Versión 16.22.9 (2023-09-20)

• Commit 2b9d4

  Optimization
  Improvement of flooding and denial of service protection to guarantee an even more reliable service.

Versión 16.22.8 (2023-09-17)

• Commit a91bf

  Optimization
  The fields software_website_vendor and software_website_product are now auto-completed much better to provide improved data quality for less popular entries.

Versión 16.22.7 (2023-09-15)

• Commit eb2df

  Bugfix

  Customer request
  Fixed an issue where duplicates in CPE lists were creating odd JSON responses.

Versión 16.22.6 (2023-08-31)

• Commit 311c6

  Bugfix

  Customer request
  Fixed an issue where exported CPE lists (JSON) were shown as objects instead of arrays. Reported by Dave Thornley.

Versión 16.22.5 (2023-08-29)

• Commit 914ca

  Optimization
  Improved handling of malicious requests to guarantee availability and responsiveness for our customers.

Versión 16.22.4 (2023-08-09)

• Commit 1e7dc

  Bugfix
  Sums and average data of yearly views were not calculated correctly if there was a month with zero data.

Versión 16.22.3 (2023-08-03)

• Commit b7490

  Optimization
  Vulnerability data storage of source_nessus_type is much more efficient which increases performance as well.

Versión 16.22.2 (2023-08-02)

• Commit 65890

  Optimization
  Better handling of obsolete links to discontinued vulnerability sources.

Versión 16.22.1 (2023-08-01)

• Commit 4423b

  Optimization
  Vulnerability data storage of source_vulnerabilitycenter_severity is much more efficient which increases performance as well.

Versión 16.22.0 (2023-07-31)

• Commit 09088

  Feature

  Customer request
  Changes to the personal filter are now considered critical and as such they will inform the user about the edit via email.

Versión 16.21.7 (2023-07-30)

• Commit d6b1e

  Optimization
  Vulnerability data storage of source_nessus_risk and source_secunia_risk is much more efficient which increases performance as well.

Versión 16.21.6 (2023-07-29)

• Commit 3a72b

  Bugfix
  A display bug showed merged vulnerability submissions as rejected instead of merged into the existing entry. Thanks to Calvin Star for making us aware of this issue.

Versión 16.21.5 (2023-07-26)

• Commit b552b

  Bugfix
  In CTI views the list of references was not revealed entirely even if the user had a proper license.

Versión 16.21.4 (2023-07-24)

• Commit 520d2

  Optimization
  Better listing of sources associated with CTI actor activity analysis.

Versión 16.21.3 (2023-07-19)

• Commit 707b0

  Optimization
  Better IP address association for verified IOC (Indicators of Compromise). This increases the accuracy of CTI analysis of vulnerability entries.

Versión 16.21.2 (2023-07-17)

• Commit 71759

  Optimization
  The submission form for new vulnerabilities allows URLs for exploits as well.

Versión 16.21.1 (2023-07-16)

• Commit ab061

  Optimization
  Vulnerability exports do contain duplicate CVEs that got assigned.

Versión 16.21.0 (2023-07-05)

• Commit 0c32c

  Feature
  Sometimes CNAs assign duplicate CVEs for the same vulnerability. We do now show such duplicates to help to better understand connections between CVE entries.

Versión 16.20.3 (2023-06-27)

• Commit 6ee4c

  Optimization
  Better identification of vulnerability entries which affect products that are end-of-life. Version-specific association is now possible.

Versión 16.20.2 (2023-06-26)

• Commit bb031

  Optimization
  Improvement of CTI analysis for vulnerabilities that spike within short timeframes (hours and days). The data is loaded, analyzed, and presented much faster.

Versión 16.21.2 (2023-07-17)

• Commit 39c9a

  Optimization
  Optimization of monoblock capabilities to handle vulnerability data.

Versión 16.20.0 (2023-06-13)

• Commit e7287

  Feature
  There is also a list of most recent IP addresses added as IOCs available for paying users.

Versión 16.19.0 (2023-06-10)

• Commit e6e0d

  Feature
  A list of the most recent actor IOCs is available for paying users.

Versión 16.18.1 (2023-06-03)

• Commit e3b45

  Optimization
  Detection of commit collisions during editing of vulnerability data. Entries will be locked until an edit has been finalized.

Versión 16.18.0 (2023-05-26)

• Commit b9b95

  Feature
  Actor analysis adds links to malware samples to support in-depth analysis.

Versión 16.17.2 (2023-05-23)

• Commit b7248

  Optimization
  Improved use of vulnerability names for better data matching on the web service.

Versión 16.17.1 (2023-05-17)

• Commit 6f54e

  Optimization
  Upgraded database servers to improve performance during peak times.

Versión 16.17.0 (2023-05-13)

• Commit b7e2d

  Feature

  API Change

  Customer request
  In API 2.37/3.57 introduction of the field source_cve_duplicate to indicate whether a duplicate CVE has been assigned to an entry.

Versión 16.16.4 (2023-05-11)

• Commit 0fa94

  Bugfix
  Fixed a minor view issue with Indicator of Compromise (IOC) tables that list IP ranges.

Versión 16.16.3 (2023-05-10)

• Commit 8f483

  Bugfix
  Fixed an issue where sync of researcher data with the CVE stream did not happen properly under certain circumstances.

Versión 16.16.2 (2023-05-05)

• Commit ba5c5

  Optimization
  Improvement of timeseries handling which contain CTI activity scores and exploit today prices.

Versión 16.16.1 (2023-05-03)

• Commit bf769

  Optimization
  Improved intelligent matching of vendor and product definitions in all search queries, especially in multi-line fields.

Versión 16.16.0 (2023-04-29)

• Commit eaaf4

  Feature
  Due to our intensive involvement as a CNA (CVE Numbering Authority) we have extended the main menu to access CVE details that are maintained by us very quickly.

Versión 16.15.1 (2023-04-22)

• Commit e45ea

  Optimization
  The discussion possibility for vulnerabilities mentions that they are intended for public exchange and not fort support queries. Use the contact form instead to approach our support team.

Versión 16.15.0 (2023-04-21)

• Commit f33df

  Feature
  The CTI views for actors and IP addresses show the date of the first identification of Indicators of Compromise.

Versión 16.14.1 (2023-04-18)

• Commit f5a6c

  Optimization
  Improvement of the field advisory_type to indicate where a vulnerability disclosure is originating from.

• Commit 9cf62

  Bugfix

  API Change
  Fixed an issue where under certain circumstances the field advisory_type was not shown in an API response.

Versión 16.14.0 (2023-04-17)

• Commit a040a

  Feature
  Added the setting to enable count information for certain views in the site title. This helps to determine how many items are listed on a page.

• Commit 2ef13

  Bugfix
  Fixed an issue in the overview of personal posts which did not show the name of a vulnerability entry properly.

Versión 16.13.2 (2023-04-16)

• Commit 9a6a2

  Optimization
  Changed the HTML title of vulnerability entries to use a colon instead of a pipe symbol as delimiter. Please update your parsers if you are relying on this data structure.

Versión 16.13.1 (2023-04-15)

• Commit 22190

  Optimization
  Performance optimization for all views that list our entries as a CVE Numbering Authority.

• Commit 853b1

  Optimization
  Access to all entries that are maintained by us as the responsible CVE Numbering Authority are accessible without any restrictions for all users.

Versión 16.13.0 (2023-04-09)

• Commit 792c6

  Feature
  Access to our activities as a CVE Numbering Authority possible by year. This has become mandatory due to the enormous amount of CVEs that we are handling.

• Commit a1d8b

  Optimization
  Recent CNA entries do now redirect to the current year.

Versión 16.12.1 (2023-04-02)

• Commit 2085f

  Optimization
  Improved the speed and accuracy of the display of recent vulnerabilities on the front page.

Versión 16.12.0 (2023-04-01)

• Commit 67624

  Feature

  API Change
  In API 3.56 sources that are not available anymore are shown with the unavailable tag which contains the reason. This helps to determine defunct companies and dead links.

• Commit b5b18

  Feature
  Vulnerability entries indicate broken external links to help determine defunct companies and dead links.

Versión 16.11.1 (2023-03-31)

• Commit fd85c

  Bugfix
  Fixed an issue where reverse lookups of CPE strings was not matching properly.

Versión 16.11.0 (2023-03-23)

• Commit 7a109

  Feature

  API Change
  In API 2.36/3.55 introduction of the field source_cve_duplicateof to indicate CVE assignments which are potential duplicates of existing CVE assignments.

Versión 16.10.3 (2023-03-17)

• Commit 05831

  Optimization
  Optimized the speed to update community points earned by users for submissions of new vulnerability entries.

Versión 16.10.2 (2023-03-16)

• Commit 7b3a5

  Optimization
  Improved accuracy of indicators for vulnerability entries of managed serviced that cannot get a CVE according to current CAN rules.

Versión 16.10.1 (2023-03-13)

• Commit ab8a8

  Optimization

  Customer request
  Handling of CPE values of vulnerabilities was optimized to provide better accuracy of data.

Versión 16.10.0 (2023-03-11)

• Commit c639d

  Feature

  Customer request
  Comments of vulnerability entries will show official replies by our community team to help visitors to understand details and inner workings of our processes.

• Commit 13ff7

  Feature
  Hovering over the time indicator of comments will show the exact time of the submission.

Versión 16.9.3 (2023-03-09)

• Commit f3d56

  Optimization
  Performance improvement of EPSS (Exploit Prediction Scoring System) value handling.

Versión 16.9.2 (2023-02-19)

• Commit 72d23

  Optimization
  References lists use the general naming convention for VulDB entries as well.

Versión 16.9.1 (2023-02-16)

• Commit 636cc

  Optimization
  Much better performance of the service by optimizing the partitioning of data. Especially if there are many tasks handled at the same time.

Versión 16.9.0 (2023-02-15)

• Commit dc811

  Feature
  Switches VulDB CVSSv3 scores from 3.0 to 3.1 to adopt latest version of the industry standard.

Versión 16.8.0 (2023-02-13)

• Commit 8a926

  Feature

  API Change

  Customer request
  In API 3.54 the field software_managedservice is introduced to indicate products that are managed services and therefore not maintained by users.

