Log delle modifiche

Versione 20.8.0 (23/09/2026)

  • Commit e71d1
    Funzionalità
    Articles show the permalink at the bottom of the site for easier references.

Versione 20.7.3 (03/09/2026)

Versione 20.7.2 (02/09/2026)

  • Commit ecd66
    Ottimizzazione
    Optimization of web application core to provide better performance.

Versione 20.7.1 (01/09/2026)

  • Commit b1176
    Ottimizzazione
    Upgrade of server hardware to improve performance.

Versione 20.7.0 (24/08/2026)

Versione 20.6.5 (22/08/2026)

  • Commit cd330
    Ottimizzazione
    Improved the CSRF behavior of the login form. Thanks to the user abhnv for reporting this issue.

Versione 20.6.4 (20/08/2026)

Versione 20.6.3 (15/08/2026)

  • Commit 66834
    Correzione dei bug
    Fixed an issue where it was possible to influence re-directs to external sources. Thanks to the user a7ca3 for reporting this issue.

Versione 20.6.2 (14/08/2026)

Versione 20.6.1 (15/07/2026)

  • Commit 7a75a
    Correzione dei bug
    Richiesta cliente
    Fixed an issue where editing a vulnerability entry caused a commit to delete the Nessus family name. Reported by user lywand

Versione 20.6.0 (10/06/2026)

  • Commit 37373
    Funzionalità
    Entries of our CVE DB provide details about verified actors, campaigns, and indicators of compromise.

Versione 20.5.2 (09/06/2026)

Versione 20.5.1 (02/06/2026)

Versione 20.5.0 (21/05/2026)

Versione 20.4.12 (20/05/2026)

Versione 20.4.11 (18/05/2026)

Versione 20.4.10 (17/05/2026)

  • Commit 71d80
    Ottimizzazione
    Short vulnerability titles contain additional function references if they are mentioned in URLs.

Versione 20.4.9 (06/05/2026)

Versione 20.4.8 (02/04/2026)

Versione 20.4.7 (30/04/2026)

  • Commit ccb1f
    Ottimizzazione
    The sitemap got optimized regarding accuracy, detail level, and file size.

Versione 20.4.6 (29/04/2026)

  • Commit 93149
    Ottimizzazione
    Vulnerability lists show additional function details if such is mentioned in other views to provide better clarity.

Versione 20.4.5 (26/04/2026)

Versione 20.4.4 (24/04/2026)

  • Commit 0b47b
    Ottimizzazione
    Improved version and patch name handling during vulnerability moderation.

Versione 20.4.3 (20/04/2026)

Versione 20.4.2 (19/04/2026)

  • Commit be760
    Ottimizzazione
    Performance improvement of vendor and product overview.

Versione 20.4.1 (15/04/2026)

  • Commit 72444
    Ottimizzazione
    Titles of vulnerability entries with many affected versions are optimized to provide better readability.

Versione 20.4.0 (14/04/2026)

  • Commit d7fa8
    Funzionalità
    Richiesta cliente
    Implementation of high speed session handling.

  • Commit 4f857
    Ottimizzazione
    Additional performance improvement of the frontpage.

Versione 20.3.3 (12/04/2026)

Versione 20.3.2 (10/04/2026)

Versione 20.3.1 (09/04/2026)

  • Commit 0af39
    Ottimizzazione
    Performance improvement of text generation process.

  • Commit 0af39
    Ottimizzazione
    Performance improvement of frontpage.

  • Commit 0af39
    Ottimizzazione
    Performance improvement of personalized My Views.

Versione 20.3.0 (08/04/2026)

Versione 20.2.1 (07/04/2026)

  • Commit 4793f
    Ottimizzazione
    Improving lookup speed of linked actors in Vulnerability CTI views.

  • Commit 4793f
    Ottimizzazione
    Improving lookup speed of linked campaigns in Vulnerability CTI views.

  • Commit 25949
    Ottimizzazione
    Remapped some old links to the new link structure in charts.

  • Commit 25949
    Ottimizzazione
    Remapped some old links to the new link structure in views.

Versione 20.2.0 (03/04/2026)

  • Commit 163cd
    Funzionalità
    Linking to CVE entries on the local platform to guarantee better accessibility and an improved user-experience.

Versione 20.4.8 (02/04/2026)

  • Commit f1012
    Ottimizzazione
    Improving the HTML HEAD element of vulnerability entries and submit items.

Versione 20.1.1 (01/04/2026)

  • Commit bb93d
    Ottimizzazione
    Migrated links of charts to new URL structure.

Versione 20.1.0 (29/03/2026)

Versione 20.0.0 (28/03/2026)

  • Commit 187f6
    Funzionalità
    Overhaul of the URL structure of the whole service. We change from a query string-based approach to a REST-like URL structure.

Versione 19.33.5 (12/03/2026)

Versione 19.33.4 (11/03/2026)

Versione 19.33.3 (10/03/2026)

Versione 19.33.2 (09/03/2026)

Versione 19.33.1 (08/03/2026)

  • Commit 89bec
    Ottimizzazione
    We send the HTTP response header Content-Signal to define if and how AI-based processing of pages is allowed.

Versione 19.33.0 (02/03/2026)

Versione 19.32.2 (25/02/2026)

  • Commit d51e7
    Ottimizzazione
    Charts about different CVSS scoring show the amount of scored vulnerability items in the chart title.

Versione 19.32.1 (23/02/2026)

  • Commit 4919b
    Ottimizzazione
    Vulnerability history views indicate commits by submitters in the remark column.

Versione 19.32.0 (22/02/2026)

  • Commit 9a3dd
    Funzionalità
    All KEV views do indicate whether there is a ransomware to be known for specific vulnerability entries.

  • Commit 22b69
    Ottimizzazione
    All HTTP redirects on the web service are faster due to general code optimization.

Versione 19.31.0 (21/02/2026)

  • Commit cd758
    Funzionalità
    The web searches add CWE as a new column in the search results to provide better accessibility to relevant data.

Versione 19.30.0 (16/02/2026)

Versione 19.29.4 (15/02/2026)

Versione 19.29.3 (13/02/2026)

Versione 19.29.2 (12/02/2026)

  • Commit bcfa9
    Ottimizzazione
    Upgrade of server hardware to improve performance.

  • Commit bcfa9
    Ottimizzazione
    Upgrade of all software components to the latest version tree.

  • Commit 25d73
    Ottimizzazione
    Improved handling of user sessions for better performance and increased security.

Versione 19.29.1 (11/02/2026)

Versione 19.29.0 (10/02/2026)

  • Commit 77f5d
    Funzionalità
    Richiesta cliente
    Introduction of the support for CVSSv3 data by CISA as an ADP in different views (e.g. CVSSv3 overview, edit form).

  • Commit d5bc4
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.86 introduction of the ADP CISA CVSSv3 vector and score which is accessible via vulnerability_cvss3_adpcisa_*.

  • Commit e03e8
    Ottimizzazione
    CTI overviews show additional statistical data about CTI monitoring.

