Registro de cambios
2021-04-12
- [Feature] Some users mistake their mail address as legitimate username to login. In this case a warning message informs the user about the mistake.
2021-04-08
- [Optimization] Performance optimization for CTI country analysis (closed beta invite only at the moment). Time range analysis is now incremental which makes report generation much faster (especially for larger ranges).
2021-03-31
- [Optimization] All listings in the personal profile do contain timestamps to make identification of single items much easier.
- [Optimization] Completed some of the missing translations for French, Italian, Spanish, Polish, and Swedish.
- [Optimization] Improved the handling of time format regarding country-specific definitions. The language en will show A.M. and P.M. only if the browser is also set to en-us. Otherwise the 24 hour format is used. If the language is set to fr and the browser announces fr-fr there will be the French format 12h34. The 24 hour format is also used as default for all languages without a specific definition.
2021-03-30
- [Bugfix] Fixed a bug where some long product names, product listings and titles did not show the product name in its entirety.
- [Optimization] In API 3.26 fixed an issue where queries for
advisory_date_start
,entry_timestamp_create_start
,entry_timestamp_change_start
, andentry_timestamp_all_start
did not work properly if the request value had a trailing whitespace.
2021-03-29
- [Feature] The personal API history does show the execution time for a request to help optimize queries. The column is shown as seconds and sortable.
- [Feature] Added planned features in a roadmap to announce upcoming functionality. The items shown are just suggestions and might change regarding implementation and deployment.
2021-03-28
- [Optimization] Better description of update handling, especially prioritization of new data for existing entries and update requests by customers.
- [Optimization] Optimized the description of different commit moderation approaches. The actions for handling spam and profanity are explained in detail.
2021-03-26
- [Bugfix] In API 2.20/3.25 the list of multiple items in
software_affectedlist
andsoftware_notaffectedlist
do trim trailing whitespaces correctly.
2021-03-25
- [Optimization] Added a new community rank Guru which requires 5000 points to be reached. Therefore, Grand Master is not the highest rank anymore.
2021-03-24
- [Feature] Introduced API 3.24 with the new request type
entry_timestamp_all_start
which combines new items fromentry_timestamp_create_start
and updated items fromentry_timestamp_change_start
in a single stream.
2021-03-20
- [Optimization] Optimized speed and memory consumption of queries based on LIKE statements in search queries.
2021-03-17
- [Feature] Documentation of the different levels used in the field exploit_exploitability shown on multiple listings on the web site.
2021-03-10
- [Feature] Made internal changelog public to provide full transparency for our customers. Entries earlier than 2020 just show milestones and not detailed changes.
- [Feature] Added link to changelog under support in main menu and in the footer of the page.
- [Optimization] Updated internal quality guidance for CVSS fields during creation of new entries based on official Microsoft disclosures.
2021-03-08
- [Optimization] Updated internal quality requirements for
advisory_person_name
andadvisory_person_nickname
fields to prevent inaccurate information during daily update procedure.
2021-03-04
- [Optimization] Optimized limiter to prohibit crawling of view elements by non-commercial users.
- [Optimization] Limiter uses better geolocation data to prevent malicious users from changing IP addresses to slow down detection of abuse.
2021-03-03
- [Bugfix] Fixed a rare German translation issue in a specific sentence of some vulnerability summaries.
2021-03-01
- [Optimization] Optimized language database for better performance.
- [Feature] Prepared language database for upcoming translations.
2021-02-28
- [Feature] CTI Analysis (closed-beta only) supports search strings for technology-specific research.
2021-02-22
- [Optimization] Optimized internal CTI event analysis module.
- [Feature] Added user element under search in main menu.
2021-02-04
- [Feature] Added load balancing features to handle performance peaks much better.
- [Feature] Enabled priority module to provide high-availability for enterprise customers.
2021-02-03
- [Optimization] Optimized normalize module to improve quality assurance of vulnerability data management.
2021-02-01
- [Feature] Initiated preparation for port of web services to PHP8. First polyfill functions tested.
2021-01-17
- [Bugfix] Fixed a bug where some new user submissions were shown as rejected even though they were still not processsed yet. This issue was reported by user misc.
2021-01-16
- [Feature] Start of internal testing for CTI attribution module to identify APT group activities as such. Used by CTI team to create CTI alerts and infos for paying customers.