Versión 16.7.0 (2023-02-11)

• Commit 0ceeb

  Feature

  API Change

  Customer request
  In API 1.17/2.35/3.53 the field software_rollingrelease is introduced to indicate whether the product is not using version numbering but establishing a rolling release instead.

• Commit 27319

  Feature

  API Change
  The changelog does now flag changes to the API as such. This helps customers to identify changes that might require their attention regarding automated processing of data.

Versión 16.6.12 (2023-02-03)

• Commit 1c4ca

  Optimization

  API Change

  Customer request
  Invalid URL requests to the API are not always redirected to prevent inefficient usage of the API.

Versión 16.6.11 (2023-01-28)

• Commit 9e571

  Bugfix

  API Change

  Customer request
  Fixed an issue in the API where request for entry_timstampe_change for older entries did not return the desired amount of items.

Versión 16.6.10 (2023-01-23)

• Commit 8a095

  Optimization
  Additional details available about default licenses by vendors.

Versión 16.6.9 (2023-01-22)

• Commit 05f5c

  Optimization
  Improvement of the Google Hacking view which provides a wide variety of Google Dorks.

• Commit 32026

  Optimization
  Faster and smarter processing of cache data which improves the overall performance of the service drastically.

Versión 16.6.8 (2023-01-21)

• Commit 830d3

  Optimization
  Invalid URL requests to the service are usually redirected, to point the user to the correct URL. This is now approached more consistantly.

Versión 16.6.7 (2023-01-20)

• Commit e6e23

  Optimization
  Performance optimization to increase responsibility for a wide variety of views.

Versión 16.6.6 (2023-01-12)

• Commit 6c542

  Optimization
  Improvement of search by purl statements. Better matching of products and versions possible.

Versión 16.6.5 (2023-01-11)

• Commit 7c9bd

  Optimization
  Better indicator for disputed vulnerability entries that are handled by our CNA team.

Versión 16.6.4 (2023-01-10)

• Commit c8bc3

  Bugfix
  Fixed an issue where emails confirming the moderation of a vulnerability submission mention the wrong submission ID in the mail subject.

Versión 16.6.3 (2023-01-09)

• Commit 9b662

  Optimization
  Better handling of user sessions, especially if there is a lot of activities on the service.

Versión 16.6.2 (2023-01-07)

• Commit 5e9a7

  Optimization
  Introduction of a simple way for moderators to postpone processing of queued vulnerability items.

• Commit cfb9a

  Optimization
  Much better performance for moderators to import new vulnerabilities.

Versión 16.6.1 (2023-01-04)

• Commit cd64f

  Optimization
  Improvement of priority indicators for vulnerability queue handling by moderators.

Versión 16.6.0 (2023-01-03)

• Commit 02196

  Feature
  New queue handling of identifier vulnerabilities to improve quality and speed of processing by moderators.

Versión 16.5.4 (2023-01-02)

• Commit 9a5e1

  Optimization
  Extended display of multiline quotes of vulnerabilities for software, advisories, vulnerabilities, exploits, and countermeasures.

Versión 16.5.3 (2022-12-21)

• Commit 89dfe

  Bugfix
  In very rare cases the derivative identification of vulnerability classes was not working.

Versión 16.5.2 (2022-12-18)

• Commit 6924d

  Optimization
  Better performance and higher accuracy for APT actor identification in certain CTI views.

Versión 16.5.1 (2022-12-17)

• Commit a0204

  Optimization
  All update views show duplicates and false-positives accordingly.

Versión 16.5.0 (2022-12-16)

• Commit 91e21

  Feature

  API Change

  Customer request
  In the APIv3 the field entry_summary is now available in the languages Portuguese, Russian, Chinese, Japanese, and Arabic.

Versión 16.4.6 (2022-12-12)

• Commit 1b860

  Optimization
  More efficient and better redacting of problematic data in submits and commits.

Versión 16.4.5 (2022-12-10)

• Commit 47588

  Optimization

  API Change
  More performance improvement of the API for timeranges like advisory_date_start, entry_timestamp_create_start, entry_timestamp_change_start, and entry_timestamp_all_start.

Versión 16.4.4 (2022-12-08)

• Commit fc381

  Optimization

  API Change

  Customer request
  In API 3.52 performance optimization of certain queries requesting timeranges like advisory_date_start, entry_timestamp_create_start, entry_timestamp_change_start, and entry_timestamp_all_start.

Versión 16.4.3 (2022-12-07)

• Commit dba58

  Optimization
  Improved handling of duplicate vulnerability entries. These are processed much faster, flagged as duplicates or even hidden under certain circumstances.

Versión 16.4.2 (2022-12-05)

• Commit 67c94

  Optimization
  Performance optimization due to intelligent caching of cyber threat intelligence views like countries, sectors, and actors.

Versión 16.4.1 (2022-12-04)

• Commit 8dc47

  Optimization
  Access to cyber threat intelligence information which is not unlocked yet will show a proper amount of demo data to help to understand features, coverage, and possibilities.

Versión 16.4.0 (2022-12-03)

• Commit 12800

  Feature

  Customer request
  The Cyber Threat Intelligence platform does now provide a new view. The sector view helps to understand the emerging, current, and future threats for specific economic sectors.

Versión 16.3.4 (2022-11-26)

• Commit dae79

  Optimization
  Improved extended CPE dictionary generation. By dropping attributes that are not necessary the file generation becomes faster and the file becomes smaller.

Versión 16.3.3 (2022-11-25)

• Commit 726b4

  Optimization
  Hardware upgrade for better memory and processing handling.

Versión 16.3.2 (2022-11-22)

• Commit 21d9b

  Optimization
  Improved coverage and flagging of software products known to be end-of-life.

Versión 16.3.1 (2022-11-21)

• Commit 23f71

  Optimization
  Better handling of vulnerability entries flagges as false-positives or revoked data parts. Summaries reflect the status better and overviews tag them more prominent.

Versión 16.3.0 (2022-11-18)

• Commit 085b7

  Feature
  Additional links to the internal knowledge base and external sources available in vulnerability summaries and descriptions. This makes research a lot faster, easier, and more comfortable.

Versión 16.2.0 (2022-11-08)

• Commit ba2e4

  Feature

  API Change

  Customer request
  Introduction of the field software_support_availability to identify products which are end-of-life. These are shown in vulnerability entries and since API 3.51.

Versión 16.1.1 (2022-11-07)

• Commit 21a87

  Bugfix

  Customer request
  Fixed a bug where some searches for CPE strings were not working properly.

Versión 16.1.0 (2022-10-31)

• Commit 62218

  Feature

  API Change

  Customer request
  Introduction of the fields software_license_type and software_license_name to better understand licensing and support coverage of an affected product. These are shown in vulnerability entries and since API 3.50.

Versión 16.0.3 (2022-10-20)

• Commit 698a4

  Bugfix
  Fixed an issue on the front page where under certain circumstances the exploit price overview was not refreshed properly.

Versión 16.0.2 (2022-10-19)

• Commit df7bf

  Bugfix
  Vulnerability entries without the definition of software_version but with a definition of countermeasure_upgrade_version will show this information properly in the document title.

Versión 16.0.1 (2022-10-18)

• Commit f18ee

  Optimization
  Vulnerability entries list associated changesets with date and count of changes. This makes it easier to understand the lifecycle of an entry.

Versión 16.0.0 (2022-10-15)

• Commit 30f76

  Feature

  Customer request
  The vulnerability data team is taking advantage of the new source monitoring modules. An advanced artificial intelligence enumerates different sources to determine new vulnerabilities or additional details. If such are found, they are added to the submission queue and will be reviewed by the moderation team. This will increase coverage, processing speed, and data quality of vulnerability entries drastically.

Versión 15.5.6 (2022-10-10)

• Commit 6ab11

  Optimization
  Performance optimization of calculation of vulnerabilities per vendor, product, and type.

Versión 15.5.5 (2022-10-07)

• Commit fb472

  Optimization
  Optimization of the user menu as shown on devices with smaller screens.

Versión 15.5.4 (2022-10-06)

• Commit 78b19

  Optimization
  Sites showing search results with a new search form will set the focus on the form field for faster processing of new search queries.

Versión 15.5.3 (2022-09-30)

• Commit 53399

  Bugfix

  API Change

  Customer request
  In API 3.48 fixed an issue for the field parameter where only old notations of vulnerability_cvss3_basevector_vuldb and vulnerability_cvss3_tempvector_vuldb instead also of vulnerability_cvss3_vuldb_basevector and vulnerability_cvss3_vuldb_tempvector were supported.

• Commit 4995f

  Optimization

  API Change
  In API 1.16/2.34/3.49 a more graceful handling of too many definitions in the fields parameter got established. If there are too many fields defined, only the first ones will be used and the others silently ignored.

Versión 15.5.2 (2022-09-28)

• Commit aaebc

  Optimization
  Better handling of data uncertainty while generating stats and charts to improve result accuracy.

Versión 15.5.1 (2022-09-25)

• Commit 3985d

  Optimization

  API Change
  In API 1.15/2.33/3.47 additional data analysis is able to provide derivative Google Hacking strings shown in the field exploit_googlehack.

• Commit abeb0

  Optimization
  Additional data analysis is also able to provide derivative Google Hacking strings in vulnerability summaries, descriptions, and detail listings.

Versión 15.5.0 (2022-09-23)

• Commit 7fe8b

  Feature

  Customer request
  We have introduced a Google Hacking Database containing exclusive dorks.

Versión 15.4.1 (2022-09-20)

• Commit c9710

  Optimization
  Improved the declaration of impacts within description and summaries of vulnerabilities.

Versión 15.4.0 (2022-09-19)

• Commit fdc84

  Feature

  Customer request
  The custom CTI analysis allows filter by countries to improve geopolitical analysis capabilities.

Versión 15.3.11 (2022-09-18)

• Commit 43a2c

  Optimization
  Performance optimization of statistical data of user contributions.

Versión 15.3.10 (2022-09-15)

• Commit 8028c

  Optimization
  Better memory handling of the service to improve responsiveness of queries and views.

