Common Vulnerabilities & Exposures (CVE)

CVE (Common Vulnerabilities & Exposures) is a standardized identifier assigned to publicly disclosed cybersecurity vulnerabilities. Per CVE, the organization of the same name, a vulnerability is: “A weakness in the computational logic (e.g. code) found in software and hardware components that, when exploited, results in a negative impact to confidentiality, integrity, or availability. Mitigation of the vulnerabilities in this context typically involves coding changes, but could also include specification changes or even specification deprecations (e.g. removal of affected protocols or functionality in their entirety).”

They are catalogued and searchable within the database of the same name: CVE.org and there’s many pages on the internet dedicated to providing information about them, including NIST’s National Vulnerability Database.

(sources: https://nvd.nist.gov/vuln)

Leave a comment

About the author

Cybersecurity Savant is the moniker of a blogger based in the SF Bay Area. The purpose of this blog is to share information to everyone who may be curious or is trying to learn more about Cybersecurity. While I, personally, am leagues away from being the next David Bombal, I created this site in an effort to become and also support anyone who is trying to be, a Cybersecurity Savant. You’ll find a list of growing Acronyms, some reflections from time to time, but mostly content related to Cybersecurity. As this blog grows I would like to add more information about Computer Science, Information Technology, Programming, AI, Cryptocurrency, De-Fi, Web3, and all these new developments that seem to be arriving faster than we can learn them. Welcome to the journey.

Design a site like this with WordPress.com
Get started