#NIST National #Vulnerability #Database Disruption Sees #CVE Enrichment on Hold

Since February 12, 2024, NIST has almost completely stopped enriching software vulnerabilities listed in its National Vulnerability Database (NVD), the world's most widely used software vulnerability database.

Source: https://www.infosecurity-magazine.com/news/nist-vulnerability-database/

#nvd #usa #security #software #problem #exploit #hack #bug #news #cybersecurity

CVE-2020-19909 is everything that is wrong with CVEs

source: https://daniel.haxx.se/blog/2023/08/26/cve-2020-19909-is-everything-that-is-wrong-with-cves/

This is a story consisting of several little building blocks and they occurred spread out in time and in different places. It is a story that shows with clarity how our current #system with #CVE Ids and lots of power given to #NVD is a completely broken system.

#software #security #problem #bug #risk #news #fail