4

Is there a comprehensive free and open source database of aggregated and correlated software vulnerabilities available anywhere?

migrated from softwarerecs.stackexchange.com Mar 15 '17 at 8:26

This question came from our site for people seeking specific software recommendations.

  • @Issy I requested the migration – Philippe Ombredanne Mar 15 '17 at 2:11
  • 1
    Did you check with OD if they'd welcome it? I'm not active over there, so I'm not 100% sure. – Izzy Mar 15 '17 at 7:34
  • 1
    What kind of aggregation do you want? What kind of correlations do you want? Please give real-world examples of what the data should include. – Nicolas Raoul Mar 15 '17 at 8:28
  • Please read this and improve your question accordingly – user4293 Mar 15 '17 at 11:59
  • @JanDoggen I will improve – Philippe Ombredanne Mar 15 '17 at 15:48
2

Given that there was nothing, I started a project https://github.com/nexb/vulnerablecode that is supported by NLnet.nl https://nlnet.nl/project/vulnerabilitydatabase/ and that will eventually deliver a free and open database of aggregated and correlated software package vulnerabilities, built in Python and delivered as public domain data.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.