Yes. Matching leans on service banners, and banners can be backported-patched (a distribution may fix a flaw without changing the version string), customised, or sparse. That is why each result is phrased as a candidate match to verify against the actual installed software — check the version on the host, read the CVE's affected ranges, then patch if it truly applies.
How often should I run a vulnerability sweep?+
After every significant change to a server, and on a regular cadence in between — new CVEs are published daily, so a host that matched nothing last month can match something today without anything on your side changing. Many administrators sweep monthly and after each patching round to confirm the fixes landed.
What does it cost?+
Vulnerability Sweep is a Pro module in WorldEye's RECON board, included with WorldEye Pro. The board's free tools — the leak checker, the Shodan device lookup and others on the Tools page — run with no account at all.

Keep exploring

Port Scanner — check open ports on one hostSecurity Headers Checker — grade a site's HTTP headers (free)Threats — reputation of an IP, domain or hashAll WorldEye tools

One email when the sky does something big

Rocket launches, storms overhead and new camera drops — plus major WorldEye news. Rare, and no spam, ever.

Instant subscribe — no confirmation email. We check the address as you type it in.

All WorldEye tools Open the live map