National vulnerability database search 0-B20230809. NOTE: Only vulnerabilities that match ALL keywords will be returned, Linux kernel vulnerabilities are categorized separately from vulnerabilities in specific Linux distributions. The NVD website provides a robust search engine to navigate its entire catalog of vulnerability data efficiently. The CVE List is a list of publicly disclosed cybersecurity vulnerabilities and exposures that is free to search, use, and incorporate into products and services. x, and 11. x and v4. Sep 20, 2022 · National Vulnerability Database National Vulnerability Database NVD. 0, v3. SEARCH with a specially crafted KNN command argument, can trigger an integer overflow, leading to heap overflow and potential remote code execution. NVD analysts use the reference information provided with the CVE and any publicly available information at the time of analysis to associate Reference Tags, Common Vulnerability Scoring System (CVSS) v3. Patches have also been merged into the master, 19. This issue was fixed in version 9. Search Vulnerability Database. Feb 20, 2025 · The NVD is the U. Malicious code was discovered in the upstream tarballs of xz, starting with version 5. Department of Commerce. Apr 23, 2020 · そして、その際に多くの人が利用するのがアメリカ国立標準技術研究所 NIST が管理する NVD（National Vulnerability Database)のサイトではないでしょうか。 本記事では NVD の情報だけでの脆弱性調査の課題や、より楽に正しい脆弱性情報を収集するための方法につい Nov 5, 2024 · National Vulnerability Database NVD. government repository of standards-based vulnerability management data represented using the Security Content Automation Protocol (SCAP). 4-23. Nov 1, 2024 · The vulnerability was discovered via routine penetration testing. Vulnerabilities; CVE-2024-50570 Detail Awaiting Analysis. A use-after-free issue was addressed with May 28, 2020 · The vulnerability is limited to the Dell Dock Firmware Update Utilities during the time window while being executed by an administrator. In Pulse Secure Pulse Connect Secure (PCS) 8 This NIST SP 800-53 database represents the security controls and associated assessment procedures defined in NIST SP 800-53 Revision 4 Recommended Security Controls for Federal Information Systems and Organizations. Difficult to exploit vulnerability allows low privileged attacker having Create Session, Create Procedure privilege with network access via Oracle Net to compromise Java VM. 0, and 26. Cisco is providing an update for the ongoing Apr 10, 2024 · The National Vulnerability Database is so overwhelmed with a steadily increasing number of software and hardware flaws that the National Institute of Standards and Technology, which maintains the common vulnerabilities and exposures repository, called for a slight pause to regroup and reprioritize its efforts. But what is it, and why is it so important for fighting digital threats? The Genesis of the National Sep 20, 2022 · The National Vulnerability Database (NVD) is tasked with analyzing each CVE once it has been published to the CVE List. Apr 15, 2025 · National Vulnerability Database National Vulnerability Database NVD. 8. js is a JavaScript implementation of the OpenPGP protocol. 36. 6. Vulnerabilities; CVE-2025-21587 Detail Description . Aug 21, 2024 · National Vulnerability Database National Vulnerability Database NVD. Vulnerabilities; CVE-2024-5910 Detail Description . Vulnerabilities; CVE-2024-49402 Detail Description . Startinf in version 5. This page provides information regarding both the CVE Program and NVD sets of statuses and how they relate to each other. 21, and 2. Jan 8, 2025 · An authenticated redis user executing FT. Missing authentication for a critical Mar 3, 2021 · National Vulnerability Database NVD. 0 to 2. 03, 20. Windows Lightweight Directory Access May 14, 2019 · National Vulnerability Database NVD. Vulnerabilities; CVE-2020-8231 Detail Modified. During this time window, a locally authenticated low-privileged malicious user could exploit this vulnerability by tricking an administrator into overwriting arbitrary files via a symlink attack. It is maintained by a group within the National Institute of Standards and Technology (NIST) and builds upon the work of MITRE and others. The vulnerability arises due to inappropriate secure coding measures, specifically the lack of proper implementation of the max_depth parameter in the get_article_urls function. Cisco is providing an update for the ongoing . 10. An attacker can exploit this vulnerability to access highly sensitive internal server(s) and steal sensitive information. Windows Hyper-V NT Kernel Integration VSP NVD：National Vulnerability Database，美国国家计算机通用漏洞数据库，是权威的漏洞数据收集平台。 