Would like to ask currently, is the National Vulnerability Database (NVD) still the place to go if you want to search for update vulnerabilities for different products? I find that some product vulnerabilities are not found in the NVD database. For example, I search for "Sitefinity" and it gives me no results. But when I do a search on Google, I found something on osdir. Is there another alternative vulnerability database that you know of that is more updated?


NVD is an authoritative source for vulnerabilities reported to them. They do not list vulnerabilities that merely exist in the wild.

So, yes, the NVD is a fine place to go, but it is never going to be fully complete. Not every vulnerability is issued a CVE.

|improve this answer|||||
  • ok, so the only other way is to use the search engine. thanks – Pang Ser Lark Jul 14 '15 at 4:04

There are quite a lot of vulnerability DBs out there.

In the good old days, those were Milw0rm and 0day.

Now you probably look at http://www.rapid7.com/db/
as well as https://www.exploit-db.com/

|improve this answer|||||

Not the answer you're looking for? Browse other questions tagged or ask your own question.