NIST unveils new vulnerability database

Share this article:

The National Institute of Standards and Technology (NIST) has launched a new vulnerability database that integrates all publicly available federal vulnerability resources and provides links to industry resources.

The National Vulnerability Database (NVD) aims to make it easier for system administrators and other security practioners to learn about vulnerabilities and how to fix them, according to NIST.

About 300 new vulnerabilities are discovered each month and a single flaw often is known by various names, making it hard for administrators to keep up, the agency said.

NVD is based on the Common Vulnerabilities and Exposure (CVE) standard for naming vulnerabilities.

The database has information on about 12,000 vulnerabilities and is updated daily. Users can search by vulnerability type, severity and impact, software name and version number, and vendor. Users also can research the vulnerability history of a product and view vulnerability trends.

NVD was developed by researchers in NIST's Computer Security Division and is sponsored by the Department of Homeland Security National Cyber Security Division/U.S.-CERT.

http://nvd.nist.gov

Share this article:
You must be a registered member of SC Magazine to post a comment.
close

Next Article in News

Sign up to our newsletters

TOP COMMENTS

More in News

Hackers grab email addresses of CurrentC pilot participants

Hackers grab email addresses of CurrentC pilot participants

Although the hack didn't breach the mobile payment app itself, consumer confidence may be shaken.

Operators disable firewall features to increase network performance, survey finds

Operators disable firewall features to increase network performance, ...

McAfee found that 60 percent of 504 surveyed IT professionals prioritize security as the primary driver of network design.

PCI publishes guidance on security awareness programs

PCI publishes guidance on security awareness programs

The guidance, developed by a PCI Special Interest Group, will help merchants educate staff on protecting cardholder data.