官网地址： https:// nvd. 0, 24. This vulnerability could enable an unauthenticated user to remotely execute code within the context of the Now Platform. For more information on how this data was constructed please see the NVD CVSS page . government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications. Aug 3, 2024 · National Vulnerability Database National Vulnerability Database NVD. This CVE record has been updated after NVD enrichment efforts were completed This vulnerability is patched in IdentityServer 7. The National Vulnerability Database (NVD) is a product of the NIST Computer Security Division, Information Technology Laboratory. The National Vulnerability Database (NVD) is the U. This guide looks into the various aspects of NIST NVD to understand Dec 30, 2024 · National Vulnerability Database National Vulnerability Database NVD. 1) Common Vulnerability Scoring System v2. This vulnerability is fixed in 2. Getting Started. Improper input validation in Dressroom prior to SMR Nov-2024 Release 1 allow May 5, 2025 · Current Description . 7R2 The National Vulnerability Database (NVD) provides CVSS enrichment for all published CVE records. 27. Vulnerabilities; CVE-2024-7969 Detail Modified. Dec 2, 2024 · National Vulnerability Database National Vulnerability Database NVD. The mission of the CVE® Program is to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities. This CVE record has been marked for NVD May 5, 2025 · 关于新增快页信息技术有限公司等八家单位为cnvd支撑单位的公告 2024-11-12 Nov 21, 2024 · National Vulnerability Database National Vulnerability Database NVD. Search Parameters: Keyword (text search): spring; Search Type: Search All; There are 276 matching records. , software and shared libraries) to those vulnerabilities. Jan 8, 2025 · You can access the National Vulnerability Database from their website at nvd. General Expand or Collapse Search. gov/ 查询地址：NVD - Search Nov 21, 2024 · The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. cybersecurity system. Vulnerabilities in the NVD are called Common Vulnerabilities and Exposures (CVE). A privilege escalation vulnerability in Palo Alto Networks PAN-OS software Feb 20, 2025 · 国家信息安全漏洞库， 为负责建设运维的国家级信息安全漏洞数据管理平台， 旨在为我国信息安全保障提供服务。 A Denial of Service (DoS) vulnerability has been identified in the KnowledgeBaseWebReader class of the run-llama/llama_index project, affecting version ~ latest(v0. 0 Retirement announcement, we no longer provide CVSS v2. Organizations should use the KEV catalog as an input to their vulnerability management prioritization framework. This CVE record has been updated after NVD National Vulnerability Database National Vulnerability Database NVD. This CVE record has been marked for NVD The Relevanssi – A Better Search plugin for WordPress is vulnerable to time-based SQL Injection via the cats and tags query parameters in all versions up to, and including, 4. NVDlib is a Python library that allows you to interface with the NIST National Vulnerability Database (NVD), pull vulnerabilities (CVEs), and Common Platform Enumeration (CPEs) into easily accessible objects. 3-19. php. 4 (Premium) due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. Sep 13, 2023 · National Vulnerability Database. 9, 14. 0) contains an uncontrolled search path vulnerability. The manipulation of the argument submit-url leads to buffer overflow. For information on how to the cite the NVD, including the database's Digital Object Identifier (DOI), please consult NIST's Public Data Repository . Vulnerabilities; CVE-2019-11510 Detail Description . 89, 11. The attack can be initiated remotely. Checklist Repository. MITRE CVE List – Comprehensive list of CVE Records provided by MITRE. A critical vulnerability has been discovered Mar 19, 2024 · NVD Contact Information. The NVD was established to provide a U. 1. Note: A precondition of this vulnerability is that the user must be using the Okta Device Access passwordless feature. Products CPE Search; Search Common Platform Enumerations (CPE) This search engine can perform a keyword search, or a CPE Name For many users, the most noticeable changes from 1. Vulnerabilities; CVE-2025-21333 Detail Description . Vulnerabilities; CVE-2024-8190 Detail Description . The NVD supports Common Vulnerability Scoring System (CVSS) v2. Aug 26, 2024 · A vulnerability related to the use an insecure Platform Key (PK) has been discovered. NVD Contact Form Use this form for submitting general questions, requesting review of NVD analysis data or for questions about CVMAP. It has been declared as critical. This visualization is a simple graph which shows the distribution of vulnerabilities by severity over time. The vulnerability is addressed in SL1 versions 12. An attacker with the compromised PK private key can create malicious UEFI software that is signed with a trusted key that has been compromised. The NVD includes databases of security configuration checklists for the NCP, listings of publicly known software flaws, product names, and impact metrics. Microsoft Edge (Chromium-based) Remote Code NVD：National Vulnerability Database，美国国家计算机通用漏洞数据库，是权威的漏洞数据收集平台。 