Switch branches/tags
Nothing to show
Clone or download
Travis CI User
Travis CI User Automatic update
Latest commit 4248966 Dec 10, 2018
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
nvdcve Automatic update Dec 10, 2018
scripts Fix: update the base URL of the NVD files Apr 17, 2018
.travis.yml Fix: bad fqdn deployment field in Travis CI config Nov 29, 2017
LICENSE Add a license file for NVD/CVE files Nov 29, 2017
README.md Minor fixes in the README file Jan 4, 2018

README.md

NVD/CVE® as JSON files

Important: this repository is now partially redundant with the CVEProject/cvelist project that allows to explore the CVE®/NVD modification history using git as well as submitting new vulnerabilities using GitHub pull requests. However, this repository is still synchronized with the dictionaries to allow to fetch each vulnerability in JSON format.

About

This repository contains JSON files describing vulnerabilities from the NVD and CVE® dictionaries.

It has two main goals:

  • allow to easilly get the description of a vulnerability in the JSON format (schema)
  • allow to explore CVE®/NVD modification history using git

The JSON files in this repository are generated and updated daily using the NVD's JSON feeds and Travis CI.

Data access: JSON files can also be fetched at https://olbat.github.io/nvdcve/CVE-YYYY-NNNN.json.

Licensing

Common Vulnerabilities and Exposures (CVE®)

The CVE® is maintained by the Mitre Corporation.

The usage of this resource -as well as the JSON files in this repository- is restricted and explained in Mitre CVE®'s Terms of use:

CVE Usage: MITRE hereby grants you a perpetual, worldwide, non-exclusive,
no-charge, royalty-free, irrevocable copyright license to reproduce, prepare
derivative works of, publicly display, publicly perform, sublicense, and
distribute Common Vulnerabilities and Exposures (CVE®). Any copy you make for
such purposes is authorized provided that you reproduce MITRE's copyright
designation and this license in any such copy.

National Vulnerabilitiy Database (NVD)

The National Vulnerability Database is the U.S. government repository of standards-based vulnerability management data represented using the Security Content Automation Protocol (SCAP).

It is a superset of the CVE® dictionary augmented with additional analysis, a database, and a fine-grained search engine.

Usage restrictions of this resource are described in the NVD's FAQ:

All NVD data is freely available from our XML Data Feeds. There are no fees,
licensing restrictions, or even a requirement to register. All NIST
publications are available in the public domain according to Title 17 of the
United States Code. Acknowledgment of the NVD  when using our information is
appreciated. In addition, please email nvd@nist.gov to let us know how the
information is being used.