Versión 15.3.9 (2022-09-14)

• Commit 0e2c2

  Optimization
  Improvement of countermeasure handling of vulnerabilities to save space, gain better performance, and faster processing of entries.

Versión 15.3.8 (2022-09-11)

• Commit b4aec

  Bugfix
  Fixed an issue where empty CWE data was shown in vulnerability entries. This was just an interface error on the web frontend.

Versión 15.3.7 (2022-09-08)

• Commit e5ba5

  Bugfix

  Customer request
  Fixed an issue with the RSS feeds where certain special characters in the title element lead to XML validation errors. Reported by Calvin Mende.

Versión 15.3.6 (2022-09-07)

• Commit 3c399

  Bugfix

  Customer request
  Fixed an issue where certain product names generated an invalid XML CPE dictionary. Reported by user RobinDefenced

Versión 15.3.5 (2022-09-06)

• Commit 144c0

  Bugfix

  API Change

  Customer request
  Fixed an issue where certain search requests via web and API were not executed at all. Reported by user showmax

Versión 15.3.4 (2022-09-05)

• Commit 61068

  Optimization
  Another performance improvement of search queries. Lookups for functions and arguments are now multiple times faster as well.

Versión 15.3.3 (2022-09-02)

• Commit 6ae56

  Optimization

  Customer request
  Performance improvement of search queries. Especially queries for URLs are now multiple times faster.

Versión 15.3.2 (2022-08-30)

• Commit 0acc3

  Optimization
  Better performance and accuracy of parsing of vulnerability data during moderation process.

Versión 15.3.1 (2022-08-29)

• Commit 7d293

  Optimization
  Better teasing of Cyber Threat Intelligence information for free users.

Versión 15.3.0 (2022-08-27)

• Commit 13bc6

  Feature

  Customer request
  Vulnerability entries show multiple CWE if available. In this case they are listed in descending order of accuracy.

Versión 15.2.3 (2022-08-19)

• Commit 87315

  Optimization
  Vulnerability entries flagged as false-positive are shown with this tag in lists (e.g. overview, search).

Versión 15.2.2 (2022-08-17)

• Commit 4bf82

  Optimization
  Another improvement of entropy of the CSRF token generation for critical forms.

Versión 15.2.1 (2022-08-14)

• Commit 6d5fa

  Optimization

  API Change
  In API 3.46 he virtual fields advisory_reportconfidence, exploit_exploitability, countermeasure_remediationlevel provide better data accurary to improve data quality.

Versión 15.2.0 (2022-08-11)

• Commit c5cd8

  Feature

  API Change

  Customer request
  In API 3.45 the Vulnerability API is able to show additional CTI information by enabling cti=1 within requests. This is possible for free accounts, commercial accounts and enterprise accounts with the CTI option enabled. The real-time availability of the data introduces some increased round trip times for such queries.

Versión 15.1.2 (2022-08-09)

• Commit 0d06a

  Optimization
  Better matching of natural search when it comes to short words which causes less false-negatives.

Versión 15.1.1 (2022-07-12)

• Commit b168a

  Optimization
  Fixed an issue where vulnerabilities with product versions ending with .x wildcards were handled inapprorpiately.

Versión 15.1.0 (2022-07-08)

• Commit 5134e

  Feature

  Customer request
  Certain views contain a column listing the latest EPSS (Exploit Prediction Scoring System) values for vulnerabilities.

Versión 15.0.0 (2022-07-05)

• Commit c13ba

  Feature

  API Change

  Customer request
  In API 3.44 introduced the CTI API which supports the request types ipaddr, actor, and events. API credit consumption is slightly different than within the Vulnerability API.

Versión 14.27.1 (2022-06-29)

• Commit 093a3

  Optimization
  Listing of important identifiers of vulnerabilities were optimized to provide better searchability.

Versión 14.27.0 (2022-06-24)

• Commit ab1f7

  Feature
  English vulnerability descriptions explain the vulnerability classes according to the CWE definitions.

Versión 14.26.6 (2022-06-23)

• Commit 0761d

  Optimization
  Improved the support for less popular CWE classes to provide better identification capabilities of exotic vulnerabilities.

Versión 14.26.5 (2022-06-16)

• Commit 4a400

  Optimization
  Faster synchronization of EPSS (Exploit Prediction Scoring System) data to increase confidence of predictions.

Versión 14.26.4 (2022-06-11)

• Commit e54df

  Optimization
  Improved version listing for releases using letters in version numbering (e.g. OpenSSL).

Versión 14.26.3 (2022-06-10)

• Commit 986a8

  Optimization
  Better accuracy of product requests in the Monoblock.

Versión 14.26.2 (2022-06-07)

• Commit 7045a

  Optimization
  Optimized the purchase and upgrade experience for users with better guidance and accessibility.

Versión 14.26.1 (2022-06-02)

• Commit af297

  Optimization
  Emails sent for custom mail alerts do now contain the CVE of matching entries to provide better overview and accessibility.

Versión 14.26.0 (2022-06-01)

• Commit 6b2ff

  Feature

  Customer request
  Introduction of the Exploit Prediction Scoring System which is able to predict chances of successful exploitation of vulnerabilities. Official EPSS data is kept in sync and shown in the vulnerability details.

• Commit 51aab

  Feature

  API Change

  Customer request
  In API 2.32/3.43 introduced the fields exploit_epss_score and exploit_epss_percentile which provide live data of EPSS (Exploit Prediction Scoring System) to predict chances of successful exploitation.

Versión 14.25.10 (2022-05-31)

• Commit 6436a

  Bugfix
  Fixed an issue where certain links were not correctly used in the vulnerability summaries for authenticated users. Reported by Andrea Hauser

Versión 14.25.9 (2022-05-25)

• Commit 57b2a

  Optimization

  Customer request
  Better integration of search possibilities in the site header on mobile phones.

Versión 14.25.8 (2022-05-23)

• Commit 01046

  Bugfix

  API Change

  Customer request
  In API 3.41 accessing the field software_cpe23 is possible again. Other major releases of the API were not affected. Reported by Stefan Sander.

Versión 14.25.7 (2022-05-15)

• Commit ed7b9

  Bugfix
  Sending certain host requests introduced the possibility for unexpected redirects. Reported by Pankaj lakshkar

Versión 14.25.6 (2022-05-12)

• Commit b8eb9

  Optimization
  Improved search intelligence to match CWE and CVE faster and with more accuracy.

Versión 14.25.5 (2022-05-11)

• Commit 84bd4

  Optimization
  All CTI activities are available in a dedicated section. Existing links redirect to the new location.

Versión 14.25.4 (2022-05-10)

• Commit 0098a

  Bugfix

  Customer request
  Fixed an error message which was shown under certain circumstances for recent entries.

Versión 14.25.3 (2022-05-06)

• Commit e8a31

  Optimization
  The latest videos shown on the frontpage are updated faster to provide access to the latest entries.

• Commit dfe4e

  Bugfix

  API Change

  Customer request
  In API 1.14/2.31/3.41 fixed an issue where requests with entry_timestamp_create did include entries that matched entry_timestamp_change instead. Reported by user peeradon.no

Versión 14.25.2 (2022-05-04)

• Commit 52eb6

  Optimization
  The personal view of My Alert shows matching entries ranging back 90 days.

Versión 14.25.1 (2022-05-03)

• Commit 87e2d

  Optimization
  Better performance for creating the RSS feed of updated entries.

Versión 14.25.0 (2022-05-02)

• Commit 6b388

  Feature
  Availability of a dedicated RSS feed for changelog entries to monitor changes easily.

Versión 14.24.1 (2022-04-29)

• Commit c0290

  Optimization
  Aligned icons and sidemenu in the CNA section to provide better accessibility.

Versión 14.24.0 (2022-04-27)

• Commit 91fce

  Feature

  API Change

  Customer request
  In API 3.40 using the parameter format=csv makes it possible to output vulnerability data as CSV. Not all request types are supported, not all fields are included, and API header information is not part of the output.

Versión 14.23.1 (2022-04-25)

• Commit c49ec

  Optimization
  Improved the actor and compaign association of the CTI module. Interlinking data is better and provides results with increased accuracy.

• Commit 30e2c

  Optimization
  CTI indicators shown are either verified or predictive and shown with the associated tag.

Versión 14.23.0 (2022-04-24)

• Commit 71333

  Feature
  The country overview shows additional details like covered languages, TTP, IOA, and activities.

Versión 14.22.0 (2022-04-21)

• Commit c3eae

  Feature
  The user menu contains additional items to quickly access your user profile, activity settings, and alerting capabilities.

• Commit 3cc50

  Optimization
  Aligned the text color of lists in databoxes to the overall style.

Versión 14.21.2 (2022-04-20)

• Commit 1ca57

  Optimization

  Customer request
  Alerts sent via email use asterisks to prevent Microsoft Outlook from deleting newlines.

• Commit 1ca57

  Optimization
  Alerts sent via email refer to entries with the new format VDB-1234 instead of the old format ID 1234.

• Commit 00701

  Optimization
  Switched symbols used in the community activity stream from emoji to a dedicated font to provide better reliability on different platforms.

Versión 14.21.1 (2022-04-19)

• Commit 90187

  Optimization
  Certain elements on the frontpage use additional icons to visualize data sources.

Versión 14.21.0 (2022-04-16)

• Commit 0063c

  Feature

  API Change
  In API 3.39 enabled auto-complete feature for software_type even if the field is not yet defined in the monoblock.

Versión 14.20.9 (2022-04-14)

• Commit 38c8f

  Bugfix
  Sending multiple information mails if a duplicate signup happens is prevented. Reported by Rupali Jain

Versión 14.20.8 (2022-04-13)

• Commit 13b46

  Bugfix
  Fixed a rare bug affecting certain product views that prevented the list from loading. Reported by user mael

Versión 14.20.7 (2022-04-11)

• Commit 766de

  Optimization
  Performance optimization of certain filtered views used by the CNA team.

• Commit 45617

  Bugfix

  Customer request
  The autocomplete feature for versioning of certain products was not able to finalize the output. Reported by user lywand

Versión 14.20.6 (2022-04-09)

• Commit 99f6c

  Optimization
  Layout of current utilization data provides better readability.