官网地址： https:// nvd. 115. 0 should include improved documentation, two new API endpoints providing the public with CPE Match Strings and Data Source records, twelve new parameters for the CVE API that allow users to filter requests based on metadata like CISA's Known Exploited Vulnerabilities (KEV), as well as 5 days ago · As of December 2009, The National Vulnerability Database is now accepting contributions to the Official CPE Dictionary. What makes Galaxy Guard unique? Galaxy Guard’s extensive coverage, real-time updates, and advanced search capabilities make it an unparalleled resource for vulnerability management and Jan 24, 2025 · National Vulnerability Database NVD. y prior to 12. y and 10. 28. This is a key piece of the nation’s cybersecurity infrastructure. 1 containes patches to fix the vulnerability. 1 and prior to versions 5. 22 and prior. Insufficient data validation in Dawn in Nov 18, 2024 · National Vulnerability Database NVD. Please make use of the interactive search interfaces to find information in the database! The Common Vulnerabilities and Exposures (CVE) Program’s primary purpose is to uniquely identify vulnerabilities and to associate specific versions of code bases (e. This CVE record has been marked for NVD Nov 21, 2024 · VMware Tools for Windows (11. US-CERT Vulnerability Notes Database – Contains disclosure records published by CISA. 0, 23. Vulnerabilities; CVE-2024-12356 Detail Description . Mar 21, 2025 · If patching to a safe version is infeasible, it is recommend that you prevent external user requests which contain the x-middleware-subrequest header from reaching your Next. Nov 16, 2024 · With the ever-increasing number of threats and vulnerabilities, it has become essential to have a system that helps identify and manage these risks effectively. 0 (CVSS v2. 3_20201113_RELEASE(HIK). Mar 24, 2025 · National Vulnerability Database National Vulnerability Database NVD. An OS command injection vulnerability in Ivanti Cloud Services Appliance National Vulnerability Database NVD. 0 (CVSS v4. Vulnerabilities; CVE-2024-11187 Detail Awaiting Analysis. Vulnerabilities; CVE-2024-7256 Detail Description . verify` or `openpgp. Feb 10, 2025 · National Vulnerability Database NVD. Vulnerabilities; CVE-2024-38526 Detail Awaiting Analysis. The vulnerability feeds provide CVE® data organized by the first four digits of a CVE® identifier (except for the 2002 feeds which include vulnerabilities prior to and including "CVE-2002-"). This vulnerability is fixed in 12. 32. The National Vulnerability Database is a U. Vulnerabilities; CVE-2024-11680 Detail Description . Vulnerabilities Search And Statistics; Statistics Results (Refine Search) The NVD anticipates new approaches to structuring vulnerability records and describing the severity of vulnerabilities will be released in the next two years. Products CPE Search; Search Common Platform Enumerations (CPE) This search engine can perform a keyword search, or a CPE Name The National Vulnerability Database (NVD) is a foundational cybersecurity resource that provides detailed information on vulnerabilities across a wide range of software and hardware. nist. Nov 21, 2024 · docker-ce v27. 24, 2. 20. 25, and 15. The National Checklist Program (NCP), defined by the NIST SP 800-70, is the U. Vulnerability in the Oracle Java SE, Oracle Feb 6, 2025 · National Vulnerability Database National Vulnerability Database NVD. Vuln ID Summary CVSS Severity ; CVE-2025-47934: OpenPGP. Vulnerabilities; CVE-2021-23125 Detail Modified. Vulnerabilities; CVE-2024-49112 Detail Description . A stack-based buffer overflow in Ivanti Connect Secure before version 22. This data includes security checklist Mar 19, 2025 · Simple NIST NVD API wrapper library. AGGREGATE with a specially crafted LIMIT command argument, or FT. x, 10. By default, the databases must be present in `/db/` (or alternatively `. 15). Vulnerabilities; CVE-2018-7445 Detail Description . Dec 18, 2013 · Abstract The National Vulnerability Database (NVD), and its companion, the National Checklist Program (NCP), have provided a valuable and flexible set of services to users around the world since NVD was established in 2005. 4 (Free) and <= 2. twitter (link is external) Nov 26, 2024 · National Vulnerability Database National Vulnerability Database NVD. 207 allowed a May 15, 2024 · National Vulnerability Database National Vulnerability Database NVD. 0. This effort allows consumers of our data to check for known issues for any product they may currently have in their environment (as long as they know the associated product identifier). 