Versione 19.28.0 (09/02/2026)

Versione 19.27.3 (08/02/2026)

Versione 19.27.2 (06/02/2026)

  • Commit b09d3
    Correzione dei bug
    Fixed an issue where existing users were not able to login if their username contained a string which is blacklisted for user registration. Thanks to the user pengroot for reporting this issue.

Versione 19.27.1 (04/02/2026)

  • Commit 6a8bd
    Ottimizzazione
    Improved the username validator to prevent disallowed usernames during registration.

Versione 19.27.0 (02/02/2026)

Versione 19.26.3 (30/01/2026)

  • Commit bddb1
    Ottimizzazione
    Fixed a rare issue where vendor and product links were not aligned regarding case sensitivity.

Versione 19.26.2 (28/01/2026)

  • Commit e80fb
    Ottimizzazione
    The recurring generation of the stats page is more efficient and informs concurrent users about the generation process.

Versione 19.26.1 (27/01/2026)

  • Commit 15d2c
    Ottimizzazione
    Improved product web site association for vulnerability entries.

Versione 19.26.0 (26/01/2026)

Versione 19.25.3 (25/01/2026)

  • Commit 5d608
    Ottimizzazione
    Improvement of country activity analysis accuracy shown in CTI charts.

Versione 19.25.2 (24/01/2026)

  • Commit 90808
    Ottimizzazione
    Performance optimizazion of views containing CTI maps.

Versione 19.25.1 (23/01/2026)

  • Commit 11bc9
    Ottimizzazione
    Performance optimization for all text generation elements. Especially views with multiple descriptions profit from this.

Versione 19.25.0 (19/01/2026)

Versione 19.24.1 (13/01/2026)

  • Commit 64d9c
    Ottimizzazione
    The lookup of CWE identifiers shows the full name of items in diff views and commit items of vulnerability entries.

Versione 19.24.0 (12/01/2026)

Versione 19.23.0 (05/01/2026)

Versione 19.22.2 (04/01/2026)

Versione 19.22.1 (03/01/2026)

  • Commit b5b92
    Correzione dei bug
    Under certain circumstances the CVSSv4 bscores and btscores were not calculated correctly for 3rd party sources.

Versione 19.22.0 (29/12/2025)

Versione 19.21.0 (22/12/2025)

Versione 19.20.4 (20/12/2025)

Versione 19.20.3 (19/12/2025)

  • Commit 14e46
    Correzione dei bug
    The Previous and Next buttons of Vulnerability Relate Views link to the corresponding main entry instead to an identified match.

Versione 19.20.2 (18/12/2025)

Versione 19.20.1 (17/12/2025)

  • Commit b998e
    Ottimizzazione
    The CTI view for vulnerability entries lists associated sources to make further analysis easier.

Versione 19.20.0 (15/12/2025)

Versione 19.19.2 (10/12/2025)

  • Commit e3c8e
    Ottimizzazione
    Links to CPE entries of NIST NVD do not accept wilcards for version fields anymore. A workaround makes it possible to guarantee a reliable lookup again.

Versione 19.19.1 (09/12/2025)

  • Commit 7da1f
    Ottimizzazione
    Within KEV views the due field links to the KEV entry for easier analysis capabilities.

Versione 19.19.0 (08/12/2025)

Versione 19.18.3 (05/12/2025)

  • Commit ba595
    Ottimizzazione
    Editing a vulnerability entry will allow to set the field software_notaffectedlist as well.

Versione 19.18.2 (04/12/2025)

Versione 19.18.1 (02/12/2025)

  • Commit bbeef
    Ottimizzazione
    DB structure improvement of Monoblock to improve performance of vulnerability data queries.

Versione 19.18.0 (01/12/2025)

Versione 19.17.3 (30/11/2025)

Versione 19.17.2 (28/11/2025)

Versione 19.17.1 (25/11/2025)

  • Commit 92921
    Ottimizzazione
    Optimized resource handling of high-performance queries.

Versione 19.17.0 (24/11/2025)

Versione 19.16.2 (23/11/2025)

  • Commit a2e0c
    Correzione dei bug
    Fixed an issue where vulnerability titles contained fragments of foreign languages.

Versione 19.16.1 (18/11/2025)

Versione 19.16.0 (17/11/2025)

Versione 19.15.2 (13/11/2025)

  • Commit 8a017
    Ottimizzazione
    If a user enables section counts in titles, then empty search results will shown the indicator as well.

Versione 19.15.1 (12/11/2025)

  • Commit d1c54
    Ottimizzazione
    Updated the CPE links in vulnerability entries to provide better accessibility to the NIST database.

Versione 19.15.0 (10/11/2025)

Versione 19.14.1 (05/11/2025)

  • Commit 22442
    Correzione dei bug
    Modifica API
    In API 3.85 fixed a race condition regarding API credit calculation which happened when an earlier API request had an extended execution time.

Versione 19.14.0 (03/11/2025)

Versione 19.13.2 (31/10/2025)

Versione 19.13.1 (30/10/2025)

Versione 19.13.0 (27/10/2025)

Versione 19.12.1 (25/10/2025)

  • Commit 42841
    Ottimizzazione
    Using intelligent processing order to optimize performance of simple search queries. This improves execution speed of most queries for approx. 30%.

Versione 19.12.0 (20/10/2025)

Versione 19.11.0 (13/10/2025)

Versione 19.10.0 (06/10/2025)

Versione 19.9.4 (03/10/2025)

  • Commit 2202d
    Ottimizzazione
    Current status of submits during processing is available to resposible users only.

Versione 19.9.3 (02/10/2025)

Versione 19.9.2 (01/10/2025)

Versione 19.9.1 (30/09/2025)

Versione 19.9.0 (29/09/2025)

Versione 19.8.2 (25/09/2025)

  • Commit 72bb1
    Ottimizzazione
    Upgraded web server pool to improve performance.

Versione 19.8.1 (24/09/2025)

  • Commit 78515
    Ottimizzazione
    Improved identification of similar vulnerability entries.

Versione 19.8.0 (22/09/2025)

Versione 19.7.1 (17/09/2025)

  • Commit df6ec
    Ottimizzazione
    Performance optimization of excessive request handling.

Versione 19.7.0 (15/09/2025)

Versione 19.6.0 (08/09/2025)

Versione 19.5.3 (07/09/2025)

  • Commit 45a22
    Ottimizzazione
    Improved the handling of version range declarations in different languages (e.g. "up to" and "prior").

Versione 19.5.2 (03/09/2025)

  • Commit 3c3a1
    Ottimizzazione
    Improved case-sensitivity handling of multi-language menu items.

Versione 19.5.1 (02/09/2025)

  • Commit 211a8
    Ottimizzazione
    If a vulnerability entry does not list products with the field software_affectedlist but the field source_certbund_products contains useful information, then the vulnerability entry will list those as affected products.