Versión 14.20.5 (2022-04-08)

• Commit 14036

  Optimization

  Customer request
  Registration does allow mail addresses with rather long top-level-domains.

Versión 14.20.4 (2022-04-01)

• Commit 8e9e6

  Optimization
  The overview of monitored actors displays the number of collected IOC (Indicators of Compromise), TTP (Tactics, Techniques, Procedures), IOA (Indicators of Attack), campaigns and external references.

Versión 14.20.3 (2022-03-29)

• Commit 45456

  Optimization
  New overview of actors shows the amount of available indicators and used sources. The list is also sortable for better viewing.

Versión 14.20.2 (2022-03-28)

• Commit fdbeb

  Optimization
  Update of icons used in menus and on other parts of the service.

Versión 14.20.1 (2022-03-26)

• Commit 30ff5

  Optimization

  Customer request
  Submissions of new vulnerabilities will automatically handle a CVE assignment and inform the submitter about the CNA decision (assigned, denied or pending).

• Commit 30ff5

  Optimization
  Submissions of new vulnerabilities will request an external advisory url for further validation of the issue.

Versión 14.20.0 (2022-03-21)

• Commit 14dd6

  Feature
  An overview of all RSS feeds with all available languages is listed.

Versión 14.19.0 (2022-03-20)

• Commit d86a3

  Feature
  Availability of all RSS feeds in all available languages. This is true for of recent, updates, Twitter, and customer streams.

• Commit 85b71

  Feature
  RSS feeds always show the CVE or another important identifier in the title for better searching capabilities.

• Commit 95b49

  Optimization
  The language element of RSS feeds reflects the used content language.

Versión 14.18.4 (2022-03-19)

• Commit 6bc0c

  Optimization
  Optimized performance by using specific features and configuration settings in PHP8.

• Commit 3ce86

  Bugfix

  API Change
  Fixed a race condition where consecutive API requests might not have been added to the personal API history properly.

Versión 14.18.3 (2022-03-15)

• Commit c2804

  Optimization
  Scrollbars of elements provide better styling to improve user experience, especially on smaller screens.

Versión 14.18.2 (2022-03-14)

• Commit 0893a

  Optimization
  Improved intelligent matching of vendor and product definitions in simple searches.

Versión 14.18.1 (2022-03-10)

• Commit 25bad

  Optimization
  Improved layout of the changelog items to provide better visibility.

• Commit ed2be

  Optimization
  Timelines in vulnerability entries do always link to countermeasures if patch or upgrade URLs are known.

• Commit 91b01

  Bugfix
  Some links to countermeasures were clickable but still threw a 404 even though the requested resources were available. Reported by user mael

Versión 14.18.0 (2022-03-09)

• Commit 72d69

  Feature
  Items listed in legends of charts are clickable to allow quick drilldowns.

• Commit a7e66

  Bugfix
  Certain pie charts did not reflect the correct number of known matches.

Versión 14.17.5 (2022-03-07)

• Commit c162c

  Optimization
  A better layout helps vulnerability moderators to identify priority entries in the submission queue.

Versión 14.17.4 (2022-03-01)

• Commit 23a47

  Bugfix
  In certain views the generation of timeline graphs was not possible if the advisory_date of an entry has been changed to another year.

Versión 14.17.3 (2022-02-28)

• Commit 01eae

  Bugfix
  Fixed an issue where empty CVSSv3 scores were shown with a value of 0.0.

Versión 14.17.2 (2022-02-27)

• Commit c8b23

  Optimization
  Performance optimization of list views which contain CVSSv3 Meta Scores.

• Commit 48019

  Bugfix
  Under certain circumstances an existing remediation level based on the field countermeasure_remediationlevel was not shown correctly.

Versión 14.17.1 (2022-02-25)

• Commit 4882d

  Optimization
  Icon text in the submenu allows hyphenation to optimize the view on narrow screens.

• Commit 60d49

  Optimization
  Charts for timespans are optimized to zoom into the timeframe whenever possible and useful.

Versión 14.17.0 (2022-02-23)

• Commit f8d99

  Feature
  The applicable copyright license is shown in the footer of the page.

Versión 14.16.1 (2022-02-22)

• Commit c6483

  Optimization
  Table listings with narrow columns provide better spacing to fit the content.

Versión 14.16.0 (2022-02-21)

• Commit 93389

  Feature

  Customer request
  The CTI views do allow for drilldown of IP addresses as IoC (Indicator of Compromise).

• Commit 9e1e2

  Bugfix

  Customer request
  Listing of version numbers ranging back to 0.x might have contained version 0.0. This is usually wrong and got fixed. Thanks to Cheek Yang of xFusion Digital Technologies for making us aware of this issue.

Versión 14.15.1 (2022-02-20)

• Commit 24c78

  Optimization
  Certain CTI views which have complex hostnames as IoC (Indicator of Compromise) allow much faster analysis.

Versión 14.15.0 (2022-02-18)

• Commit 4da51

  Feature

  Customer request
  Custom CTI analysis contains IOC (Indicator of Compromise), TTP (Tactics, Techniques, Procedures) and IOA (Indicator of Attack) as well.

Versión 14.14.0 (2022-02-17)

• Commit 52552

  Feature

  Customer request
  The CTI view for countries lists popular TTP (Tactics, Techniques, Procedures) and IOA (Indicator of Attack) as well.

Versión 14.13.4 (2022-02-09)

• Commit 291bf

  Optimization
  Search requests for CVE identifiers detects mismatching dashes (e.g. en and em) and corrects them automatically.

Versión 14.13.3 (2022-02-08)

• Commit f7d1b

  Optimization
  Performance optimization of data analysis of APT actors.

• Commit 7c6d0

  Optimization
  Improvement of CTI actor report generator for GitHub repository.

Versión 14.13.2 (2022-01-31)

• Commit b0bff

  Optimization
  Activity charts provide data with better accuracy.

• Commit b0bff

  Optimization
  Activity charts have a better performance during generation.

Versión 14.13.1 (2022-01-30)

• Commit f1aa5

  Optimization
  Performance optimization of APT actor association charts during generation.

Versión 14.13.0 (2022-01-28)

• Commit 6defc

  Feature

  API Change
  In API 2.30/3.38 multiple fields to reflect our capabilities as a CNA to assign and disclose CVE entries are introduced: cna_responsible, cna_contact_date, cna_response_date, cna_response_summary, cna_decision_date, cna_decision_summary, cna_eol, and cna_nocve.

Versión 14.12.1 (2022-01-27)

• Commit 37a7c

  Optimization

  API Change
  In API 1.13/2.29/3.37 provoking 405 Unknown request type errors again is only possible after a few minutes. This prevents flooding the API access log and prevents misconfigured clients from exhausting the API credits quickly.

Versión 14.12.0 (2022-01-24)

• Commit 78570

  Feature
  APT actor analysis view adds associated campaign details for IOC.

• Commit 78570

  Feature
  APT actor analysis view adds associated CWE details for TTP.

• Commit 26292

  Optimization
  General performance optimization for all APT actor analysis views.

• Commit 1e67c

  Optimization
  Data shown in APT actor analysis view for non-authenticated users is based on real-time data.

Versión 14.11.8 (2022-01-21)

• Commit b1aa4

  Optimization
  Improvement of URL validation during moderation to prevent incorrect values.

Versión 14.11.7 (2022-01-15)

• Commit 9fa88

  Optimization
  Improved security of SPF and DMARC. Recommendations were submitted by Nikhil Rane.

• Commit 9fa88

  Optimization
  Improved security and usability of signup procedure and passwort recovery procedure. Recommendations were submitted by Nikhil Rane.

Versión 14.11.6 (2022-01-14)

• Commit 68c68

  Optimization
  Layout optimization of certain forms using additional information or CAPTCHA elements.

Versión 14.11.5 (2022-01-13)

• Commit ac2a6

  Optimization
  Performance tweaks of certain views.

Versión 14.11.4 (2022-01-12)

• Commit 28f48

  Optimization
  Highly improved performance of APT actor analysis. Especially such with many known indicators of compromise.

Versión 14.11.3 (2022-01-11)

• Commit b59d0

  Optimization
  Performance and memory optimization of certain queries which do not need CTI data to be shown.

Versión 14.11.2 (2022-01-07)

• Commit 9ade9

  Optimization
  Multi-threading has been optimized to decrease resource consumption and to increase performance.

• Commit 509bb

  Optimization
  External links in the table of contents of the Knowledge Base open a new window.

Versión 14.11.1 (2022-01-05)

• Commit 545a1

  Optimization
  Better performance for quick APT actor identification on the front page.

Versión 14.11.0 (2022-01-04)

• Commit bfdcd

  Feature

  Customer request
  It is possible to do a CTI analysis of dedicated entries to show activities, interest distribution, active actors, and indicators of compromise. This feature requires an additional CTI license.

Versión 14.10.2 (2021-12-28)

• Commit f43dd

  Bugfix
  Users hiding their profile were not able to show their own profile. This has been fixed.

Versión 14.10.1 (2021-12-24)

• Commit 8b772

  Optimization

  Customer request
  Scrollbars on Mozilla browsers are styled or even hidden whenever useful to provide a better user experience on smaller screens.

Versión 14.10.0 (2021-12-23)

• Commit ac413

  Feature
  The new status page shows the status, load and utilization of service components.

Versión 14.9.0 (2021-12-22)

• Commit a0614

  Feature
  VulDB has been officially approved by the CVE program as a CVE Numbering Authority (CNA). We are authorized to handle new vulnerability submissions, assign unique CVEs and disclose them. Users may flag new vulnerability submissions to get a CVE. More information in our official press release.

• Commit e8c35

  Optimization
  Cyber threat intelligence activity scores on the front page are shown as bars to indicate heat faster.

Versión 14.8.1 (2021-12-18)

• Commit 158db

  Optimization
  Improved the order of the user menu on the Arabic edition of the site.

Versión 14.8.0 (2021-12-17)

• Commit bb5ae

  Feature

  Customer request
  Language support for Russian (ru). This includes basic parts of the web site and vulnerability details.