217 for Windows and Linux platforms. In Pulse Secure Pulse Connect Secure (PCS) 8 Nov 21, 2024 · docker-ce v27. Vulnerabilities; CVE-2025-22457 Detail Description . Nov 20, 2023 · National Vulnerability Database (NVD) – Extensive CVE vulnerability database maintained by NIST, based on CVE List feed. Version 6. Remediations have been made available for all SL1 versions back to version lines 10. 0, 25. 0 standards. Oct 18, 2024 · ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. 1 data via a BIO. gov and search for relevant vulnerabilities by their CVE or CPE, or look up checklists that you can follow to enhance your security configurations for the specific software you have deployed. 0 should include improved documentation, two new API endpoints providing the public with CPE Match Strings and Data Source records, twelve new parameters for the CVE API that allow users to filter requests based on metadata like CISA's Known Exploited Vulnerabilities (KEV), as well as Dec 18, 2024 · National Vulnerability Database National Vulnerability Database NVD. Jan 14, 2025 · National Vulnerability Database National Vulnerability Database NVD. 1, CWE, and CPE A vulnerability classified as critical was found in TOTOLINK A702R, A3002R and A3002RU 3. How to use the KEV May 5, 2025 · Current Description . Published: October 28, 2024; 4:15:06 PM -0400 Mar 3, 2021 · National Vulnerability Database NVD. Vulnerabilities; CVE-2021-22681 Detail Modified. Vulnerabilities; CVE-2023-20198 Detail Description . This vulnerability was added to the CISA Known Exploited Vulnerabilities (KEV) Catalog on 2025-04-28. If one is unable to upgrade immediately, avoid using AuthZ plugins and/or restrict access to the Docker API to trusted parties, following the principle of least privilege. Jun 16, 2009 · Summary. Vulnerabilities Search And Statistics; Sort results by: Sort Search Results (Refine Search) Search Parameters: Keyword (text Jan 12, 2021 · National Vulnerability Database National Vulnerability Database NVD. 25, 21. government repository of standards-based vulnerability For many users, the most noticeable changes from 1. This vulnerability is fixed in 4. Feb 13, 2024 · NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. A buffer overflow was found in the MikroTik Nov 21, 2024 · Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). 12. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Mar 29, 2024 · Description . If no databases are present in the default directory, the UI indicates that the user is unable to open any databases. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest OS due to an uncontrolled search path element. This data enables automation of vulnerability management, security measurement, and compliance. Supported versions that are affected are 8. Vulnerabilities; CVE-2025-21342 Detail Description . 1615. S. Out of bounds write in V8 in Google Chrome prior to 124. Vulnerabilities; CVE-2025-23087 Detail These CVEs are stored in the NVD, but do not show up in search results by default. Apr 3, 2025 · National Vulnerability Database NVD. Vulnerabilities; CVE-2023-2005 Detail Modified. Apr 29, 2025 · National Vulnerability Database National Vulnerability Database NVD. This data supports security automation efforts based on the Security Content Automation Protocols (SCAP). The NVD is the U. decrypt`, causing these functions to return a valid signature verification result while returning data that was not actually signed. 6367. g. This CVE record has been updated after NVD You can search for vulnerabilities by using specific keywords, vulnerability IDs, or by filtering based on affected software, severity, and other criteria. Developers; Data Sources. 0 assessments for newly published CVE records. For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. 1, a maliciously modified message can be passed to either `openpgp. Please read the CVSS standards guide to fully understand how to assess vulnerabilities using CVSS and to interpret the resulting scores. Nov 21, 2024 · National Vulnerability Database NVD. 16 and 23. This CVE record has been marked for NVD National Vulnerability Database National Vulnerability Database NVD. 3+. This vulnerability affects unknown code of the file /php/ping. May 8, 2019 · National Vulnerability Database National Vulnerability Database NVD. Vulnerabilities; CVE-2022-32168 Detail Modified. x, 11. The public API function BIO_new_NDEF is a helper function used for streaming ASN. Founded in 1901, National Institute of Standards and Technology (NIST) is a non-regulatory federal agency within the U. Vulnerabilities; CVE-2024-10905 Detail Awaiting Analysis. One such system is the National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD). /tmp/` if development mode is enabled). Vulnerabilities; CVE-2025-26876 Detail Path Traversal vulnerability in CodeManas Search with Typesense allows Path Traversal National Vulnerability Database National Vulnerability Database NVD. " Fixed in version 11. caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code National Vulnerability Database National Vulnerability Database NVD. The NVD expects the CVE Program to release CVEv5 in 2023 and for FIRST to release CVSSv4 sometime afterwards. Vulnerabilities; CVE-2024-56516 Detail Awaiting Analysis. NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. ServiceNow deployed an update to hosted instances and ServiceNow provided the update to our partners and self-hosted customers. 