Versione 19.5.0 (31/08/2025)

Versione 19.4.3 (29/08/2025)

  • Commit 8b506
    Ottimizzazione
    User profiles provide a tooltip for the accepted vulnerability entry of a submit to see the title of the entry.

Versione 19.4.2 (28/08/2025)

  • Commit 42d76
    Ottimizzazione
    Performance improvement of application request blocking of very aggressive clients.

Versione 19.4.1 (27/08/2025)

  • Commit 525a3
    Ottimizzazione
    Introduction of a new network request limiter to block very aggressive clients.

Versione 19.4.0 (26/08/2025)

  • Commit 74b07
    Funzionalità
    Introduction of a new application request limiter to block very aggressive clients (e.g. scraping and flooding).

  • Commit 20f37
    Ottimizzazione
    Performance improvement of bursting request handling by the web platform.

Versione 19.3.0 (25/08/2025)

Versione 19.2.0 (20/08/2025)

  • Commit 90b8f
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.84 the introduction of the request types vendorlookup and productlookup to provide a possibility for better product matching.

Versione 19.1.0 (19/08/2025)

Versione 19.0.0 (18/08/2025)

  • Commit 3d859
    Funzionalità
    Total overhaul of the language handling system to improve texts, descriptions, and details of the service. This will introduce the possibility to add new supported languages.

Versione 18.35.3 (17/08/2025)

  • Commit 23052
    Ottimizzazione
    Better HTML compression for authenticated users to provide faster, smaller, and more efficient content delivery.

  • Commit db90c
    Ottimizzazione
    Improved duplicate detection and handling for vulnerability submits.

Versione 18.35.2 (10/08/2025)

  • Commit 83d65
    Ottimizzazione
    Vulnerability titles on narrow views are optimized to discard irrelevant data points.

  • Commit b4a46
    Ottimizzazione
    Users are only listed as committers of vulnerability entries and CVE entries if their commits were approved. Unmoderated and rejected commits are not used.

Versione 18.35.1 (09/08/2025)

  • Commit 6c88c
    Ottimizzazione
    Data in the CTI view per vulnerability entry is streamlined and provides better loading times.

Versione 18.35.0 (08/08/2025)

  • Commit c9346
    Funzionalità
    Richiesta cliente
    Vulnerability entries and RSS vulnerability feeds enhance information regarding local and remote exploitability by physical possibilities.

  • Commit 5cd4b
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 2.46/3.83 introduction of the fields exploit_physical, exploit_local, and exploit_remote which indicate theoretical exploit capabilities.

  • Commit c32fc
    Ottimizzazione
    Information about local and remote exploitability provide better accuracy.

Versione 18.34.0 (07/08/2025)

Versione 18.33.0 (06/08/2025)

Versione 18.32.5 (21/07/2025)

Versione 18.32.4 (18/07/2025)

Versione 18.32.3 (17/07/2025)

  • Commit bb891
    Ottimizzazione
    Cyber threat intelligence views show count indicators for interest and vulnerabilities.

  • Commit 04b9c
    Ottimizzazione
    Richiesta cliente
    Search queries and filters are able to better handle special variants of characters like accents and Umlaute. This guarantees a better search experience with less risk for false-negatives.

Versione 18.32.2 (16/07/2025)

Versione 18.32.1 (15/07/2025)

  • Commit 6da2f
    Ottimizzazione
    Database structures, dependencies, and index handling was drastically optimized, which improves the performance of many complex queries.

Versione 18.32.0 (14/07/2025)

  • Commit 14073
    Funzionalità
    Modifica API
    In API 3.82 introduction of the fields source_certbund_wid, source_certbund_published, source_certbund_title, source_certbund_products, source_certbund_classification, source_certbund_basescore, source_certbund_tempscore, source_certbund_nopatch.

Versione 18.31.7 (13/07/2025)

  • Commit 6eaa5
    Ottimizzazione
    Vulnerability entries in other languages provide better translation for certain items.

Versione 18.31.6 (11/07/2025)

  • Commit 7004b
    Ottimizzazione
    View optimization of mail alert messages. CVSSv3 was renamed to CVSS and details at the bottom do not deploy an alignment anymore.

Versione 18.31.5 (10/07/2025)

  • Commit 620fb
    Ottimizzazione
    Richiesta cliente
    Statistical data for views with old entries were blurried for free users. This limitation is now disabled to provide better possibilities to review the coverage and quality of our data.

Versione 18.31.4 (04/07/2025)

  • Commit f5e98
    Ottimizzazione
    In the submit view long descriptions are broken to provide better data accessibility.

Versione 18.31.3 (30/06/2025)

  • Commit 7a489
    Ottimizzazione
    In the submit moderation overview long descriptions are broken to provide better accessibility for moderators.

Versione 18.31.2 (28/06/2025)

Versione 18.31.1 (26/06/2025)

  • Commit c485a
    Correzione dei bug
    Fixed an issue where CVSSv4 scores by third parties with a value of 0.0 were not shown correctly.

Versione 18.31.0 (19/06/2025)

  • Commit b25df
    Funzionalità
    Indicator in the site footer shows which data pool is used to serve the user.

Versione 18.30.1 (15/06/2025)

Versione 18.30.0 (14/06/2025)

  • Commit 22b80
    Funzionalità
    Richiesta cliente
    Complete overhaul of the My Alert overview to provide more data and better accessibility. This includes total, maximum, and average CVSS scores per alert.

  • Commit 01b86
    Funzionalità
    Richiesta cliente
    My Alert summaries can be shown per month to provide better accessibility to earlier alerts.

Versione 18.29.1 (10/06/2025)

  • Commit da6c0
    Correzione dei bug
    Fixed an issue where in vulnerability overviews field data for CVSSv2 was wrongfully accessed via cache if the server was under heavy load.

  • Commit da6c0
    Correzione dei bug
    Fixed an issue where in vulnerability overviews field data for CVSSv2 was wrongfully shown even though commits for it were rejected.

Versione 18.29.0 (07/05/2025)

Versione 18.28.3 (06/06/2025)

Versione 18.28.2 (04/06/2025)

  • Commit f2375
    Ottimizzazione
    KEV views do not display the exploitability status anymore, because this is always Attacked anyway.

Versione 18.28.1 (02/06/2025)

  • Commit be29e
    Ottimizzazione
    Performance optimization to handle load and access peaks much better.

Versione 18.28.0 (01/06/2025)

  • Commit eeb1a
    Funzionalità
    Modifica API
    In API 1.20/2.45/3.81 introduction of the value A (Attacked) for the field exploit_exploitability.

  • Commit 6f71b
    Funzionalità
    Overview lists of vulnerabilities which display exploitability information do now support the value Attacked to indicate entries which are known for real-word exploiting.

Versione 18.27.0 (19/05/2025)

  • Commit e0463
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.80 introduction of a new CTI API query type iplist_date which allows to fetch a list of IP addresses added on a specific date.

Versione 18.26.1 (14/05/2025)

  • Commit 17f96
    Ottimizzazione
    Layout of email notification for password changes optimized.

