The CVE Binary Tool helps you determine if your system includes known vulnerabilities. You can scan binaries for over 350 common, vulnerable components (openssl, libpng, libxml2, expat and others), or if you know the components used, you can get a list of known vulnerabilities associated with an SBOM or a list of components and versions.

Streamline vulnerability patching with CVSS, EPSS, and CISA's Known Exploited Vulnerabilities. Prioritize actions based on real-time threat information, gain a competitive advantage, and stay informed about the latest trends.

A free and open vulnerabilities database and the packages they impact. And the tools to aggregate and correlate these vulnerabilities. Sponsored by NLnet https://nlnet.nl/project/vulnerabilitydatabase/ for https://www.aboutcode.org/ Chat at https://gitter.im/aboutcode-org/vulnerablecode Docs at https://vulnerablecode.readthedocs.org/

Public Roadmap | huntr.dev

Vulnogram is a tool for creating and editing CVE information in CVE JSON format

PatrowlHears - Vulnerability Intelligence Center / Exploits

Extensible framework for analyzing publicly available information about vulnerabilities

Simple REST-style web service for the CVE searching

CVSS (Common Vulnerability Scoring System) Calculator CVSSv3.1

A Java library for calculating CVSSv2 and CVSSv3 scores and vectors

Common Vulnerability Scoring System (CVSS) made safe and highly efficient

CVSS v4.0 calculator

Daily archiver & triage issue creator for new releases of CISA's Known Exploited Vulnerabilities list

The ISRA security-risk-assessment-tool project is an Electron based application used to do security risk assessments at a technical level

A GitHub action that sends Dependabot Vulnerability Alerts to multiple sources.

Build a CVE library with aggregated CISA, EPSS and CVSS data

KEV EPSS Data

Common Vulnerability Scoring System (CVSS)

CvssSuite - This Ruby gem helps you to process the vector of the Common Vulnerability Scoring System.

Severity scoring and exploit categorisation for vulnerability reports using machine-learning tools.