Overview[]
The National Vulnerability Database (NVD) is a U.S. government repository of standards-based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. NVD includes databases of security checklists, security-related software flaws, misconfigurations, product names, and impact metrics.
The NVD also provides specific Common Vulnerability Scoring System (CVSS) scores for publicly known vulnerabilities.