Versione 18.26.0 (13/05/2025)

  • Commit faa4e
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.79 introduction of the field source_euvd_id to reflect identifiers of the European Union Vulnerability Database.

Versione 18.25.3 (08/05/2025)

  • Commit 8f54a
    Ottimizzazione
    Richiesta cliente
    Permabans of weak comments was too aggressive and affected users which did not violate any expectations. This issue was reported by user portal.

Versione 18.25.2 (04/05/2025)

Versione 18.25.1 (27/04/2025)

  • Commit 613ef
    Ottimizzazione
    Improvement of automated spam detection for comment posting of vulnerability entries. Malicious users are automatically temporarily or permanently banned from postig if they violate the terms.

Versione 18.25.0 (26/04/2025)

  • Commit 004c0
    Funzionalità
    Modifica API
    In API 3.78 introduction of the fields source_cnvd_id, source_cnvd_submit, source_cnvd_open, source_cnvd_severity, and source_cnvd_title.

Versione 18.24.1 (25/04/2025)

  • Commit 9d0ff
    Ottimizzazione
    Richiesta cliente
    The creation of version ranges of affected vulnerabilities does provide a more accurate upper bound value. This improves accuracy of version lists and CPE lists alike.

Versione 18.24.0 (23/04/2025)

  • Commit 93434
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.77 introduction of the virtual fields source_gcve_cve and source_gcve_vuldb to highlight our activity as GCVE Numbering Authority (GNA) for the Global CVE Allocation System (GCVE).

Versione 18.23.1 (22/04/2025)

  • Commit 5e790
    Ottimizzazione
    List of comments for vulnerability entries show the title of the entry as the tool tip of the VDB identifier.

  • Commit 5e790
    Ottimizzazione
    List of comments for vulnerability entries show the associated CVE in a dedicated column to provide better accessibility.

Versione 18.23.0 (20/04/2025)

Versione 18.22.3 (19/04/2025)

Versione 18.22.2 (18/04/2025)

  • Commit 5a426
    Ottimizzazione
    Vulnerability entries contain the GCVE identifier of CVE (range 0) and VulDB (range 100) if available.

Versione 18.22.1 (17/04/2025)

  • Commit 64514
    Ottimizzazione
    Richiesta cliente
    Improvement of the accuracy of the virtual field exploit_exploitability which will assess multiple other fields to determine the most reasonable value.

Versione 18.22.0 (16/04/2025)

  • Commit e0f77
    Funzionalità
    VulDB has officially become a GCVE Numbering Authority (GNA) for the Global CVE Allocation System (GCVE). Our namespace is 100 and GCVE identifiers are derived from our VDB identifiers. GCVE identifiers are shown in the header and the source section of vulnerability entries.

Versione 18.21.6 (03/04/2025)

  • Commit e3929
    Ottimizzazione
    CVSS score handling of new commits in vulnerability entries is more robust.

Versione 18.21.5 (31/03/2025)

Versione 18.21.4 (30/03/2025)

  • Commit c690a
    Ottimizzazione
    Improvement of performance by cleaning up unused code. Especially legacy code that was used for megablock handling.

Versione 18.21.3 (29/03/2025)

Versione 18.21.2 (28/03/2025)

  • Commit a2393
    Correzione dei bug
    Mail alerts were sent with the wrong language which has been reverted to being sent always in English.

Versione 18.21.1 (27/03/2025)

Versione 18.21.0 (25/03/2025)

Versione 18.20.4 (20/03/2025)

  • Commit 35505
    Correzione dei bug
    Fixed an issue in certain CTI views were the amount of references and samples was not displayed correctly.

Versione 18.20.3 (19/03/2025)

  • Commit 5e5ca
    Ottimizzazione
    Improvement of translation of the web service to provide a better wording and reflect cultural context in details.

Versione 18.20.2 (12/03/2025)

  • Commit 8b65d
    Ottimizzazione
    Improved accessibility of submit moderation to increase performance and quality.

Versione 18.20.1 (11/03/2025)

  • Commit 98de0
    Ottimizzazione
    Performance improvements of chart views which do not include timeseries data.

Versione 18.20.0 (10/03/2025)

Versione 18.19.1 (09/03/2025)

  • Commit 72ac9
    Ottimizzazione
    Optimization of the monoblock database engine to increase performance for certain special queries.

Versione 18.19.0 (05/03/2025)

Versione 18.18.1 (02/03/2025)

  • Commit adeb6
    Correzione dei bug
    Fixed an issue where certain CVSSv4 CNA vector values were not stored properly during update processes. This affected updates happening between 2025-02-24 and 2025-03-01. They will be corrected in a later update run.

Versione 18.18.0 (28/02/2025)

Versione 18.17.3 (27/02/2025)

  • Commit a3a19
    Correzione dei bug
    Modifica API
    Fixed an issue where the renewal for an API key did not show a login prompt if an unauthenticated user accessing the feature.

Versione 18.17.2 (24/02/2025)

  • Commit 7b151
    Correzione dei bug
    Fixed an issue where vulnerability entries without a CVSSv4 impact were not shown correctly in overview lists and detail views.

Versione 18.17.1 (20/02/2025)

  • Commit 61977
    Correzione dei bug
    Fixed an issue where votes for threads of vulnerability comments were not possible on certain instances.

Versione 18.17.0 (18/02/2025)

  • Commit f2efe
    Funzionalità
    Richiesta cliente
    We provide a statistical overview of all CWE that are used in our vulnerability database entries.

Versione 18.16.3 (17/02/2025)

  • Commit 9b5d0
    Ottimizzazione
    Performance and stability optimization of vulnerability database queries.

Versione 18.16.2 (16/02/2025)

  • Commit d4857
    Ottimizzazione
    Vulnerability submissions with weak or wrong disclosure links get much less community points.

Versione 18.16.1 (02/02/2025)

  • Commit 861aa
    Ottimizzazione
    Cleaning obsolete code of features like threat intelligence, vulnerability edit handling, worldmap display, and blocklist maintenance.

Versione 18.16.0 (29/01/2025)

Versione 18.15.2 (20/01/2025)

  • Commit 10aff
    Correzione dei bug
    Fixed an issue where complex searches regarding affected versions were not returning all associated results correctly.

Versione 18.15.1 (19/01/2025)

  • Commit 369b1
    Ottimizzazione
    Improved handling of version data of Linux Kernel vulnerability entries.

Versione 18.15.0 (16/01/2025)

Versione 18.14.9 (15/01/2025)

  • Commit c4721
    Correzione dei bug
    Fixed a rare issue where certain extended search queries were not able to collect the necessary vulnerability information.

Versione 18.14.8 (13/01/2025)

Versione 18.14.7 (05/01/2025)

Versione 18.14.6 (29/12/2024)

Versione 18.14.5 (26/12/2024)

Versione 18.14.4 (23/12/2024)

  • Commit 9a559
    Ottimizzazione
    Editing a vulnerability entry will show a small tutorial to help new users enriching existing entries.

