The National Vulnerability Database (NVD) – Where It Is and Where It’s Going
summary
NVD reports a new enrichment team and development team fully onboarded, APIs restored to stable, and a proof‑of‑concept tool for automating Linux kernel CPEs under development; backlog exists after a 32% increase in CVEs in 2024 but a gap‑filling backlog plan starts immediately to speed processing. A public Vulntology beta this summer invites feedback, and a major overhaul of CPE specs plus an open CPE workshop and external console roadmap aims to let vendors manage CPEs directly.
AI-written summary · about
chapters (9)
- 0:00Introduction and overview
- 1:30The NVD data ecosystem
- 2:48Strategic updates and changes
- 7:45Operational improvements
- 12:30New mission statement
- 13:01Meeting user needs
- 13:34Vulnerability trends
- 15:14Future project roadmap
- 19:32Question and answer session
related talks
41mNIST’s National Vulnerability Database Update and the Vulnerability Enrichment Ecosystem
51mPanel Discussion: It is a Tale as Old as Time…. a CNA, the NVD, and a CVE Consumer Walk Into a ...
40mOpen Source CVE Monitoring and Management: Cutting Through the Vulnerability Storm
35mVulnrichment Playground
30mThe Growing Crisis in CVE Data Quality
37mTracking Vulnerabilities with Buildroot and Yocto
01h 00mThe CVE Program Quality Era: Strengthening Trust and Impact In Global Vulnerability Data
53mThe Trials and Tribulations of Bulk Converting CVEs to OSV