Question 1

What is a CVE?

Accepted Answer

CVE (Common Vulnerabilities and Exposures) is a standardized identifier for publicly known security vulnerabilities. Each CVE has a unique ID, description, and CVSS severity score assigned by NIST.

Question 2

What does CVSS score mean?

Accepted Answer

CVSS (Common Vulnerability Scoring System) is a 0-10 numeric score for vulnerability severity: 0.1-3.9 is Low, 4.0-6.9 is Medium, 7.0-8.9 is High, 9.0-10.0 is Critical.

Question 3

Where does this CVE data come from?

Accepted Answer

This tool queries the NIST National Vulnerability Database (NVD), the authoritative US government repository of CVE data. Results reflect the live NVD feed.

Question 4

What is the difference between CVE and CWE?

Accepted Answer

CVE identifies specific vulnerability instances in software products. CWE (Common Weakness Enumeration) describes the category of weakness, such as SQL injection or buffer overflow.

CVE Lookup

CVSS Severity Reference