2021-01-09
- [Optimization] Changed
entry_timestamp_delta
behavior from7200
to120
to keep commit grouping much smaller. Entries updated within a short period of time will pushed into the update stream to provide the most actual data to API users.
2021-01-04
- [Optimization] Performance improvement of search engine. Early dissection will speed up some specific search requests.
- [Optimization] Performance improvement of monoblock engine. Compilation of entries is a bit faster under certain circumstances.
2020-12-08
- [Feature] In API 3.23 added request type
cursorinit
to determine ideal initial cursor position for ongoing vulnerability stream (e.g. Splunk).
2020-12-04
- [Feature] Introduced information regarding ATT&CK. The fields are currently auto-generated and not part of the monoblock.
- [Feature] In API 2.19/3.22 added field
source_cve_cna
which contains a string of the CVE Numbering Authority that assigned the CVE. - [Bugfix] Corrected a display bug for tooltips of CVSS fields on certain overview pages.
2020-12-03
- [Optimization] Optimized signup flood protection to prevent malicious users from auto-generating community accounts.
2020-11-26
- [Feature] Added enw import feature for vulnerability moderators to handle custom entries and large batches of submissions.
2020-10-16
- [Optimization] Optimized some indexes within the database to improve performance.
2020-10-09
- [Feature] Introduced new monoblock structure to provide more possibilities like commits, commit histories, etc.
2020-05-01
- [Optimization] Upgrading to an extended server cluster for better performance.
2020-04-17
- [Bugfix] In API 3.21 the field
entry_timestamp_change
is now always present even if the entry was just created and never updated yet. In this case it will contain the same value likeentry_timestamp_create
. User of the official VulDB Splunk App are advised to update to the latest release.
2019-10-31
- [Feature] In API 3.20 added field
vulnerability_name
which contains a string or array a popular names of the vulnerability (e.g. Shellshock, Poodle).
2019-09-13
- [Feature] In API 3.19 added field family
entry_details_*
which containentry_details_affected
,entry_details_vulnerability
,entry_details_impact
,entry_details_exploit
,entry_details_countermeasures
, andentry_details_sources
.
2019-08-31
- [Feature] In API 3.18 added field
entry_replaces
to display duplicates which have been replaced by this entry.
2019-08-26
- [Feature] In API 3.17 added fields
vulnerability_cvss3_basevector_vuldb
andvulnerability_cvss3_tempvector_vuldb
to display full VulDB CVSSv3 vectors easily.
2019-07-01
- [Feature] Introduction of software type categories available in the field
software_type
.
2019-06-04
- [Bugfix] In API 3.16 fixed value of field
advisory_identifier
, disabled safeguard mechanism to prevent inconsistency in result count.
2019-06-01
- [Optimization] Updated the Data Privacy Notice to clarifying wording and added details about payment processing.
2019-05-17
- [Feature] In API 3.15 added fields
software_website_vendor
andsoftware_website_product
to the output.
2019-05-08
- [Feature] In API 3.14 requesting dedicated CVSS fields supports the official response format (e.g.
vulnerability_cvss3_vuldb_basescore
) and the legacy format (e.g.vulnerability_cvss3_basescore_vuldb
). The legacy format will be dropped in a future major release of the API.
2019-04-17
- [Feature] In API 1.8/2.18/3.13 added field
software_cpe23
which introduces full CPE 2.3 support whereassoftware_cpe
is still providing CPE 2.2 data.
2019-03-04
- [Feature] In API 1.7/2.17/3.12 added fields
entry_locked_status
andentry_locked_reason
to inform about entries undergoing update and review processes (they might change soon).
2019-03-01
- [Feature] Introduction of the C3BM Index (CVSSv3 Base Meta Index) based on CVSS data of multiple sources.
2019-02-20
- [Optimization] In API 1.6/2.16/3.11 improved speed, reliability and accuracy of
updates
queries.
2019-02-06
- [Feature] In API 3.10 added request parameter
offset
to set a starting point for results (pagination).
2019-02-01
- [Optimization] Reached the 10.000th community user. Congratulations!
2019-01-18
- [Feature] In API 3.9 added field
software_type
.
