Adding vulnerabilities where CVE id are not assigned about cve-search HOT 14 CLOSED

Could you please give some example sources? Then I can also take a look at it. Thanks

from cve-search.

Some possible sources:

• http://seclists.org/fulldisclosure/
• http://seclists.org/bugtraq/
• https://www.kb.cert.org/vuls/

from cve-search.

For the record.

Came accross this, searching through LWN archives:

DWF - Distributed Weakness Filing

• Very young (March 2016),
• yet seems to come with someone with enough legitimacy and corporate backup/listening to have a possible usefulness (in the future?),
• csv so far = indisputably parsable.

https://www.redhat.com/fr/about/blog/introducing-dwf-project-vulnerability-reporting-done-open-source-way

Motivations, with links to doc, guidelines etc.

http://lwn.net/Articles/679441/

Database:

https://github.com/distributedweaknessfiling/DWF-Database

from cve-search.

Stale issue message

from cve-search.

https://distributedweaknessfiling.org/ seems dead and the GitHub repository disappears.

Still an open question, should provide a way to get an UUID from cve-search.org if the vuln is not known? and keep track of vulnerability ourself.

from cve-search.

@adulau Could you provide a example of such a database / source for vulnerabilities with no cve assigned?

from cve-search.

Stale issue message

from cve-search.

Stale issue message

from cve-search.

You can direct people to the DWF webform at https://iwantacve.org/ to get CVE identifiers for issues.

from cve-search.

For the record.

Came accross this, searching through LWN archives:

DWF - Distributed Weakness Filing

• Very young (March 2016),
• yet seems to come with someone with enough legitimacy and corporate backup/listening to have a possible usefulness (in the future?),
• csv so far = indisputably parsable.

https://www.redhat.com/fr/about/blog/introducing-dwf-project-vulnerability-reporting-done-open-source-way

Motivations, with links to doc, guidelines etc.

http://lwn.net/Articles/679441/

Database:

https://github.com/distributedweaknessfiling/DWF-Database

This has been rebooted now:

https://github.com/distributedweaknessfiling/

from cve-search.

Stale issue message

from cve-search.

Stale issue message

from cve-search.

Some of the reports in the CERT vulnerability notes database (https://www.kb.cert.org/vuls/bypublished/desc/) have no assigned CVE IDs, like the latest one here (https://www.kb.cert.org/vuls/id/883754). Could this be an example?

from cve-search.

Stale issue message

from cve-search.