Versione 18.14.3 (22/12/2024)

Versione 18.14.2 (21/12/2024)

  • Commit dd0d7
    Ottimizzazione
    The reference map for Tools also lists Qualys identifiers.

Versione 18.14.1 (20/12/2024)

  • Commit fa758
    Ottimizzazione
    Better value analysis of vulnerability commits to establish temporary or permanent bans of malicious activities.

Versione 18.14.0 (19/12/2024)

  • Commit 54d4b
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.75 the CTI API support the new query type sector which shows recent activities targeting specific sectors.

Versione 18.13.0 (16/12/2024)

Versione 18.12.6 (12/12/2024)

  • Commit 13bd3
    Ottimizzazione
    Modifica API
    In API 3.73 requesting CTI queries listing associated countries are now sorted in descending order of activity detection.

Versione 18.12.5 (06/12/2024)

  • Commit 1081d
    Ottimizzazione
    Update of most active countries for CTI data is much faster and demands less memory.

Versione 18.12.4 (05/12/2024)

  • Commit 6cc69
    Correzione dei bug
    Modifica API
    Richiesta cliente
    In API 3.72 fixed an issue where VulDB CVSSv4 scores with a value of 0.0 were not shown properly. This affected just a few vulnerability entries. Thanks to Ryan Egbert for reporting this issue.

  • Commit 6cc69
    Correzione dei bug
    Modifica API
    Richiesta cliente
    In API 3.72 fixed an issue where external CVSSv4 sources did not always contain vulnerability_cvss4_cna_bvector and vulnerability_cvss4_cna_btvector fields. Thanks to Ryan Egbert for reporting this issue.

Versione 18.12.3 (30/11/2024)

  • Commit 7b1be
    Ottimizzazione
    Faster and more accurate merge of CPE data provided by NVD with our own CPE data.

Versione 18.12.2 (28/11/2024)

  • Commit 534e8
    Ottimizzazione
    Modifica API
    Optimization of personal views for access history, search history, and API history.

Versione 18.12.1 (25/11/2024)

  • Commit 0bb99
    Ottimizzazione
    Improved generation of CSRF tokens to increase complexity of successful CSRF attacks.

Versione 18.12.0 (21/11/2024)

  • Commit 573a5
    Funzionalità
    Introduction of a new advanced search with additional artificial intelligence capabilities. Queries are much faster and provide better accuracy.

Versione 18.11.0 (19/11/2024)

  • Commit 17636
    Funzionalità
    Introduction of a new simple search with additional artificial intelligence capabilities. Queries are much faster and provide better accuracy.

Versione 18.10.1 (13/11/2024)

  • Commit 30cde
    Correzione dei bug
    Fixed an issue where under certain circumstances a listing of affected version numbers was not ordered properly.

Versione 18.10.0 (08/11/2024)

Versione 18.9.7 (06/11/2024)

  • Commit 2c281
    Ottimizzazione
    Better duplicate action detection and processing warning during vulnerability moderation.

Versione 18.9.6 (05/11/2024)

  • Commit f5ab6
    Ottimizzazione
    Vulnerability entries with merged CPE data originating from NVD respect the different splitting methodologies to prevent data overloading between affected products.

Versione 18.9.5 (04/11/2024)

  • Commit e6800
    Ottimizzazione
    Vulnerability relate views show associated CVE identifiers for better analysis capabilities.

  • Commit f1d3f
    Ottimizzazione
    Performance optimization of see also data of vulnerability entries.

Versione 18.9.4 (03/11/2024)

Versione 18.9.3 (02/11/2024)

Versione 18.9.2 (01/11/2024)

  • Commit ed9c3
    Ottimizzazione
    Improved speed of collecting and displaying CTI data in vulnerability entries (requires a CTI license).

Versione 18.9.1 (29/10/2024)

Versione 18.9.0 (28/10/2024)

  • Commit ce30b
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.70 introduces the Vulnerability API CTI fields cti_activity_ipaddr, cti_ioa_file, cti_ioa_library, cti_ioa_argument, cti_ioa_inputvalue, cti_ioa_pattern, cti_ioa_networkport, cti_ttp_attck, cti_ttp_cwe, and cti_ttp_capec.

Versione 18.8.3 (26/10/2024)

  • Commit c0ee8
    Ottimizzazione
    Vulnerability diff views now display up to 5 changes of an entry to provide better analysis possibilities.

Versione 18.8.2 (25/10/2024)

  • Commit 5de35
    Ottimizzazione
    Vulnerability diff views always show up to the last 4 changes of an entry, no matter if it was the initial creation or succeeding updates.

Versione 18.8.1 (24/10/2024)

Versione 18.8.0 (23/10/2024)

Versione 18.7.1 (22/10/2024)

  • Commit 60c2a
    Correzione dei bug
    Richiesta cliente
    Fixed a bug where some emails were sent with wrong end-of-line characters.

Versione 18.7.0 (18/10/2024)

  • Commit 4be6a
    Funzionalità
    Richiesta cliente
    The Cyber Threat Intelligence platform does not provide details about IP addresses. A CTI license is required to get full access.

Versione 18.6.8 (17/10/2024)

  • Commit 05b00
    Ottimizzazione
    The statistical view shows additional details about cyber threat intelligence (actor monitoring and exploit identification).

Versione 18.6.7 (14/10/2024)

  • Commit 18e76
    Ottimizzazione
    Improvement of vulnerability titles containing complex file name structures.

Versione 18.6.6 (13/10/2024)

  • Commit 950f4
    Correzione dei bug
    Fixed an issue where certain products were flagged as end of life even though that was not true.

Versione 18.6.5 (12/10/2024)

  • Commit 08e5a
    Correzione dei bug
    Fixed an issue where CVSSv4 vectors of sources without CVSS-BT data were transponding these fields from the VulDB vector data which could lead to sometimes confusing assignments.

Versione 18.6.4 (11/10/2024)

Versione 18.6.3 (09/10/2024)

  • Commit 5ffed
    Ottimizzazione
    Within vulnerability diff views all data fields based on unix timestamps show human-readable dates as well.

Versione 18.6.2 (27/09/2024)

  • Commit a7c8a
    Ottimizzazione
    Prioritizing Nessus Plugin ID in vulnerability entry headers.

Versione 18.6.1 (23/09/2024)

  • Commit 419a8
    Correzione dei bug
    Under certain circumstances the calculation of community points was not correct which lead to a decrease in collected points. Thanks to the user guru for reporting this issue.

Versione 18.6.0 (22/09/2024)

  • Commit 45d0d
    Funzionalità
    Linked certain CTI views to the according knowledge base entries (e.g. actors, countries, events).

Versione 18.5.0 (21/09/2024)

  • Commit c23e4
    Ottimizzazione
    Added a symbol to all views that require moderation or administrative permissions.

  • Commit aac87
    Funzionalità
    Modifica API
    Added CNA and API details to the CVE sync view which requires CNA or vulnerability moderation permissions.