2019-01-11
- [Feature] In API 3.8 VulDB CVSSv3 scores use AI-driven autocomplete based on historical data and additional sources. The field
vulnerability_cvss3_vuldb_confidence
indicates the confidence of the vectors.
2019-01-08
- [Bugfix] In API 1.5/2.15/3.7 field
software_component
is not returning multiple fields anymore to prevent parsing errors.
2019-01-01
- [Feature] Enabling real-time views of recent and updated entries. You are now able to see the moderation time at work.
2018-12-13
- [Feature] In API 1.4/2.14/3.6 requesting details without unlocked archive access will warn in field
entry_warning
about limitation.
2018-10-01
- [Feature] Launch of Video Tutorial Series on YouTube to introduce new users to the capabilities of the service.
2018-09-01
- [Feature] Release of official Splunk App which is available on Splunkbase for free. Commercial or enterprise license is recommended.
2018-08-06
- [Feature] In API 3.5 support for the queries
advisory_date_start
,entry_timestamp_create_start
,entry_timestamp_change_start
.
2018-06-12
- [Bugfix] In API 2.13/3.4 fixed enforcement of
querylimit
fordetails=0
queries. This issue was reported by user portal.
2018-06-11
- [Feature] In API 3.3 added CVSS meta score support with
vulnerability_cvss3_meta
.
2018-06-06
- [Bugfix] In API 1.3/2.12/3.2 fixed wrong values in
response_remaining
(calculation was correct, value shown was wrong). This issue was reported by user portal.
2018-06-04
- [Bugfix] In API 1.2/2.11/3.1 fixed default sort order of
recent
andupdates
requests.
2018-05-18
- [Feature] Introduced API 3.0, which moved
vulnerability_cpe
tosoftware_cpe
.
2018-05-15
- [Feature] In API 2.10 added
software_affectedlist
andsoftware_notaffectedlist
. - [Feature] In API 2.10 added
vulnerability_risk
(also shown in non-detail responses).
2018-05-14
- [Optimization] In API 2.9 added detailed error messages regarding API key problems (
missing
,wrong
,unknown
,valid
). - [Optimization] In API 2.9 enterprise customers have performance priority over free users.
2018-05-08
- [Feature] In API 2.8 the field
entry_title
does not show CVE anymore. - [Feature] In API 2.8 added fields
vulnerability_timeline
,countermeasure_reactiondays
,countermeasure_0daydays
,countermeasure_exposuredays
, andcountermeasure_exploitdelaydays
.
2018-05-07
- [Feature] In API 2.7 added support for request type
topsoftware
.
2018-05-01
- [Feature] Made Data Privacy Notice available to comply with european GDRP requirements.
2018-04-01
- [Feature] Release of Alexa Skill to make vulnerability management possible with the AI by Amazon.
2018-03-22
- [Feature] Working on a proof-of-concept to use Alexa as a gateway to work with vulnerability data.
2018-01-22
- [Feature] Upgrade to API 2.0. Response contains three elements (request, response, result) instead just the results.
2017-09-16
- [Feature] Partnership with Titanium Team of scipag to establish Cyber Threat Intelligence services (CTI).
2017-06-02
- [Optimization] Optimization of automated exploit price calculation to gain more accuracy.
2017-06-01
- [Feature] Introduction of dynamic graphs shown in different views.
2017-05-19
- [Optimization] Optimization of the official Twitter feed.
2017-05-16
- [Bugfix] Fixed a display issue on the frontpage. Under certain circumstances new items were not shown as bold.
2017-04-28
- [Feature] Added dynamic charts in the results overview of web searches.
2017-04-21
- [Feature] Added dynamic charts of all kind of overview pages.
2017-04-10
- [Feature] Created an About page which explains the history of our vulnerability service.
2017-04-01
- [Feature] Added the 100.000th entry to the database. Check the stats for more details. Congratulations!
2017-03-22
- [Feature] Vulnerability entries flagged as false-positive do now highlight this fact on their pages (title and introduction).
2017-03-21
- [Feature] Introduced data for OVAL and IAVM. Completed all existing entries with appropriate data.
2017-02-23
- [Feature] Supporting CVSS scores from multiple sources (VulDB, vendor, researcher, NVD).
2017-02-13
- [Optimization] Optimized the indexing of the database to improve search performance.
2017-02-01
- [Feature] Public availability of community edition. Create your account for free.
