Which database is the U.S. government repository that provides CVE details and vulnerability scores?

Which database is the U.S. government repository that provides CVE details and vulnerability scores?

• A. Common Vulnerabilities and Exposures (CVE)
• B. National Vulnerability Database (NVD)
• C. Open Source Vulnerability Database (OSVDB)
• D. Common Weakness Enumeration (CWE)

Answer: (B)

The National Vulnerability Database is the U.S. government repository for CVE details and vulnerability scores. It hosts CVE entries—the identifiers and descriptions assigned by MITRE—and augments them with CVSS-based severity scores, impact metrics, and related metadata. This combination makes it the authoritative source for both the vulnerability descriptions and their standardized risk ratings in a government-supported, publicly accessible database. The CVE itself is just the naming system for vulnerabilities, not a scoring database. OSVDB was a separate project that is no longer maintained, and CWE classifies software weaknesses rather than individual vulnerabilities or scores.

The National Vulnerability Database is the U.S. government repository for CVE details and vulnerability scores. It hosts CVE entries—the identifiers and descriptions assigned by MITRE—and augments them with CVSS-based severity scores, impact metrics, and related metadata. This combination makes it the authoritative source for both the vulnerability descriptions and their standardized risk ratings in a government-supported, publicly accessible database. The CVE itself is just the naming system for vulnerabilities, not a scoring database. OSVDB was a separate project that is no longer maintained, and CWE classifies software weaknesses rather than individual vulnerabilities or scores.