Is there a comprehensive free and open source database of aggregated and correlated software vulnerabilities available anywhere?
-
@Issy I requested the migration – Philippe Ombredanne Mar 15 '17 at 2:11
-
1Did you check with OD if they'd welcome it? I'm not active over there, so I'm not 100% sure. – Izzy Mar 15 '17 at 7:34
-
1What kind of aggregation do you want? What kind of correlations do you want? Please give real-world examples of what the data should include. – Nicolas Raoul Mar 15 '17 at 8:28
-
Please read this and improve your question accordingly – user4293 Mar 15 '17 at 11:59
-
@JanDoggen I will improve – Philippe Ombredanne Mar 15 '17 at 15:48
Given that there was nothing, I started a project https://github.com/nexb/vulnerablecode that is supported by NLnet.nl https://nlnet.nl/project/vulnerabilitydatabase/ and that will eventually deliver a free and open database of aggregated and correlated software package vulnerabilities, built in Python and delivered as public domain data.
