TLDR InfoSec · MISCELLANEOUS

DEATH KNELL OF THE NVD?

resilientcyber.substack.com5 min read

Summary from the TLDR InfoSec newsletter

As the publishers of CVEs, the NVD is a core part of many security systems. The NVD recently posted an announcement that it is establishing a consortium to address challenges within the organization. This has led to 90% of proposed CVEs going unassigned and the association of CPEs, CVSS, and CWEs to CVEs to be severely halted. This author proposes a few alternatives to the NVD.