Versión 14.7.0 (2021-12-14)

• Commit c958e

  Feature
  Our bug bounty is fully compliant with draft-foudil-securitytxt-12. You will find the current file at /.well-known/security.txt

• Commit d754b

  Optimization
  Additional intelligence of the search engine tries to determine potential product definitions. This increases accuracy of search requests.

Versión 14.6.0 (2021-12-12)

• Commit f4d42

  Feature
  Views with custom RSS feeds show an icon at the breacrumb navigation.

Versión 14.5.0 (2021-12-11)

• Commit 5e850

  Feature
  Entires in the Knowledge Base are linked to the table of contents to provide better accessibility of information.

• Commit d184f

  Optimization
  Slightly improved confirmation email messages for moderated submissions.

Versión 14.4.1 (2021-12-10)

• Commit 5213b

  Optimization
  Commit details show more information and link to additional resources.

• Commit 03ef5

  Optimization
  Performance optimization of the front page which loads the vulnerability of the day much faster.

Versión 14.4.0 (2021-12-09)

• Commit 53394

  Feature

  Customer request
  All documentation files are moved into the new Knowledge Base. Old links to the documentation remain valid.

• Commit e75bd

  Optimization
  Optimized padding of breadcrumb items provides better usability.

Versión 14.3.1 (2021-12-08)

• Commit 9f087

  Optimization
  New multi-threading handling of expensive database queries increases the performance of many requests and views.

Versión 14.3.0 (2021-12-07)

• Commit 0328b

  Feature
  Added a breadcrumb navigation item to access higher level sections easier.

• Commit 20ade

  Feature
  Release versions in the changelog might be accessed via ID.

• Commit ebad6

  Bugfix
  The user data in the side menu are shown properly even if there are very long strings used.

Versión 14.2.0 (2021-12-06)

• Commit 3deae

  Feature
  CVSSv3 pie chart lists do also include CNA data to improve comparison of different sources.

• Commit 06fc8

  Optimization
  Commits listed in the changelog have type badges for better identification.

Versión 14.1.3 (2021-12-05)

• Commit 6ba63

  Optimization
  Databox with vulnerability of the day uses better search box for increased accessibility.

Versión 14.1.2 (2021-12-04)

• Commit ab33b

  Optimization
  Responsive app elements behave better on smaller rectangular screens.

• Commit 07841

  Bugfix
  All risk views show data properly under any circumstances for authenticated users.

Versión 14.1.1 (2021-12-03)

• Commit e5209

  Optimization

  Customer request
  The layout for printing views is optimized for better user experience.

• Commit d0822

  Optimization
  The language path for Japanese is changed from /jp/ to /ja/ to respect ISO 639-1 language two-letter conventions. Old links remain active and redirect to the new URL structure.

• Commit fa317

  Optimization
  The user menu layout has been optimized for better readability. Especially VulDB moderators and administrators get easier access to relevant data.

Versión 14.1.0 (2021-12-02)

• Commit e68e7

  Feature
  Some chart types, especially pie charts and doughnut charts, show an additional legend to provide better visibility of data.

• Commit 2fa71

  Optimization

  Customer request
  The responsiveness of the user menu on the side behaves better on smaller screens.

• Commit ee455

  Optimization
  External URLs to MITRE CVE link to the new cve.org domain.

Versión 14.0.1 (2021-12-01)

• Commit 786dd

  Optimization
  Minor optimizations of layout elements of new app layout.

• Commit 61570

  Optimization

  Customer request
  The settings page informs users about the character limit for custom alert filters. Purchasing additional licenses is required to extend this limit.

Versión 14.0.0 (2021-11-30)

• Commit bb919

  Feature

  Customer request
  Relaunch of the service with a new layout and extended app capabilities.

Versión 13.41.1 (2021-11-11)

• Commit a667c

  Optimization
  Vulnerability entries without user comments show the requested languages, even if English was the only language selected.

• Commit 1ff69

  Optimization
  Layout of the login recommendation to comment on vulnerability entries was optimized.

Versión 13.41.0 (2021-11-10)

• Commit 0c2ae

  Feature

  Customer request
  Commercial customers using credit card as payment method are able to show their last invoices online. Invoices and receipts can be downloaded from our partner Stripe. All documents are hosted externally. VulDB does not store credit card details, invoices nor receipts.

Versión 13.40.1 (2021-11-09)

• Commit dbc8a

  Bugfix

  API Change
  In API 2.28/3.36 the field vulnerability_bugbounty_price is only shown if there is a bug bounty price defined.

• Commit 5fe48

  Optimization
  Performance improvement (CPU and memory consumption) of long list views.

Versión 13.40.0 (2021-11-08)

• Commit 505be

  Feature

  API Change

  Customer request
  in API 2.27/3.35 it is now possible to use URL encoding in advanced search queries to make them much easier to handle.

Versión 13.39.1 (2021-11-06)

• Commit 1c057

  Bugfix

  Customer request
  Under rare circumstances a timeframe request did contain entries outside the defined timeframe. Additional validation has been introduced to prevent this effect. Reported by user guliang

Versión 13.39.0 (2021-11-03)

• Commit 02e0b

  Feature

  Customer request
  Language support for Portuguese (pt). This includes basic parts of the web site and vulnerability details.

Versión 13.38.0 (2021-11-01)

• Commit 49840

  Feature

  Customer request
  Enterprise customers are able to create a custom dashboard with individual charts and lists to maintain their professional vulnerability management.

Versión 13.37.0 (2021-10-29)

• Commit ecf36

  Feature
  External links in vulnerability entries known to be not working anymore are flagged as 404 Not Found.

• Commit 00f47

  Optimization
  In the commit view the column Moderated is renamed to Accepted to indicate the moment a change was approved.

Versión 13.36.2 (2021-10-27)

• Commit 6ba60

  Optimization
  Most recent entries on the frontpage are listed faster and with more details right after the creation of a new entry.

Versión 13.36.1 (2021-10-26)

• Commit fe47a

  Optimization

  Customer request
  Overview pages with an huge number of entries are not limited anymore.

Versión 13.36.0 (2021-10-25)

• Commit 9d96d

  Feature

  Customer request
  The section exploits shows entries only if an exploit is available for download.

• Commit 7b0b6

  Feature

  Customer request
  The exploit prices areseparated from the generic exploit section.

Versión 13.35.1 (2021-10-19)

• Commit fab04

  Optimization
  Optimization of summaries and descriptions in certain languages to better consider the expected vulnerability class of an entry.

Versión 13.35.0 (2021-10-09)

• Commit e2c39

  Feature

  API Change

  Customer request
  The search feature on the web site and the API supports the purl format used to identify a mostly universal package URL. It is predictive and supports extended structures like the advanced search and searching for CPE strings.

Versión 13.34.0 (2021-09-15)

• Commit 153c8

  Feature

  API Change
  In API 2.26/3.34 information about bug bounty organization vulnerability_bugbounty_organization, price vulnerability_bugbounty_price, and payout date vulnerability_bugbounty_payoutdate were introduced.

Versión 13.33.1 (2021-09-13)

• Commit 4280a

  Optimization
  Improved cache response times for the languages Japanese, Chinese, and Arabic. This provides a better user experience.

Versión 13.33.0 (2021-09-10)

• Commit 951ce

  Feature

  API Change

  Customer request
  Introduction of the CNA CVSSv3 vector and score. The new fields are accessible via vulnerability_cvss3_cna_*. They are available on the web site and the latest API 3.33.

Versión 13.32.4 (2021-09-07)

• Commit 759f3

  Optimization
  Better handling of long strings of commit values shown in commit histories.

Versión 13.32.3 (2021-09-06)

• Commit 3c9ba

  Optimization
  Ranges between versions and up to versions are shown with even higher level of accuracy. This includes titles and summaries as well.

Versión 13.32.2 (2021-09-02)

• Commit d29bb

  Optimization
  Improvement of reliability and performance handling of internal submit queue processing.

Versión 13.32.1 (2021-08-31)

• Commit 7ad33

  Optimization
  Hardware upgrade for better memory and processing handling.

Versión 13.32.0 (2021-08-27)

• Commit 90877

  Feature

  Customer request
  Actor analysis lists determined TTP (Tactics, Techniques, Procedures)

• Commit 90877

  Feature

  Customer request
  Actor analysis lists determined IOA (Indicator of Attack)

Versión 13.31.0 (2021-08-26)

• Commit af5a0

  Feature
  Overview of APT actors highlights new actors and added indicators of compromise

Versión 13.30.1 (2021-08-25)

• Commit a0f19

  Optimization
  Better matching for CPE searches if the official CPE dictionary is not applied properly.

Versión 13.30.0 (2021-08-24)

• Commit 758ae

  Feature
  CTI Analysis provides a wide variety of statistical data regarding actors and activities.

Versión 13.29.3 (2021-08-23)

• Commit 2d4fa

  Optimization
  Vulnerability comments in a specific language are only shown if the site is loaded in that language.

Versión 13.29.2 (2021-08-22)

• Commit 12bbe

  Optimization
  Finalized data migration to provide much better performance.

• Commit 363e0

  Optimization
  Performance optimization of the year views of CVSSv3, CVSSv2, and Exploits by eliminating redundant queries.

Versión 13.29.1 (2021-08-21)

• Commit b2396

  Optimization
  Eliminated all links to SecurityFocus vulnerability database as they discontinued the service. Thank you for all your contributions to the cyber security industry!

• Commit adec0

  Optimization
  Re-ordered the listing of external resourced within the reference tables.

• Commit 9b464

  Optimization
  New color scheme for yearly comparison of CVSS base and temp vectors.

Versión 13.29.0 (2021-08-19)

• Commit c2a84

  Feature
  Cyber threat intelligence activity index for software types on the frontpage use machine learning to predict activity index of the future.

• Commit 52c88

  Optimization
  Ranges between versions and up to versions are shown with higher level of accuracy. This includes titles and summaries as well.

Versión 13.28.11 (2021-08-18)

• Commit 2f6c2

  Optimization
  Announcement banner is shown only if necessary to provide the maximum of space.

• Commit abbea

  Optimization
  Time-only statements are now always shown depending on the selected request language.