2017-01-20
- [Optimization] Optimized performance by using specific features and configuration settings in PHP7.
2017-01-18
- [Feature] Added an advanced search on the web site to improve specific search capabilities.
2017-01-01
- [Feature] Start open beta of community edition.
2016-12-20
- [Feature] Introduced Bug of the Day on the front page. One of the more serious or interesting issues of the recent days is shown every day.
2016-12-19
- [Optimization] Redesign of the front-page with a slick layout and better data accessibility.
2016-12-16
- [Feature] Implemented a module to detect loss of data integrity on the service.
2016-12-01
- [Feature] Introduction of public API to provide vulnerability for automated processing.
2016-11-08
- [Optimization] Optimization of database table structures to gain more flexibility and performance.
2016-11-07
- [Feature] Implementation of Content Security Policy (CSP) to improve web security of the service.
2016-11-02
- [Feature] It is now possible to upvote comments for vulnerability entries. Upvoted comments are shown on top of the list.
2016-11-01
- [Feature] Start closed beta of community edition.
2016-10-26
- [Feature] Editing a section of a vulnerability will automatically jump to the correct section of the edit form.
2016-10-25
- [Feature] Existing vulnerability entries can now be edited immediately by members of the moderation team.
2016-10-14
- [Feature] Enhanced the existing cache module to allow caching of database queries and results.
2016-10-11
- [Feature] Every user account has now a profile.
- [Feature] Registered users are able to tweak their own configuration of the service.
2016-10-10
- [Feature] Registered users are able to see history of vulnerability entries they have been viewing earlier.
2016-10-07
- [Feature] Registered users are able to gain community points with activities to get a higher ranking on the site.
2016-10-06
- [Feature] Users are able to submit new entries which will be queued and processed by the vulnerability moderation team.
2016-10-05
- [Feature] Users accessing ressources which require an authentication receive a proper error message.
2016-10-04
- [Feature] Users are able to reset their password via email (password recovery).
2016-10-03
- [Feature] Logins with a new device or from an unknown source will inform the account holder about the potentially suspicious login. New devices are stored and shown in the personal device management overview.
2016-06-24
- [Feature] Added a limiter to prevent malicious users from scraping our data without authorization.
2016-06-22
- [Feature] Added full support for CVSSv3.
2016-10-01
- [Feature] Introduction of exploit price calculations to provide a better tool to prioritize exposed vulnerabilies.
2016-07-05
- [Optimization] Performance optimization for all web views.
2016-06-30
- [Feature] Some statistical data is now stored in a centralized table which allows them to be shown on multiple places without new calculations every time.
2016-05-02
- [Feature] Support for data fields of Tenable Nessus.
2016-04-29
- [Optimization] Optimize redirects of RSSS feed requests.
2016-04-27
- [Feature] Some data points are now shown in bubbles.
- [Optimization] Introduced a new site footer.
2016-04-14
- [Optimization] Complete rewrite of the search engine to provide better matches and optimized performance.
2016-04-06
- [Optimization] Optimization of HTML code to make pages smaller and faster to download and render.
2016-04-04
- [Bugfix] Fixed a bug or slow indexes which improved the performance of vulnerability display a lot.
2016-04-01
- [Feature] Introduction of new summaries and descriptions with more data enrichment.
- [Optimization] Performance optimization.
2016-03-14
- [Feature] Introducing Chart.js to generate dynamic charts.
2016-03-11
- [Optimization] Establish VulDB as independent service to gain more flexibility.
2016-02-23
- [Optimization] Migration to new hardware.
2016-02-17
- [Optimization] Renaming the Twitter handle from scipvulbot to "vuldb"https://twitter.com/vuldb.
2016-01-19
- [Feature] Enhancing statistical overview to provide previews and forecasts based in historical data.
- [Feature] Creating new text for different pages and sub-pages.
2015-12-01
- [Optimization] Adding caching modules to improve site performance. Caching is possible per site and file.
2015-11-20
- [Optimization] Increasing update frequency of existing entries.
2015-08-19
- [Bugfix] Corrected the listing of multiple authors of a vulnerability.
2015-08-07
- [Optimization] More performance optimization of database queries.
2015-08-03
- [Optimization] Performance optimization of database queries.
2015-07-10
- [Feature] Introduction of Top 5 lists.
