CVE (Common Vulnerabilities & Exposures) is a standardized identifier assigned to publicly disclosed cybersecurity vulnerabilities. Per CVE, the organization of the same name, a vulnerability is: “A weakness in the computational logic (e.g. code) found in software and hardware components that, when exploited, results in a negative impact to confidentiality, integrity, or availability. Mitigation of the vulnerabilities in this context typically involves coding changes, but could also include specification changes or even specification deprecations (e.g. removal of affected protocols or functionality in their entirety).”
They are catalogued and searchable within the database of the same name: CVE.org and there’s many pages on the internet dedicated to providing information about them, including NIST’s National Vulnerability Database.
(sources: https://nvd.nist.gov/vuln)

Leave a comment