vulnerability-data

Automated tracker for OpenClaw CVEs and security advisories from the GitHub Advisory Database, repo advisories and CVE List V5

Home page of project "KB"

With the hope that someone finds the data useful, we used to periodically publish an archive of almost all of the non-sensitive vulnerability information in our vulnerability reports database. See also https://github.com/CERTCC/Vulnerability-Data-Archive-Tools

Monthly NVD CVE statistics, charts and post copy, generated on the first of each month

Hunts Ghost CVEs: IDs already public in commits or advisories that CVE.org still lists as RESERVED, or not at all.

Tools for working with the CERT Vulnerability Data Archive. See also https://github.com/CERTCC/Vulnerability-Data-Archive

ML research on software vulnerabilities

A curated collection of cybersecurity datasets for use in research, threat analysis, machine learning, and educational projects. This repository includes datasets related to malware, network traffic, phishing, vulnerabilities, and intrusion detection, organized for easy access and integration into data-driven workflows.

Parse Nessus files, send to Graphite / MongoDB, generate metrics.

Tracks the NVD CVE analysis backlog since NIST's February 15, 2024 reduced-capacity announcement, updated every 6 hours

Runs cveforecast.org. Sixteen models predict CVE volume each night, overall and per CNA, and each is ranked against a naive baseline.

Lists Reserved but Public CVE IDs: still RESERVED in the CVE List but already cited in public advisories (rbptracker.org)

Daily analysis and charts of when CVEs get published, broken down by CNA

Tracks publishing activity and trends for every official CNA, refreshed every 3 hours (cnapulse.org)

Pipeline that pulls NVD and CVE List V5 data and builds the charts and draft for the 2025 CVE data review

Tracks CVSS score disagreements between NVD and the GitHub Advisory Database

Armada is a unification for scraping, integration, and federation of vulnerability data for risk and source code data.

Tracks how often CVE records get updated and which ones change most, published as a GitHub Pages report

CVE Stats By CNA Vendor Type

Measures Package URL (PURL) adoption in CVE records since CVE schema 5.2.0 added PURL support