2015-07-07
- [Feature] Adding Qualys data to vulnerability entries.
- [Feature] Adding SecurityCenter data to vulnerability entries.
2015-03-09
- [Feature] Introduction of new queue for vulnerability processing by mod team.
2015-02-25
- [Optimization] Optimization of all X-Force data import and display.
2015-02-03
- [Optimization] Optimizaton of summaries and descriptions of vulnerability entries.
2015-01-08
- [Optimization] Optimization of version descriptions of vulnerability entries.
2014-06-24
- [Feature] Approaching backlog of old entries before 2003 with vulnerabilities ranging back to 1988.
2014-05-26
- [Feature] Introduction of the "see also" hint which lists entries with are connected or similar.
2014-04-17
- [Feature] Adding a field to declare the date of the introduction of a vulnerability.
2014-03-27
- [Optimization] Optimization of queuing of new vulnerabilities to better prioritize processing.
2014-03-20
- [Feature] Added language support for Polish.
2014-03-14
- [Optimization] Database index optimization.
2014-03-07
- [Optimization] Optimizing collision detection during the processing of new entries.
2014-02-10
- [Optimization] Optimizing summaries regarding sources of vulnerability entries.
2014-01-29
- [Optimization] Added helper for vulnerability moderation team to determine arguments of attacks faster and more reliable.
2014-01-28
- [Optimization] Optimizing summaries regarding code samples.
2014-01-23
- [Optimization] Optimizing helper for vulnerability moderation team to complete new and existing entries with additional data. This increases data quality drastically.
2014-01-14
- [Bugfix] Fixed a bug where sometimes summaries and descriptions did contain spaces twice instead of once. This was just a problem in the HTML source code and not on the rendered web site.
2014-01-09
- [Optimization] Added helper for vulnerability moderation team to determine keywords which shall be used within the title of a vulnerability entry.
2013-12-19
- [Optimization] Optimizing the autocomplete feature to update new entries with historical data.
2013-11-06
- [Optimization] Optimizing the pre-parser to handle import of new vulnerability entries.
2013-10-22
- [Optimization] Changing the algorithm to calculate the current threat level.
2013-10-21
- [Optimization] Changing the algorithm to calculate the risk rating of vulnerability entries.
2013-10-18
- [Feature] Adding the support for OpenVAS data.
2013-10-17
- [Feature] Introducing the threat level to show an indicator for the current vulnerability landscape.
2013-10-03
- [Feature] Adding the possibility to add a custom word to the title to provide more details on first sight.
2013-10-01
- [Feature] Establishing a background updater which handles entries which need to be updated without interfering with the manual work of the moderation team.
- [Optimization] Enhancement of the review procedure of CVE entries pushed by MITRE to improve processing and quality.
2013-09-13
- [Feature] Collaboration with vFeed to exchange and enrich vulnerability data.
2013-09-12
- [Optimization] Completing all existing entries with Secunia data.
2013-09-11
- [Feature] Introducing risk maps to provide easy comparability between risk ratings of different sources.
2013-09-10
- [Feature] Introducing support for Secunia data as a source.
- [Feature] Introducing support for IBM X-Force data as a source.
2013-08-23
- [Feature] Added the 10.000th entry about Google Chrome to the database. Check the stats for more details. Congratulations!
2013-08-12
- [Feature] Added CVSSv2 temporal support.
2013-08-09
- [Feature] Adding support for a wide variety of new data fields.
2013-07-05
- [Optimization] Enhancement of the review procedure of Nessus entries.
2013-06-28
- [Optimization] Optimizing the plausability checks during vulnerability moderation to prevent contradicting and wrong data.
2013-06-19
- [Feature] Added support for CPE to better identification of products.
2013-06-11
- [Optimization] Updating large quantities of vulnerabilities is now improved thanks to incremental updates.
2013-06-03
- [Feature] Added support for screenshots per entries to illustrate attacks and countermeasures.
- [Feature] Added support to embed external videos per entries to illustrate attacks and countermeasures. Videos can be hosted at YouTube and Vimeo.
2013-05-31
- [Feature] Added the capability to add quotes from advisories to enrich entries.
- [Feature] Added the capability to add links to videos for a vulnerability.
2013-04-29
- [Feature] Introduction of CVSS maps.