0, 26. 3 and below are unaffected, as they do not support DPoP in Local APIs. Developers; Request an API Key. SEARCH or FT. When loaded on an Windows application, Netty attempts to load a file that does not exist. However, per the NVD CVSS v2. It is primarily used internally to OpenSSL to support the SMIME, CMS and PKCS7 streaming capabilities, but may also be called directly by end user applications. 1 (CVSS v3. NVD Visualizations. The NVD includes databases of security checklist references, security-related software flaws, misconfigurations, product names, and impact metrics. Type Confusion in V8 in Google Chrome prior Sep 20, 2022 · Common Vulnerability Scoring System v4. This CVE record has been updated after NVD enrichment efforts were completed. The manipulation of the argument jsondata[ip] with the input netstat -ano leads to os command injection. This vulnerability affects unknown code of the file /boafrm/formDMZ of the component HTTP POST Request Handler. Apr 25, 2025 · According to the Commvault advisory: "Webservers can be compromised through bad actors creating and executing webshells. The choice of LOW, MEDIUM and HIGH is based upon the CVSS V2 Base score. 46, 11. 3. Feb 7, 2025 · National Vulnerability Database National Vulnerability Database NVD. The CPE Name search will perform searching for an exact match, as well as searching for all records that contain the components specified in the user-specified Dec 15, 2024 · Exploring the History and Purpose of the National Vulnerability Database. 141, and 11. Maintained by the National Institute of Standards and Technology (NIST), the NVD serves as the U. Vulnerabilities; CVE-2024-4761 Detail Description . A fundamental part of the CVE analysis process is to uniquely identify the vulnerable products affected by any given vulnerability. Vulnerabilities; CVE-2025-24252 Detail Description . 5. ProjectSend versions prior to r1720 are Jan 21, 2025 · Vulnerability in the Java VM component of Oracle Database Server. Vulnerabilities; CVE-2019-3568 Detail Description . All NIST publications are available in the public domain according to Title 17 of the United States Code, however services which utilize or access the NVD are asked to display the following notice prominently within the application: "This product uses data from the NVD API but is not endorsed or certified by the NVD. Developers; Products. The National Vulnerability Database (NVD) is a key part of the U. 5 days ago · As of December 2009, The National Vulnerability Database is now accepting contributions to the Official CPE Dictionary. Vulnerabilities; CVE-2025-1974 Detail Awaiting Analysis. A buffer overflow vulnerability in WhatsApp VOIP stack allowed remote code Nov 12, 2024 · An unsafe reading of environment file could potentially cause a denial of service in Netty. 0) Common Weakness Enumerations (CWE) These data types are referred to as submission categories within CVMAP. Nov 21, 2024 · The vulnerability occurs due to improper handling of Unicode strings, which can lead to a null pointer dereference. js application. Dec 18, 2013 · The National Vulnerability Database (NVD), and its companion, the National Checklist Program (NCP), have provided a valuable and flexible set of services to users around the world since NVD was established in 2005. Vulnerability Status Vulnerability records within the NVD dataset are sourced from the CVE List, which is maintained by the CVE Program, upstream of the NVD. The NVD includes databases of security checklist references, security related software flaws, product names, and impact metrics. Common Vulnerability Scoring System Calculator This page shows the components of a CVSS assessment and allows you to refine the resulting CVSS score with additional or different metric values. gov/ 查询地址：NVD - Search Feb 6, 2025 · Affected versions of WhoDB allow users to connect to Sqlite3 databases. 