About CVE Security Database
Your comprehensive source for vulnerability intelligence and security research
Our Mission
CVE Security Database is dedicated to making security vulnerability information accessible, searchable, and actionable for security professionals, developers, and researchers worldwide.
We provide a comprehensive, user-friendly interface to explore and understand Common Vulnerabilities and Exposures (CVE), Common Weakness Enumeration (CWE), and associated CVSS severity scores. Our platform enables you to:
- Search and filter through 280.7K+ documented vulnerabilities
- Understand vulnerability types across 21+ weakness categories
- Track security trends and patterns over time
- Research specific CVE IDs and their associated CWE classifications
- Assess vulnerability severity using standardized CVSS scores
Whether you're conducting security research, performing risk assessments, or staying informed about the latest threats, our database provides the tools and information you need.
Database Statistics
Data Sources
MITRE CVE Database
The official source for CVE identifiers, maintained by the MITRE Corporation. CVE provides a standardized method for identifying and cataloging publicly known cybersecurity vulnerabilities.
NIST National Vulnerability Database (NVD)
The U.S. government repository of standards-based vulnerability management data. NVD provides enhanced information including CVSS severity scores, CWE classifications, and detailed vulnerability descriptions.
MITRE CWE Database
A community-developed list of common software and hardware security weaknesses. CWE provides a unified, measurable set of weaknesses that enables more effective discussion, description, and analysis of security issues.
Frequently Asked Questions
What is a CVE?
CVE (Common Vulnerabilities and Exposures) is a standardized identifier for known security vulnerabilities and exposures. Each CVE ID uniquely identifies a specific vulnerability, making it easier to share information about security issues across different platforms and databases.
What is CWE?
CWE (Common Weakness Enumeration) is a category system for software and hardware weaknesses. It provides a common language for describing security weaknesses in architecture, design, or code. Each CWE describes a type of vulnerability, such as SQL Injection (CWE-89) or Cross-Site Scripting (CWE-79).
What is CVSS?
CVSS (Common Vulnerability Scoring System) is a standardized framework for rating the severity of security vulnerabilities. Scores range from 0.0 to 10.0, with higher scores indicating more severe vulnerabilities. CVSS v3 is the current standard, providing scores for Critical (9.0-10.0), High (7.0-8.9), Medium (4.0-6.9), and Low (0.1-3.9) severity levels.
Where does the data come from?
Our database aggregates data from official sources including the MITRE CVE database, NIST National Vulnerability Database (NVD), and MITRE CWE database. All data is sourced from these authoritative, publicly available resources to ensure accuracy and reliability.
How often is the database updated?
The database is regularly updated with new CVE entries and updated information from MITRE and NVD. New vulnerabilities are typically added within 24-48 hours of being published to ensure our users have access to the latest security information.
Can I use this data for my project?
Yes! The CVE and CWE data is publicly available and can be used for research, security analysis, and integration into your own tools and applications. However, please review our Terms of Service for specific usage guidelines and attribution requirements.
Have Questions or Feedback?
We're here to help! If you have questions about our database, need assistance, or have suggestions for improvements, please don't hesitate to reach out.
Contact Us