Jan 5, 2026 · The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables …

HEADQUARTERS 100 Bureau Drive Gaithersburg, MD 20899 (301) 975-2000 Webmaster | Contact Us | Our Other Offices Incident Response Assistance and Non-NVD Related Technical Cyber Security …

Vulnerabilities All vulnerabilities in the NVD have been assigned a CVE identifier and thus, abide by the definition below. CVE defines a vulnerability as: "A weakness in the computational logic (e.g., code) …

An official website of the United States government Here's how you know NVD MENU Information Technology Laboratory National Vulnerability Database General Vulnerabilities

The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation …

The following table contains links and short descriptions for each API or data feed the NVD offers. Please read how to keep up-to-date with NVD data when using the traditional data feeds.

Sep 16, 2025 · NVD Contains ... CVSS V3 Score Distribution ... CVSS V2 Score Distribution ... For information on how to the cite the NVD, including the database's Digital Object Identifier (DOI), …

The NVD augments the CVE List with additional enrichment, conversion of various data points into SCAP datatypes, a fine-grained search engine and granular APIs. The NVD is synchronized with …

The National Vulnerability Database (NVD) is tasked with enriching each CVE once it has been published to the CVE List, after which it is typically available in the NVD within an hour.

NVD integrates CWE into the scoring of CVE vulnerabilities by providing a cross section of the overall CWE structure. NVD analysts score CVEs using CWEs from different levels of the hierarchical …