3+, 12. Supported versions that are affected are 19. To request an NVD API Key, please provide your organization name and a valid email address, and Jul 2, 2024 · National Vulnerability Database NVD. 11. This CVE record has been marked for NVD Feb 25, 2025 · National Vulnerability Database NVD. 0) Common Vulnerability Scoring System v3. Organizations interested in submitting CPE Names should contact the NVD CPE team at [email protected] for help with the processing of their submission. It’s managed by the National Institute of Standards and Technology (NIST). 3 and 6. Search parameters include CVE ID, CVSS score, CWE ID, vendor, product, vulnerability type, publish date, update date, and more. government repository of data about software vulnerabilities and configuration settings, leveraging open standards to provide reliable and A vulnerability was found in Hikvision Intercom Broadcasting System 3. Try a product name, vendor name, CVE name, or an OVAL query. This data includes security checklist For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and keep pace with threat activity—CISA maintains the authoritative source of vulnerabilities that have been exploited in the wild. " The National Vulnerability Database (NVD) is the largest publicly available source of vulnerability intelligence. 2. National Vulnerability Database National Vulnerability Database NVD. Through a series of complex obfuscations, the liblzma build process extracts a prebuilt object file from a disguised test file existing in the source code, which is then used to modify specific functions in the liblzma code. The NVD augments the CVE List with additional enrichment, conversion of various data points into SCAP datatypes, a fine-grained search engine and granular APIs. Sep 10, 2024 · National Vulnerability Database NVD. government repository of standards-based vulnerability management data. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). 3+, and 12. Nov 21, 2024 · National Vulnerability Database National Vulnerability Database NVD. 5, 13. Nov 21, 2024 · An attacker can bypass the security controls by performing a DNS rebinding attack and view sensitive data from internal servers or perform a local port scan. Vulnerabilities; CVE-2024-9474 Detail Description . Jan 24, 2025 · National Vulnerability Database NVD. This flaw allows an attacker to input a specially crafted zip file, leading to a crash or code execution. How to Keep Up-to-Date with the NVD Data Using the Traditional Feeds. Integrates with CVSS and CPE. 23. caused by an uncontrolled search path in the CP210x VCP Windows installer can lead to privilege escalation and arbitrary code Sep 13, 2023 · National Vulnerability Database. If an attacker creates such a large file, the Netty application crashes. 3-21. Vulnerability in the Oracle Java SE, Oracle Mar 17, 2016 · China National Information Security Vulnerability Database, the English name "China National Vulnerability Database of Information Security", referred to as "CNNVD", is maintained by China Information Security Evaluation Center for the effective performance of the functions of vulnerability analysis and risk assessment, responsible for building Dec 3, 2024 · National Vulnerability Database National Vulnerability Database NVD. Oct 29, 2024 · ServiceNow has addressed an input validation vulnerability that was identified in the Now Platform. National Vulnerability Database NVD. x. This CVE record has been updated after NVD Jan 29, 2025 · National Vulnerability Database National Vulnerability Database NVD. Vulnerabilities; CVE-2024-39943 Detail Modified. General; A Brief History of the NVD. The database file is an user-controlled value. Users can craft targeted queries using a host of filters. 1 release branches. 24. There is a growing backlog of vulnerabilities submitted to the NVD and requiring analysis. Okta Device Access users not using passwordless are not affected, and customers only using Okta Verify on platforms other than Windows, or only using FastPass Dec 17, 2024 · National Vulnerability Database National Vulnerability Database NVD. This section of the NVD is designed to give users of the NVD data different ways to look at the data and provide an overview to the data and hopefully spark some interest into why a particular visualization looks the way it does. Vulnerabilities; CVE-2025-31650 Detail Modified. This CVE record has been marked for NVD Apr 28, 2025 · National Vulnerability Database NVD. This CVE record has been updated after NVD This search engine can perform a keyword search, or a CPE Name search. The keyword search will perform searching across all components of the CPE name for the user specified search text. Vulnerabilities; CVE-2024-4947 Detail Description . 中国国家信息 安全漏洞 库为我国信息安全保障提供服务，通过自主挖掘、社会提交、协作共享、网络搜集以及技术检测等方式，联合政府部门、行业用户、安全厂商、高校和 科研机构 等 社会力量 ，对涉及国内外主流应用软件、操作系统和 网络设备 等软 硬件系统 的信息安全漏洞开展采集收录 Jul 4, 2024 · National Vulnerability Database NVD. pfhyxtuecissimegoqnyqhxopipzsylaltljpfdehtgtvc