Versione 18.4.13 (20/09/2024)

  • Commit 5030c
    Ottimizzazione
    Highlighted and tagged all main menu items that require moderation or administrative permissions.

  • Commit dbbf5
    Ottimizzazione
    Improved the view and capabilities of the manual vulnerability import feature available to vulnerability moderators.

Versione 18.4.12 (19/09/2024)

Versione 18.4.11 (17/09/2024)

Versione 18.4.10 (16/09/2024)

Versione 18.4.9 (15/09/2024)

  • Commit 1efee
    Ottimizzazione
    Re-caclulation of all points for vulnerability submits to penalize weak submission entries more (e.g. missing product details, very short descriptions).

Versione 18.4.8 (14/09/2024)

  • Commit 052f0
    Ottimizzazione
    Listing members of the vulnerability moderation team in the vulnerability moderation view.

  • Commit 89d2b
    Ottimizzazione
    Improved action forms in the vulnerability moderation view.

Versione 18.4.7 (13/09/2024)

  • Commit df251
    Ottimizzazione
    Automated expiration of moderation rights for admin users.

Versione 18.4.6 (12/09/2024)

  • Commit af51e
    Ottimizzazione
    Listing members of the actor moderation team in the actor import view.

Versione 18.4.5 (09/09/2024)

Versione 18.4.4 (04/09/2024)

  • Commit 6c28e
    Ottimizzazione
    History views of vulnerability entries show the username instead of the user in the chart legend.

  • Commit 6c28e
    Ottimizzazione
    History views of vulnerability entries show shortened field names in the chart legend.

  • Commit 6c28e
    Ottimizzazione
    History views of vulnerability entries list commits and approvals with 0 confidence as well in the charts.

Versione 18.4.3 (03/09/2024)

  • Commit 400a0
    Correzione dei bug
    Fixed an issue where vulnerability entries sometimes mention a fix timeline even though there is no fix available.

Versione 18.4.2 (31/08/2024)

Versione 18.4.1 (28/08/2024)

  • Commit ca544
    Ottimizzazione
    Optimized database connection handling to improve performance and decrease ressource occupancy on the servers.

Versione 18.4.0 (27/08/2024)

Versione 18.3.2 (26/08/2024)

  • Commit 59faf
    Ottimizzazione
    Improved the handling of vulnerability titles if many names are listed as affected vendor.

Versione 18.3.1 (25/08/2024)

  • Commit 1909d
    Ottimizzazione
    The assignment of points for submits is more strict but takes details into consideration (e.g. technical details in descriptions).

Versione 18.3.0 (24/08/2024)

Versione 18.2.0 (23/08/2024)

  • Commit 6c1a6
    Funzionalità
    Public user profiles show details about their community engagement like recent submits and commits.

Versione 18.1.7 (22/08/2024)

  • Commit 2e090
    Ottimizzazione
    The view for personal search history is improved and contains additional details.

  • Commit 44262
    Correzione dei bug
    Fixed an issue were large vulnerability lists were sometimes not showing special characters properly due to an encoding problem.

Versione 18.1.6 (21/08/2024)

  • Commit 49395
    Ottimizzazione
    Vulnerability titles with unusual vulnerability classes explain those whenever possible and do not just show "unknown vulnerability" anymore.

  • Commit 8db81
    Ottimizzazione
    The view for personal submits is improved and contains additional stats and more details.

  • Commit d167f
    Correzione dei bug
    Fixed a very rare issue where internal moderators were not able to debug search queries properly.

Versione 18.1.5 (20/08/2024)

  • Commit 971a6
    Correzione dei bug
    Under certain circumstances the CPE string for products with dedicated patch levels was not shown correctly.

Versione 18.1.4 (17/08/2024)

  • Commit 39bc4
    Ottimizzazione
    Editing a vulnerability entry will warn if a deprecated CWE value is selected.

Versione 18.1.3 (11/08/2024)

  • Commit 15e3f
    Ottimizzazione
    Views with user avatars are loaded much faster thanks to multiple query optimization techniques.

  • Commit e1f4f
    Ottimizzazione
    Color of duplicate submissions set to a darker orange tone to highlight that they are not very useful.

Versione 18.1.2 (10/08/2024)

  • Commit 80e03
    Correzione dei bug
    Fixed an issue where the recent chart on the front page was not updated properly when the service was under heavy load.

Versione 18.1.1 (09/08/2024)

Versione 18.1.0 (08/08/2024)

  • Commit 91a5f
    Funzionalità
    Richiesta cliente
    Community users are able to create their individual avatars in their profile settings.

  • Commit 91a5f
    Funzionalità
    Community user avatars are shown in lists, submits, commits, and posts.

Versione 18.0.0 (07/08/2024)

Versione 17.29.0 (06/08/2024)

  • Commit 4f9b9
    Funzionalità
    It is easier possible to change the password of existing accounts without using the password reset process.

  • Commit 091b3
    Funzionalità
    All password changes are reported to the associated mail address.

Versione 17.28.10 (02/08/2024)

  • Commit 49614
    Ottimizzazione
    Richiesta cliente
    Optimized queries and performance for personal My-Views (Recent, Updates, and Alerts).

Versione 17.28.9 (01/08/2024)

  • Commit a64d7
    Ottimizzazione
    Short vulnerability titles do also show affected file names even if large quantities of GET parameters are necessary.

Versione 17.28.8 (28/07/2024)

  • Commit 697de
    Ottimizzazione
    Editing vulnerability entries loads forms and dependencies much faster.

Versione 17.28.7 (27/07/2024)

  • Commit a07e4
    Ottimizzazione
    The overview ob submits hides blurried items on small screens to provide better accessibility.

Versione 17.28.6 (24/07/2024)

  • Commit 8bc47
    Ottimizzazione
    CTI views of vulnerabilities are able to link the correct actor or campaign based on associated vulnerability names.

Versione 17.28.5 (23/07/2024)

  • Commit a3456
    Ottimizzazione
    Vulnerability history views do not have links to new data anymore if the data value is empty (e.g. an existing data point was deleted).

Versione 17.28.4 (20/07/2024)

Versione 17.28.3 (18/07/2024)

  • Commit 0aeaa
    Ottimizzazione
    Indicators for CERT vulnerabilities are more prominent and link directly to the according advisory.

  • Commit e4a9d
    Ottimizzazione
    Diff views for vulnerabilities now indicate the creation of an entry and the dedicated updatesets.

  • Commit 04f0f
    Correzione dei bug
    Modifica API
    Fixed an issue where under certain circumstances paying customers with additional free API credits were shown negative values for available API credits in their user profile.

Versione 17.28.2 (17/07/2024)

Versione 17.28.1 (16/07/2024)

  • Commit 0b780
    Ottimizzazione
    Vulnerability history views highlight rollbacks and reverts to distinguish them from regular rejects.

