National Vulnerability Database
nvd.nist.govThe U.S. government repository of standards-based vulnerability management data
Securityvulnerability-databasecvesecurity-researchnistcybersecurityopen-source
About
The National Vulnerability Database (NVD) is a U.S. government repository maintained by NIST that catalogs publicly known cybersecurity vulnerabilities using the CVE standard. It provides detailed vulnerability data including severity scores, affected software, and remediation guidance. Security professionals and researchers use it to track and manage software vulnerabilities.
Problem
Organizations and individuals need a centralized, authoritative source to track and understand publicly disclosed software vulnerabilities.
For
security professionals, researchers, and software developers
How it works
NIST ingests CVE records from the CVE Program and enriches them with CVSS scores, CWE classifications, and affected product data, making them searchable via a public web interface and API.
Business model
free
Status
launched
Company
National Institute of Standards and Technology (NIST)