Versión 13.28.10 (2021-08-17)

• Commit 8ae38

  Optimization
  Vulnerability entries hide header tooltip icons as soon as the screen is too small to read them.

Versión 13.28.9 (2021-08-16)

• Commit 51f56

  Optimization
  Faster calculation and loading of Threat Intelligence activity index chart on the frontpage.

Versión 13.28.8 (2021-08-15)

• Commit 2b166

  Optimization
  Better performance thanks to optimized database index for several different tables.

Versión 13.28.7 (2021-08-08)

• Commit 0fc46

  Bugfix
  Fixed a rare bug on the frontpage where very recent entries are not shown with all available technical details in the title.

Versión 13.28.6 (2021-08-07)

• Commit b4035

  Optimization
  Corrected the right-to-left writing of HTML titles in the Arabic language version of the service.

Versión 13.28.5 (2021-08-05)

• Commit 98081

  Optimization
  Optimized the capabilities of searching with CPE strings. Such searches are now much faster and more accurate.

Versión 13.28.4 (2021-08-04)

• Commit b697e

  Optimization

  Customer request
  Aligned the listing of entry_changelog to show the field name of vulnerabilitycenter_lastupdatedate correctly. This issue was reported by Fergus Nelson.

• Commit 006fc

  Bugfix

  Customer request
  Under certain circumstances the calculation of exploit prices was not happening. This has been fixed. This bug was reported by Fergus Nelson.

Versión 13.28.3 (2021-08-02)

• Commit 9864d

  Optimization
  External redirects first tested for malicious code are using HTTP status code 301 Moved Permanently instead of 302 Found.

Versión 13.28.2 (2021-07-28)

• Commit 8a3ac

  Optimization
  Better layouting of the payment site for all languages.

Versión 13.28.1 (2021-07-27)

• Commit 293f1

  Bugfix
  Rare date format issue for Chinese, Japanese, and Arabic is corrected.

Versión 13.28.0 (2021-07-26)

• Commit 5f4e7

  Feature

  Customer request
  Language support for Arabic (ar). This includes basic parts of the web site and vulnerability details. Right-to-left is implemented whenever required.

Versión 13.27.4 (2021-07-24)

• Commit 7430f

  Optimization
  Current CTI scores in overviews are loaded and shown much faster which improves speed of site generation.

• Commit 7430f

  Bugfix
  Current CTI scores are shown in overviews in any case even if the servers are under heavy load.

• Commit 7430f

  Bugfix
  Current CTI scores in overviews show the correct timestamp of the last update for the most recent entries in the tooltip of the field.

Versión 13.27.3 (2021-07-17)

• Commit 6861b

  Optimization
  Better import and validation handling for APT actor IoC moderation to improve processing and quality.

Versión 13.27.2 (2021-07-16)

• Commit 363b6

  Optimization
  Clarification of titles of privilege escalation vulnerabilities. Remote issues that require some form of authentication are shown as Privilege Escalation without mentioning of Remote. Only remote issues without authentication are shown as true Remote Privilege Escalation.

• Commit 61142

  Bugfix

  API Change

  Customer request
  Fixed a rare bug in API 1.11/2.24/3.31 that created an associative array for software_version if the list of versions numbers contained the value 0. Thanks to Fergus Nelson for reporting this issue.

Versión 13.27.1 (2021-07-15)

• Commit 6e469

  Bugfix
  Fixed a bug in the web entry view that undefined CVSSv2 vectors were shown with the value X instead of ND.

• Commit 6e469

  Bugfix

  API Change
  Fixed a bug in API 1.10/2.23/3.30 that undefined CVSSv2 vectors were shown with the value X instead of ND.

• Commit 6e469

  Bugfix
  Fixed a bug in overviews to show tooltips for different CVSS sources of CVSSv3 Meta Temp Scores.

Versión 13.27.0 (2021-07-14)

• Commit cc0e3

  Feature

  Customer request
  Cyber threat intelligence events display emerging, current, and upcoming activities by actors.

• Commit dacc3

  Bugfix
  Fixed a bug that temp scores of CVSS vectors are not properly stored during initial entry create. This did not affect updated entries.

Versión 13.26.4 (2021-07-07)

• Commit 84a8b

  Optimization
  New layout for changelog for better readability.

• Commit ae57e

  Optimization
  Every commit shown in the changelog contains the commit ID for better reference.

• Commit 2e4f6

  Optimization
  Commits in changelog provide permalink for easier access.

Versión 13.26.3 (2021-06-30)

• Commit ea669

  Optimization
  Reinstated linking to CVEdetails.com as they resumed adding and updating new CVEs.

Versión 13.26.2 (2021-06-25)

• Commit 28728

  Optimization

  API Change

  Customer request
  The Content-Type of all API responses is changed to application/json; charset=utf-8. This is not a change in the API itself which is why the version number of the API endpoints is not incremented.

Versión 13.26.1 (2021-06-24)

• Commit 0d89b

  Optimization

  API Change

  Customer request
  The official vulnerability API endpoint is located at /?api and will redirect faulty URLs and GET parameters. Microsoft Power Apps did not respect this URL structure and changed the query string to a parameter tuple with an empty value. Our API endpoint redirected to the correct URL but Power Apps is not capable of following such HTTP redirects. This issue got fixed as Power Apps is now allowed to access the API endpoint even though the request URL format is not entirely correct.

Versión 13.26.0 (2021-06-18)

• Commit e9063

  Feature

  API Change

  Customer request
  In API 2.22/3.29 the field vulnerability_attck was made available. It contains the identifier of the associated MITRE ATT&CK technique.

Versión 13.25.3 (2021-06-16)

• Commit 0494b

  Optimization
  Performance optimization during stress (e.g. many users, DDoS attacks).

• Commit 9660e

  Optimization
  Changed the algorithm to generate the category values local and remote in the RSS feeds. Also added the value partial for local if the attack vector is physical.

Versión 13.25.2 (2021-06-15)

• Commit 55449

  Optimization
  Dedicated approval and handling of permissions to use extended CTI features.

• Commit 00931

  Optimization
  The user profile shows details about the purchased CTI license.

• Commit 0552f

  Optimization
  Better performance of generation of user menu for authenticated users.

Versión 13.25.1 (2021-06-14)

• Commit fd133

  Optimization
  More accurate timing information about new IoC (Indicator of Compromise) assigned to an APT actor.

Versión 13.25.0 (2021-06-11)

• Commit ed936

  Feature
  New IoC (Indicator of Compromise) assigned to an APT actor are shown in the community activity stream on the frontpage.

Versión 13.24.1 (2021-06-09)

• Commit 0d01f

  Optimization
  Optimized abuse detection of search queries for authenticated users.

Versión 13.24.0 (2021-06-08)

• Commit efc17

  Feature
  Current APT actor activities are shown on the community activity stream on the frontpage.

Versión 13.23.0 (2021-06-07)

• Commit 94a1e

  Feature
  Dedicated access to CTI features in the item threat of the main menu.

• Commit fc8b2

  Feature

  Customer request
  Access to APT actor information to show activities, interest distribution, indicators of compromise, and external references. The analysis is based on unique activity data ranging back to 2016.

• Commit fc8b2

  Feature
  Access to country-specific information to show activities and interest distribution.

Versión 13.22.1 (2021-06-04)

• Commit 03370

  Optimization
  Timelines indicating activities show the so called activity index instead of the generic entries label.

• Commit 03359

  Optimization
  Bar charts showing exploit prives use exploit instead of the generic entries label.

Versión 13.22.0 (2021-05-31)

• Commit 7dc24

  Feature

  Customer request
  Views with threat intelligence focus show APT actors identified during CTI activity analysis.

• Commit 5ada2

  Feature
  Titles of charts link to drilldown sites whenever possible.

Versión 13.21.0 (2021-05-26)

• Commit edf52

  Feature

  Customer request
  Language support for Japanese (jp). This includes basic parts of the web site and vulnerability details.

Versión 13.20.4 (2021-05-18)

• Commit 02cd6

  Optimization
  The event of web code improvement shown in the community stream links to the changelog.

• Commit e9923

  Optimization

  API Change
  In API 1.9/2.21/3.28 requests by the official Splunk app with a license of less than 10 API credits will throw an 403 Splunk app license expired error to prevent stressing the service with expired Splunk installations.

Versión 13.20.3 (2021-05-12)

• Commit b4953

  Optimization
  Streamlined entry identifier wording on community activity stream on the frontpage.

Versión 13.20.2 (2021-05-04)

• Commit 8d247

  Optimization
  The changelog does contain the version number of the service.

• Commit 5421d

  Optimization
  All major releases are shown in the changelog with a star.

Versión 13.20.1 (2021-05-02)

• Commit b0e75

  Optimization
  Community activities shown on the frontpage do refer to entries with their corresponding VDB ID to increase readability.

Versión 13.20.0 (2021-04-29)

• Commit 0d72f

  Feature
  Frontpage does now show the latest changelog entries of the current day.

• Commit d6b22

  Optimization

  Customer request
  Vulnerability entries do now always contain links to available upgrades and patches in the Countermeasure section.

Versión 13.19.3 (2021-04-28)

• Commit 6df70

  Optimization
  Performance optimization of the Threat Intelligence chart on the frontpage.

• Commit d1eb6

  Bugfix

  Customer request
  Fixed an issue where count and overview of user commits were not updated. Reported by user misc

Versión 13.19.2 (2021-04-26)

• Commit a9542

  Optimization
  Hardware upgrade for better memory and processing handling.

• Commit 8dd8c

  Optimization

  API Change
  In API 3.27 the values of numeric request types is verified and if not acceptable, a 400 Bad request error message is shown.

Versión 13.19.1 (2021-04-24)

• Commit 3855b

  Optimization
  Optimized load balancing, limiter, and DDoS mitigation to provide more stability for legitimate users.

Versión 13.19.0 (2021-04-22)

• Commit a85dc

  Feature

  Customer request
  Submitted items are reviewed by an automated pre-parser to define a priority for processing by the moderation team. This increases priority for most important items and therefore improves processing speed.