Versione 17.28.0 (04/07/2024)

  • Commit 45cc8
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 2.42/3.68 introduced the fields source_cnnvd_id, source_cnnvd_name, source_cnnvd_hazardlevel, source_cnnvd_create, source_cnnvd_publish, and source_cnnvd_update.

Versione 17.27.0 (03/07/2024)

Versione 17.26.1 (30/06/2024)

  • Commit 6f955
    Ottimizzazione
    Source monitoring parsing optimized for new CVSSv4 vectors provided by external parties (e.g. CVE, CISA).

Versione 17.26.0 (29/06/2024)

  • Commit 5ccf0
    Funzionalità
    Vulnerability views for history and diff show the count of established commits.

Versione 17.25.4 (25/06/2024)

  • Commit 45ee7
    Ottimizzazione
    Vulnerability diff views are able to show 4 instead of just 3 generations of updated collections.

  • Commit 45ee7
    Ottimizzazione
    Vulnerability history views provide optimized field names for better layouting and clarity.

Versione 17.25.3 (22/06/2024)

  • Commit 92046
    Ottimizzazione
    Performance optimization of the vulnerability database tables to make them smaller and faster to work with.

Versione 17.25.2 (19/06/2024)

  • Commit b1b1a
    Ottimizzazione
    Improved the structure of notification emails if a login of a new device was detected.

Versione 17.25.1 (18/06/2024)

Versione 17.25.0 (16/06/2024)

Versione 17.24.0 (14/06/2024)

Versione 17.23.0 (11/06/2024)

  • Commit 672d2
    Funzionalità
    The reliability level of IOCs degrades over time and is better shown with the confidence indicator.

Versione 17.22.0 (09/06/2024)

  • Commit f4433
    Funzionalità
    Vulnerability lists and vulnerability entries mentioning zero-day.cz do properly link to the source entry.

Versione 17.21.0 (08/06/2024)

  • Commit 2ecd8
    Funzionalità
    Vulnerability list overviews with EPSS scores show a tooltip with the associated EPSS percentile value.

  • Commit 2ecd8
    Funzionalità
    Vulnerability list overviews with revoked CVE identifiers show a tooltip with the reasoning.

Versione 17.20.1 (06/06/2024)

Versione 17.20.0 (03/06/2024)

Versione 17.19.3 (01/06/2024)

  • Commit 99084
    Ottimizzazione
    Performance optimization of database queries for vulnerability entries.

Versione 17.19.2 (28/05/2024)

  • Commit a51a7
    Ottimizzazione
    Optimized the language menu view to make it better readable.

Versione 17.19.1 (27/05/2024)

  • Commit cdf1b
    Ottimizzazione
    Commit histories of vulnerability entries flag not accepted commits and reverted commits differently.

Versione 17.19.0 (26/05/2024)

Versione 17.18.2 (18/05/2024)

  • Commit ff750
    Ottimizzazione
    Behavior of vulnerability submits is shown in all user profiles of community member that have made at least one vulnerability submission.

Versione 17.18.1 (15/05/2024)

  • Commit 8644a
    Ottimizzazione
    Layout optimization of the relate table view for vulnerability entries.

Versione 17.18.0 (14/05/2024)

  • Commit 5c336
    Funzionalità
    Introduction of the relate view for vulnerability entries which shows associated vulnerabilities based on affected elements.

Versione 17.17.4 (13/05/2024)

  • Commit debd2
    Ottimizzazione
    Vulnerability entries show other associated and similar entries much better.

Versione 17.17.3 (12/05/2024)

  • Commit 6e778
    Ottimizzazione
    Updating all references to align with the new structure of the upcoming CNA Rules 4.0.

Versione 17.17.2 (10/05/2024)

  • Commit 66367
    Ottimizzazione
    Completing version data for known products based on historical data is improved regarding quality and performance.

Versione 17.17.1 (08/05/2024)

  • Commit 8d986
    Ottimizzazione
    Performance improvement of historical version analysis provides a better user experience when accessing vulnerability enrtries.

Versione 17.17.0 (07/05/2024)

  • Commit c8039
    Funzionalità
    Vulnerability entries contain the cache identifier to better associate activities to user groups.

Versione 17.16.2 (05/05/2024)

  • Commit f65a0
    Ottimizzazione
    Vulnerability submission entries link better to the associated vulnerability entry.

  • Commit f65a0
    Ottimizzazione
    Vulnerability submissions link to the current process step as explained in the Knowledge Base.

Versione 17.16.1 (29/04/2024)

  • Commit 6c2e6
    Ottimizzazione
    Richiesta cliente
    The CPE list is automcompleted based on historical data if a countermeasure version is known but affected versions are unknown.

Versione 17.16.0 (27/04/2024)

  • Commit 79b0d
    Funzionalità
    Approved vulnerability submits are also published within a new RSS feed to make analysis of new vulnerability entries much easier.

Versione 17.15.1 (25/04/2024)

  • Commit 05482
    Correzione dei bug
    Fixed an issue where under some rare circumstances some vulnerability entries did not show the CPE strings.

Versione 17.15.0 (24/04/2024)

  • Commit 08a14
    Funzionalità
    Vulnerability entries list associated CAPEC identifierts.

Versione 17.14.0 (23/04/2024)

Versione 17.13.0 (22/04/2024)

  • Commit b56ac
    Funzionalità
    CTI views containing TTP (Tactics, Techniques, Procedures) information do also list associated CAPEC (Common Attack Pattern Enumeration and Classification) data.

Versione 17.12.0 (19/04/2024)

Versione 17.11.1 (17/04/2024)

  • Commit b9de6
    Ottimizzazione
    Within vulnerability detail views the link for CPE strings is optimized to provide better search results on NVD.

Versione 17.11.0 (14/04/2024)

  • Commit 37e20
    Funzionalità
    Some CTI list views show the EPSS percentile value to better assess exploiting risks for vulnerabilities.

  • Commit 079a3
    Ottimizzazione
    All list views containing date or time values support tooltips which show how long ago an event happened.

Versione 17.10.0 (13/04/2024)

  • Commit 13074
    Funzionalità
    All vulnerability list views associated with our work as a CVE Numbering Authority show the associated user submission to improve and simplify research capabilities.

  • Commit 12479
    Ottimizzazione
    In some vulnerability list views the columns EPSS and CTI were swapped to show CTI values as last data point.

Versione 17.9.1 (12/04/2024)

  • Commit 52022
    Correzione dei bug
    Richiesta cliente
    Fixed a rare issue where lists of versions were not created properly.

Versione 17.9.0 (09/04/2024)

Versione 17.8.1 (08/04/2024)

Versione 17.8.0 (03/04/2024)

  • Commit efec4
    Funzionalità
    Modifica API
    In API 3.62 introduced additional detail fields for CISA Known Exploited Vulnerabilities Catalog data with the structure exploit_kev_*.

Versione 17.7.1 (02/04/2024)

  • Commit e3042
    Ottimizzazione
    Richiesta cliente
    Availability of CPE for vulnerabilities is drastically improved as they are compiled based on historical data and different sources as well.