2013-04-11
- [Feature] Added the capability to list multiple different products in an affected list. This is done additionally to the main product that is affected by a vulnerability.
2013-04-04
- [Optimization] Enhanced input validation mechanism during vulnerability management to prevent mistakes regarding vendor/product definitions.
2013-03-28
- [Optimization] Optimization of logging and tracking of queued items processed by the moderation team.
2013-03-19
- [Optimization] Optimized input validation mechanisms during vulnerability management.
- [Feature] Added input validation mechanisms during vulnerability management.
2013-01-09
- [Bugfix] Fixed an issue in the database. This did only affect moderation of vulnerabilities and was not reflected on the user-side of the service.
2012-12-21
- [Feature] Added a feature to normalize terms between different vulnerability entries.
2012-11-26
- [Optimization] Prepared the support for Milw0rm data for entries with an ID up to 50000.
2012-10-31
- [Feature] Added language support for French.
2012-10-15
- [Feature] Added language support for English.
2012-10-01
- [Feature] Added language support for Spanish.
- [Bugfix] Fixed an upload problem of new entries into the database.
2012-09-24
- [Feature] Added language support for Swedish.
2012-07-04
- [Feature] Migrating all available data from NASLDB.
2012-06-18
- [Feature] Added language support for Italian.
- [Bugfix] Fixed a problem in the German module responsible to handle umlauts.
2012-06-05
- [Optimization] Optimizing the autocomplete feature to update new entries with historical data.
2012-04-10
- [Bugfix] Fixed a problem during the display of archive data.
2012-03-13
- [Feature] Added support for better linking to external sources.
2012-03-09
- [Optimization] Added new categories/keywords in the existing RSS feeds.
2012-03-08
- [Feature] Added the calculation of the exposure time which measures the time of the disclosure and the mitigation possibilities of a vulnerability.
- [Optimization] Reviewed all available data of OSVDB.
2012-03-06
- [Feature] Added support to show images of vendors/products.
- [Feature] Added support for Google dorks to find issues very quickly.
- [Optimization] Optimization of summaries and descriptions.
2012-03-05
- [Optimization] Performance optimization.
2012-03-02
- [Optimization] Performance optimization.
2010-12-01
- [Optimization] Move to more powerful hardware due to increase in access.
2010-03-08
- [Feature] Introduction of Reference Maps for better linking of vulnerabilities and sources.
2010-02-10
- [Optimization] Make more statistical data available with better flexibility.
2010-02-08
- [Feature] Adding the alert info on top of the site to show the most recent vulnerability with the highest emergency rating.
2010-02-02
- [Optimization] Improved summary details per entries.
- [Optimization] Performance optimization for all RSS feeds.
2009-12-16
- [Feature] Partnership with OSVDB to cross-link vulnerability entries.
2009-10-27
- [Feature] Introduction of statistical overview.
- [Feature] Introduction of product overview.
2009-09-03
- [Feature] Start of the Twitter bot vuldb (formerly known as scipvulbot).
2009-08-25
- [Feature] Completing existing entries with mast actual data. This includes but is not limited to CVE, Secunia, SecurityTracker, vendor, and confirmation details.
2009-08-01
- [Feature] Introduction of recurring update processes.
2009-06-26
- [Optimization] Optimization of existing RSS feeds by adding summaries and categories.
2009-06-23
- [Optimization] Complete re-write of the site in PHP.
2006-07-01
- [Feature] Emergency-SMS notification service becomes available in Germany.
2004-05-19
- [Feature] Adding a lot of new data fields to enrich vulnerability entries.
2004-01-01
- [Feature] Introduction of Emergency-SMS notification service.
2003-12-19
- [Feature] Introduction of RSS feed.
2003-11-18
- [Feature] Initial release of scip_Alerter for desktop notifications.
2003-03-01
- [Feature] Bugbase is completely re-written in Perl and uses a dedicated backend for vulnerability moderation to gain more flexibility.
- [Optimization] Bugbase is re-branded as scip VulnDB and hosted on www.scip.ch.
2002-09-01
- [Optimization] Changed from static web site to dynamic database (with the kind support of DukeCS).
1997-01-01
- [Feature] Bugbase project launch by Marc Ruef.
Are you interested in using VulDB?
Download the whitepaper to learn more about our service!