Vulnerabilities Checklists Product Dictionary Impact Metrics Data Feeds Statistics
Home ISAP/SCAP SCAP Validated Tools SCAP Events About Contact Vendor Comments

CVE and CCE Statistics Query Page
(CCE support is under development)

This is a general purpose vulnerability statistics generation engine. Use it to graph and chart vulnerabilities discovered within a product or to graph and chart sets of vulnerabilities containing particular characteristics (e.g. remotely exploitable buffer overflows). These calculations may take up to several minutes to be generated depending on the complexity of the statistic requested.

Important Note: Linux distributions are often made up of a large collections of independently developed software and it is sometimes difficult to determine which software packages should be considered part of the operating system and which should be considered independent but merely included along with the operating system. In addition, some vulnerabilities occur within the Linux kernel and for those vulnerabilities we do not enumerate all of the hundreds of Linux distributions. Thus, the statistics related to Linux must be interpreted carefully. We will be working to provide better statistics for Linux distributions.

Vendor
A..B   C..E   F..H   I..K   L..N   O..Q   R..T   U..W   X..Z   All
Product
A..B   C..E   F..H   I..K   L..N   O..Q   R..T   U..W   X..Z   All
Version
^ --- Choose a Vendor or Product --- ^
Search start date:
Search end date:
CVSS Version 2 Metrics:

Vulnerability Severity:
Access Vector:
Authentication:
Confidentiality:
Integrity:
Availability:
Access Complexity:
Vulnerability Category:

Use only vulnerabilities that have the following associated resources:




Software Flaws (CVE)
Misconfigurations (CCE), under development

US-CERT Technical Alerts
US-CERT Vulnerability Notes
US-CERT Technical Alerts or Vulnerability Notes
OVAL Queries

Disclaimer Notice & Privacy Statement / Security Notice

Send comments or suggestions to nvd@nist.gov

NIST Computer Security Resource Center (CSRC)

NIST is an Agency of the U.S. Commerce Department

Full vulnerability listing