Mission and Overview

NVD is the U.S. government repository of standards based vulnerability management data. This data enables automation of vulnerability management, security measurement, and compliance (e.g. FISMA).

Resource Status

NVD contains:

CVE Vulnerabilities

56428

Checklists

221

US-CERT Alerts

246

US-CERT Vuln Notes

2721

OVAL Queries

8140

CPE Names

73307

Last updated: Thu May 23 18:23:18 EDT 2013

CVE Publication rate: 12.5

Email List

NVD provides four mailing lists to the public. For information and subscription instructions please visit NVD Mailing Lists

Workload Index

Vulnerability Workload Index: 6.48

About Us

NVD is a product of the NIST Computer Security Division and is sponsored by the Department of Homeland Security's National Cyber Security Division. It supports the U.S. government multi-agency (OSD, DHS, NSA, DISA, and NIST) Information Security Automation Program. It is the U.S. government content repository for the Security Content Automation Protocol (SCAP).

CPE Configuration Changes

NVD is now reporting vulnerable software configurations in the form that represents both the CPE language structure and the Boolean logic utilized by the data repository.

What was:

Is now:

For further information, please see the CPE 2.1 Specification