Versión 13.18.0 (2021-04-20)

• Commit 612a5

  Feature

  Customer request
  Language support for Chinese simplified (zh-Hans). This includes basic parts of the web site and vulnerability details.

Versión 13.17.1 (2021-04-16)

• Commit b93ed

  Optimization
  Code optimization of CTI map generation for faster processing with less memory requirements.

Versión 13.17.0 (2021-04-15)

• Commit 1ffb5

  Feature

  Customer request
  Description of CTI trigger possibilities and threshold handling to create events and reports.

• Commit 881a3

  Optimization
  Footer does now refer to your specific copyright and license depending whether there is a commercial, enterprise, or reseller license established.

Versión 13.16.0 (2021-04-12)

• Commit f7832

  Feature

  Customer request
  Some users mistake their mail address as legitimate username to login. In this case a warning message informs the user about the mistake.

Versión 13.15.3 (2021-04-08)

• Commit 265e0

  Optimization
  Performance optimization for CTI country analysis (closed beta invite only at the moment). Time range analysis is now incremental which makes report generation much faster (especially for larger ranges).

Versión 13.15.2 (2021-03-31)

• Commit 05005

  Optimization
  All listings in the personal profile do contain timestamps to make identification of single items much easier.

• Commit cddb4

  Optimization
  Completed some of the missing translations for French, Italian, Spanish, Polish, and Swedish.

• Commit 6dc4a

  Optimization
  Improved the handling of time format regarding country-specific definitions. The language en will show A.M. and P.M. only if the browser is also set to en-us. Otherwise the 24 hour format is used. If the language is set to fr and the browser announces fr-fr there will be the French format 12h34. The 24 hour format is also used as default for all languages without a specific definition.

Versión 13.15.1 (2021-03-30)

• Commit d71be

  Bugfix
  Fixed a bug where some long product names, product listings and titles did not show the product name in its entirety.

• Commit 44ee5

  Optimization

  API Change
  In API 3.26 fixed an issue where queries for advisory_date_start, entry_timestamp_create_start, entry_timestamp_change_start, and entry_timestamp_all_start did not work properly if the request value had a trailing whitespace.

Versión 13.15.0 (2021-03-29)

• Commit 15c50

  Feature

  API Change
  The personal API history does show the execution time for a request to help optimize queries. The column is shown as seconds and sortable.

• Commit c4d04

  Feature

  Customer request
  Added planned features in a roadmap to announce upcoming functionality. The items shown are just suggestions and might change regarding implementation and deployment.

Versión 13.14.3 (2021-03-28)

• Commit 1ec36

  Optimization

  Customer request
  Better description of update handling, especially prioritization of new data for existing entries and update requests by customers.

• Commit ae8c3

  Optimization
  Optimized the description of different commit moderation approaches. The actions for handling spam and profanity are explained in detail.

Versión 13.14.2 (2021-03-26)

• Commit 206df

  Bugfix

  API Change
  In API 2.20/3.25 the list of multiple items in software_affectedlist and software_notaffectedlist do trim trailing whitespaces correctly.

Versión 13.14.1 (2021-03-25)

• Commit a8cdf

  Optimization
  Added a new community rank Guru which requires 5000 points to be reached. Therefore, Grand Master is not the highest rank anymore.

Versión 13.14.0 (2021-03-24)

• Commit 434e3

  Feature

  API Change

  Customer request
  Introduced API 3.24 with the new request type entry_timestamp_all_start which combines new items from entry_timestamp_create_start and updated items from entry_timestamp_change_start in a single stream.

Versión 13.13.1 (2021-03-20)

• Commit 26de8

  Optimization
  Optimized speed and memory consumption of queries based on LIKE statements in search queries.

Versión 13.13.0 (2021-03-17)

• Commit 1daf9

  Feature

  Customer request
  Documentation of the different levels used in the field exploit_exploitability shown on multiple listings on the web site.

Versión 13.12.0 (2021-03-10)

• Commit 699d0

  Feature

  Customer request
  Made internal changelog public to provide full transparency for our customers. Entries earlier than 2020 just show milestones and not detailed changes.

• Commit 43dfe

  Feature
  Added link to changelog under support in main menu and in the footer of the page.

• Commit c0ba0

  Optimization
  Updated internal quality guidance for CVSS fields during creation of new entries based on official Microsoft disclosures.

Versión 13.11.3 (2021-03-08)

• Commit 1faf6

  Optimization
  Updated internal quality requirements for advisory_person_name and advisory_person_nickname fields to prevent inaccurate information during daily update procedure.

Versión 13.11.2 (2021-03-04)

• Commit ecf32

  Optimization
  Optimized limiter to prohibit crawling of view elements by non-commercial users.

• Commit fa612

  Optimization
  Limiter uses better geolocation data to prevent malicious users from changing IP addresses to slow down detection of abuse.

Versión 13.11.1 (2021-03-03)

• Commit 09cef

  Bugfix
  Fixed a rare German translation issue in a specific sentence of some vulnerability summaries.

Versión 13.11.0 (2021-03-01)

• Commit 17052

  Feature
  Prepared language database for upcoming translations.

• Commit b3dfc

  Optimization
  Optimized language database for better performance.

Versión 13.10.0 (2021-02-28)

• Commit 021d4

  Feature
  CTI Analysis (closed-beta only) supports search strings for technology-specific research.

Versión 13.9.0 (2021-02-22)

• Commit e7965

  Feature
  Added user element under search in main menu.

• Commit 7ed21

  Optimization
  Optimized internal CTI event analysis module.

Versión 13.8.0 (2021-02-04)

• Commit 5626b

  Feature
  Added load balancing features to handle performance peaks much better.

• Commit 2efad

  Feature
  Enabled priority module to provide high-availability for enterprise customers.

Versión 13.7.1 (2021-02-03)

• Commit 167ac

  Optimization
  Optimized normalize module to improve quality assurance of vulnerability data management.

Versión 13.7.0 (2021-02-01)

• Commit 14106

  Feature
  Initiated preparation for port of web services to PHP8. First polyfill functions tested.

Versión 13.6.1 (2021-01-17)

• Commit bdc13

  Bugfix
  Fixed a bug where some new user submissions were shown as rejected even though they were still not processsed yet. This issue was reported by user misc.

Versión 13.6.0 (2021-01-16)

• Commit 960f5

  Feature
  Start of internal testing for CTI attribution module to identify APT group activities as such. Used by CTI team to create CTI alerts and infos for paying customers.

Versión 13.5.4 (2021-01-09)

• Commit d53a8

  Optimization

  API Change

  Customer request
  Changed entry_timestamp_delta behavior from 7200 to 120 to keep commit grouping much smaller. Entries updated within a short period of time will pushed into the update stream to provide the most actual data to API users.

Versión 13.5.3 (2021-01-04)

• Commit 96326

  Optimization
  Performance improvement of search engine. Early dissection will speed up some specific search requests.

• Commit 96326

  Optimization
  Performance improvement of monoblock engine. Compilation of entries is a bit faster under certain circumstances.

Versión 13.5.2 (2020-12-23)

• Commit db3d5

  Optimization
  Unordered lists in regular content to not a a maximum heigh and auto scrollbars anymore.

Versión 13.5.1 (2020-12-15)

• Commit c227f

  Optimization
  Performance optimization of monoblock data processing.

Versión 13.5.0 (2020-12-09)

• Commit 93707

  Feature
  Added a stylesheet to display "time ago" for stream items.

Versión 13.4.0 (2020-12-08)

• Commit dcd32

  Feature

  API Change
  In API 3.23 added request type cursorinit to determine ideal initial cursor position for ongoing vulnerability stream (e.g. Splunk).

Versión 13.3.0 (2020-12-04)

• Commit 3abdf

  Feature
  Introduced information regarding ATT&CK. The fields are currently auto-generated and not part of the monoblock.

• Commit dbcd2

  Feature

  API Change
  In API 2.19/3.22 added field source_cve_cna which contains a string of the CVE Numbering Authority that assigned the CVE.

• Commit 118c6

  Bugfix
  Corrected a display bug for tooltips of CVSS fields on certain overview pages.

Versión 13.2.1 (2020-12-03)

• Commit 6c403

  Optimization
  Optimized signup flood protection to prevent malicious users from auto-generating community accounts.

Versión 13.2.0 (2020-11-26)

• Commit 0cd93

  Feature
  Added new import feature for vulnerability moderators to handle custom entries and large batches of submissions.

• Commit a4571

  Feature
  The differences in a diff view are highlighted by color to provide better visibility.

Versión 13.1.2 (2020-11-13)

• Commit 7983d

  Optimization
  Performance optimization of monoblock data processing.

Versión 13.1.1 (2020-11-06)

• Commit c87a7

  Optimization
  Migration to new hardware.

Versión 13.1.0 (2020-11-02)

• Commit f6cc6

  Feature
  Paying customers do now see a summary on top of every vulnerability entry to identify the most important aspects of the vulnerability.

Versión 13.0.1 (2020-10-16)

• Commit 68339

  Optimization
  Optimized some indexes within the database to improve performance.

Versión 13.0.0 (2020-10-09)

• Commit 8b201

  Feature
  Introduced new monoblock structure to provide more possibilities like commits, commit histories, etc.

Versión 12.26.1 (2020-09-26)

• Commit b11f4

  Optimization
  Better, faster, and more accurate calculation of CTI interest scores.

Versión 12.26.0 (2020-09-10)

• Commit b015c

  Feature
  The live symbol is pulsating.

• Commit 2d270

  Optimization
  The CSS code for the custom worldmap is deleted to stramline the CSS file.

Versión 12.25.1 (2020-08-10)

• Commit b3264

  Optimization
  Optimization of browser rendering speed by adding font-display: swap to the CSS style sheet.

Versión 12.25.0 (2020-05-16)

• Commit f6e38

  Feature
  Added an optimization banner to inform users about upcoming changes and features.

Versión 12.24.0 (2020-05-13)

• Commit 58be3

  Feature
  New horizontal table style to make some upcoming views better readable.

Versión 12.23.5 (2020-05-01)

• Commit e655c

  Optimization
  Upgrading to an extended server cluster for better performance.

