4

Is there a comprehensive free and open source database of aggregated and correlated software vulnerabilities available anywhere?

5
  • @Issy I requested the migration Mar 15 '17 at 2:11
  • 1
    Did you check with OD if they'd welcome it? I'm not active over there, so I'm not 100% sure.
    – Izzy
    Mar 15 '17 at 7:34
  • 1
    What kind of aggregation do you want? What kind of correlations do you want? Please give real-world examples of what the data should include. Mar 15 '17 at 8:28
  • Please read this and improve your question accordingly
    – user4293
    Mar 15 '17 at 11:59
  • @JanDoggen I will improve Mar 15 '17 at 15:48
2

Given that there was nothing, I started a project https://github.com/nexb/vulnerablecode that is supported by NLnet.nl https://nlnet.nl/project/vulnerabilitydatabase/ and that will eventually deliver a free and open database of aggregated and correlated software package vulnerabilities, built in Python and delivered as public domain data.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.