Versión 12.23.4 (2020-04-17)

• Commit ee0cc

  Bugfix

  API Change
  In API 3.21 the field entry_timestamp_change is now always present even if the entry was just created and never updated yet. In this case it will contain the same value like entry_timestamp_create. User of the official VulDB Splunk App are advised to update to the latest release.

Versión 12.23.3 (2020-03-04)

• Commit 328c8

  Optimization
  CVEdetails.com stopped updating their database. We keep linking old CVEs to their sites but do not do so for newer entries.

Versión 12.23.2 (2020-01-10)

• Commit ce27f

  Optimization
  Added validation styles for numbers, dates, emails, and urls for forms. These detect missing or wrong data before submitting a form.

Versión 12.23.1 (2019-11-19)

• Commit 7d12f

  Optimization
  Decreased the font-size of labes from 90% to 75% for better readability.

• Commit c8999

  Optimization
  Improved style and layout of tooltips for better readability.

Versión 12.23.0 (2019-11-15)

• Commit 5c4b5

  Feature
  Load new pages with extended loading time show progress bar spinner at top of the site.

Versión 12.22.0 (2019-11-09)

• Commit c4f43

  Feature
  Added logos of vendors/products in entries if available.

• Commit 46f6e

  Optimization
  Stramlined CSS style sheet regarding mini buttons.

Versión 12.21.0 (2019-11-08)

• Commit 4f1af

  Feature
  Added tooltips for easier access to more information.

• Commit 63433

  Optimization
  Added fade effect for mini buttons for a better user experience.

Versión 12.20.1 (2019-11-06)

• Commit 01634

  Optimization
  Stramlined box elements and columns.

Versión 12.20.0 (2019-10-31)

• Commit 032a9

  Feature

  API Change

  Customer request
  In API 3.20 added field vulnerability_name which contains a string or array a popular names of the vulnerability (e.g. Shellshock, Poodle).

Versión 12.19.0 (2019-09-13)

• Commit eaf94

  Feature

  API Change

  Customer request
  In API 3.19 added field family entry_details_* which contain entry_details_affected, entry_details_vulnerability, entry_details_impact, entry_details_exploit, entry_details_countermeasures, and entry_details_sources.

Versión 12.18.0 (2019-08-31)

• Commit 34a45

  Feature

  API Change
  In API 3.18 added field entry_replaces to display duplicates which have been replaced by this entry.

Versión 12.17.0 (2019-08-26)

• Commit 3974b

  Feature

  API Change
  In API 3.17 added fields vulnerability_cvss3_basevector_vuldb and vulnerability_cvss3_tempvector_vuldb to display full VulDB CVSSv3 vectors easily.

Versión 12.16.0 (2019-08-22)

• Commit 3ef93

  Feature
  Added experimental world map to highlight CTI activities.

• Commit 5054e

  Optimization
  Improved the layout of checkboxes on web forms.

Versión 12.15.0 (2019-07-06)

• Commit e5808

  Feature

  Customer request
  VulDB administrators are able to provide DB dumps for faster onboarding of enterprise customers.

Versión 12.14.0 (2019-07-01)

• Commit 2fcc6

  Feature

  Customer request
  Introduction of software type categories available in the field software_type.

Versión 12.13.3 (2019-06-04)

• Commit dd112

  Bugfix

  API Change
  In API 3.16 fixed value of field advisory_identifier, disabled safeguard mechanism to prevent inconsistency in result count.

Versión 12.13.2 (2019-06-01)

• Commit 26f6b

  Optimization
  Updated the Data Privacy Notice to clarifying wording and added details about payment processing.

Versión 12.13.1 (2019-05-27)

• Commit 6e92e

  Optimization
  Added loading bar on top of the page to indicate the loading of large pages.

Versión 12.13.0 (2019-05-24)

• Commit bcb85

  Feature
  Submitting forms locks input fields and shows progress indicator.

Versión 12.12.0 (2019-05-17)

• Commit c9222

  Feature

  API Change
  In API 3.15 added fields software_website_vendor and software_website_product to the output.

Versión 12.11.0 (2019-05-08)

• Commit 0fb91

  Feature

  API Change
  In API 3.14 requesting dedicated CVSS fields supports the official response format (e.g. vulnerability_cvss3_vuldb_basescore) and the legacy format (e.g. vulnerability_cvss3_basescore_vuldb). The legacy format will be dropped in a future major release of the API.

Versión 12.10.1 (2019-04-24)

• Commit 1dc8a

  Optimization
  Improved the layout of the search menu item for better accessibility.

• Commit bb0d0

  Optimization
  The status boxes of live views are now pulsating if there is currently some activity.

Versión 12.10.0 (2019-04-17)

• Commit d1042

  Feature

  API Change

  Customer request
  In API 1.8/2.18/3.13 added field software_cpe23 which introduces full CPE 2.3 support whereas software_cpe is still providing CPE 2.2 data.

Versión 12.9.0 (2019-04-15)

• Commit 3bfed

  Feature
  Added a detailed clendar view for years an months.

• Commit faa07

  Optimization
  Streamlined the row behavior.

Versión 12.8.2 (2019-04-10)

• Commit 35519

  Optimization
  Hovering a clickable symbol in an overview will now be indicated by the cursor as pointer.

• Commit cdf7b

  Optimization
  Improved the layout of buttons inside text boxes (e.g. searches).

Versión 12.8.1 (2019-04-01)

• Commit 27ca6

  Optimization
  Centered the purchase table for better accessibility.

Versión 12.8.0 (2019-03-29)

• Commit 54a22

  Feature

  Customer request
  Added the possibility to purchase new licenses online.

Versión 12.7.0 (2019-03-21)

• Commit e4bb6

  Feature
  Added the possibility to search within the main menu.

Versión 12.6.0 (2019-03-15)

• Commit d3ac7

  Feature

  Customer request
  Added multiple levels to the main menu to provide better accessibility to the variety of features.

• Commit 35f3e

  Feature
  Added the possibility for buttons within textboxes (e.g. searches).

Versión 12.5.0 (2019-03-08)

• Commit 1ae53

  Feature
  Vulnerability entries do now show the exploit prices with a graphical element.

• Commit 74f44

  Optimization
  Improved the display of symbols in overviews.

Versión 12.4.0 (2019-03-04)

• Commit 55a0e

  Feature

  API Change
  In API 1.7/2.17/3.12 added fields entry_locked_status and entry_locked_reason to inform about entries undergoing update and review processes (they might change soon).

Versión 12.3.0 (2019-03-01)

• Commit 81d15

  Feature
  Introduction of the C3BM Index (CVSSv3 Base Meta Index) based on CVSS data of multiple sources.

Versión 12.2.0 (2019-02-28)

• Commit 231a4

  Feature
  Large tables might be shown with a striped layout to improve readability.

• Commit 16d23

  Optimization
  Improved the layout of buttons in the user submenu.

Versión 12.1.0 (2019-02-25)

• Commit 9c6de

  Feature

  Customer request
  Symbols in overviews are clickable to provide a drilldown feature. This is true for CVSS, exploit prices, exploitability, and countermeasures.

• Commit 92aac

  Optimization
  Header text is now a graphical element.

Versión 12.0.4 (2019-02-23)

• Commit 82de5

  Optimization
  Slightly changed the colorization of remedation and exploitability levels.

Versión 12.0.3 (2019-02-22)

• Commit 55aa5

  Optimization
  Changed the pointer behavior of certain table headers from grab to regular pointer.

Versión 12.0.2 (2019-02-21)

• Commit 81d16

  Optimization
  Streamlined user menu buttons.

• Commit 81d16

  Optimization
  Streamlined exploitability fields.

Versión 12.0.1 (2019-02-20)

• Commit 2d300

  Optimization

  API Change
  In API 1.6/2.16/3.11 improved speed, reliability and accuracy of updates queries.

• Commit d6d17

  Optimization
  Improved the width behavior of user menu buttons.

• Commit a25da

  Optimization
  Links in overviews are clickable within the whole cell and not just on the text itself.

Versión 12.0.0 (2019-02-18)

• Commit b9184

  Feature

  Customer request
  New overviews introduced with a lot of information items.

• Commit 65679

  Feature
  Added support for dynamic behavior for long tables with more than six columns.

• Commit 4c719

  Optimization
  Streamlined the behavior of content and article.

• Commit 4c719

  Optimization
  Streamlined the behavior of tables.

• Commit 4c719

  Optimization
  Streamlined the behavior of buttons.

Versión 11.27.0 (2019-02-15)

• Commit c278e

  Feature
  Added the posibility to fade-in some elements for a better user experience.

• Commit 07fdc

  Optimization
  Improved the width behavior of user menu buttons.

Versión 11.26.0 (2019-02-08)

• Commit 7324e

  Feature
  Added buzzboxes to show statistical data about the project.

• Commit 3b784

  Optimization
  Optimized the margin behavior of columns.

Versión 11.25.0 (2019-02-06)

• Commit 250b0

  Feature

  API Change

  Customer request
  In API 3.10 added request parameter offset to set a starting point for results (pagination).

Versión 11.24.1 (2019-02-01)

• Commit 5d94f

  Optimization
  Reached the 10.000th community user. Congratulations!

Versión 11.24.0 (2019-01-18)

• Commit c5ee2

  Feature

  API Change
  In API 3.9 added field software_type.

Versión 11.23.0 (2019-01-11)

• Commit dfb03

  Feature

  API Change

  Customer request
  In API 3.8 VulDB CVSSv3 scores use AI-driven autocomplete based on historical data and additional sources. The field vulnerability_cvss3_vuldb_confidence indicates the confidence of the vectors.

Versión 11.22.1 (2019-01-08)

• Commit 608e1

  Bugfix

  API Change
  In API 1.5/2.15/3.7 field software_component is not returning multiple fields anymore to prevent parsing errors.

Versión 11.22.0 (2019-01-01)

• Commit 772cf

  Feature
  Enabling real-time views of recent and updated entries. You are now able to see the moderation time at work.

Versión 11.21.0 (2018-12-13)

• Commit 1deb7

  Feature

  API Change

  Customer request
  In API 1.4/2.14/3.6 requesting details without unlocked archive access will warn in field entry_warning about limitation.