Versione 17.7.0 (01/04/2024)

Versione 17.6.4 (31/03/2024)

  • Commit 6c8e5
    Ottimizzazione
    Performance improvement of updates of the internal EPSS data storage.

Versione 17.6.3 (30/03/2024)

Versione 17.6.2 (29/03/2024)

Versione 17.6.1 (28/03/2024)

  • Commit 223de
    Ottimizzazione
    Disabled delayed caching for certain views to provide better data in real-time.

Versione 17.6.0 (26/03/2024)

  • Commit 1003a
    Funzionalità
    Richiesta cliente
    It is possible to see all successfully processed vulnerability submissions. This raw data helps to get a better understanding of the structure of a security issue.

  • Commit b415c
    Funzionalità
    Vulnerability entries that are based on a submission by a VulDB community user list the associated submissions.

Versione 17.5.1 (25/03/2024)

Versione 17.5.0 (23/03/2024)

Versione 17.4.0 (21/03/2024)

  • Commit 9dc56
    Funzionalità
    Modifica API
    API 3.60 introduced additional detail fields for CVSS data: _basevector and _tempvector for all, _baseseverity and _tempseverity for CVSSv2 and CVSSv3, _bseverity and _btseverity for CVSSv4.

Versione 17.3.1 (20/03/2024)

Versione 17.3.0 (19/03/2024)

Versione 17.2.0 (18/03/2024)

  • Commit b7147
    Funzionalità
    CVSSv4 scores in vulnerability entries are clickable to learn more about the generation of such scores.

  • Commit b7147
    Funzionalità
    CVSSv4 scores do also show the reliability level of the scoring assignment like we already do for CVSSv3 scores.

Versione 17.1.0 (17/03/2024)

  • Commit 026ac
    Funzionalità
    Richiesta cliente
    Dedicated view for CVSSv4 scores is available. All entries in our database do support CVSS-B and CVSS-BT scores.

Versione 17.0.0 (16/03/2024)

  • Commit 357ce
    Funzionalità
    Richiesta cliente
    Vulnerability entries display CVSSv4 scores (CVSS-B as Base and CVSS-BT as Temp). The main CVSS scores remain based on CVSSv3 until CVSSv4 is well-accepted in the industry.

Versione 16.30.6 (23/02/2024)

  • Commit 49ba9
    Ottimizzazione
    CTI data shown for vulnerability entries provides better identification of predictive and verified indicators.

Versione 16.30.5 (19/02/2024)

  • Commit c912d
    Ottimizzazione
    Modifica API
    Richiesta cliente
    Strong performance improvement of CTI data requests within the Vulnerability API and the CTI API in general.

Versione 16.30.4 (18/02/2024)

  • Commit f694c
    Ottimizzazione
    Vulnerability entries that show CTI data will list countries with their proper name.

  • Commit 20626
    Ottimizzazione
    Performance improvement if CTI data is shown in vulnerability entries.

Versione 16.30.3 (17/02/2024)

  • Commit d0970
    Ottimizzazione
    Comments of vulnerability entries awaiting moderation or being rejected show more details for the posting user.

Versione 16.30.2 (16/02/2024)

  • Commit e616d
    Ottimizzazione
    Community points for posts are added during the approval process.

Versione 16.30.1 (13/02/2024)

  • Commit 686da
    Ottimizzazione
    CVE fields during the editing of a vulnerability are protected if VulDB is the official CNA for that assignment.

Versione 16.30.0 (07/02/2024)

Versione 16.29.4 (06/02/2024)

Versione 16.29.3 (05/02/2024)

Versione 16.29.2 (03/02/2024)

  • Commit 90afb
    Ottimizzazione
    Richiesta cliente
    If a vulnerability submission gets accepted, the submitter will receive an email which does now contain the request to keep and maintain the attached sources to help others verify and investigate the issue.

Versione 16.29.1 (27/01/2024)

  • Commit daaee
    Ottimizzazione
    A new vulnerability submit which gets merged into an existing entry as a duplicate will not give community points to the submitter.

Versione 16.29.0 (26/01/2024)

  • Commit 7ddcf
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.58 the CTI responses for actors and IP addresses contain the object cve which lists all associated CVE identifiers.

Versione 16.28.4 (25/01/2024)

Versione 16.28.3 (24/01/2024)

  • Commit dbc60
    Ottimizzazione
    Vulnerability entries show researchers as human-readable listings delimited by commas.

Versione 16.28.2 (19/01/2024)

  • Commit 87dca
    Ottimizzazione
    CTI views with actor names are now considering special characters properly to support multi-language representation of source data.

Versione 16.28.1 (18/01/2024)

  • Commit afc60
    Ottimizzazione
    Improved handling of an increased amount of service requests to provide a better user experience.

Versione 16.28.0 (17/01/2024)

  • Commit a7d0e
    Funzionalità
    Richiesta cliente
    The CTI export endpoint for IP addresses lists most recent entries for the last 24 hours by default. By adding a date in the form of YYYYmmdd it is possible to request items for a specific day.

  • Commit 7f645
    Ottimizzazione
    Better identification of vulnerabilities with duplicate CVE assignments.

Versione 16.27.2 (16/01/2024)

  • Commit d65c0
    Ottimizzazione
    Richiesta cliente
    Improved version handling of vulnerable products that use release candidates (e.g. Linux Kernel).

Versione 16.27.1 (15/01/2024)

  • Commit af91b
    Ottimizzazione
    Richiesta cliente
    Improved version handling of vulnerable products that use characters as their minor version identifiers (e.g. OpenSSL).

Versione 16.27.0 (12/01/2024)

  • Commit 124a4
    Funzionalità
    CVEs that we reserve and publish as a CNA distinguish between identifier (finder), submitter (reporter), and commiter (analyst).

Versione 16.26.0 (26/12/2023)

  • Commit c138a
    Funzionalità
    Vulnerability commits that were rejected or reverted show an indicator within the commit history for better identification.

Versione 16.25.1 (08/12/2023)

  • Commit a86ac
    Ottimizzazione
    Performance improvement of internal HTTP processing to handle requests more efficient and to deliver results faster.

Versione 16.25.0 (18/11/2023)

Versione 16.24.7 (17/11/2023)

Versione 16.24.6 (09/11/2023)

  • Commit fdcd0
    Ottimizzazione
    The user menu shows more items to provide better accessibility.

Versione 16.24.5 (06/11/2023)

  • Commit 47d40
    Ottimizzazione
    Upgrade of the database engine to provide better performance and ressource management.

Versione 16.24.4 (30/10/2023)

  • Commit 9d609
    Correzione dei bug
    Fixed an issue where certain CTI queries for hostnames were not executed in time.

Versione 16.24.3 (27/10/2023)

Versione 16.24.2 (26/10/2023)

Versione 16.24.1 (21/10/2023)

Versione 16.24.0 (14/10/2023)

  • Commit 1c51a
    Funzionalità
    Richiesta cliente
    Users with old passwords are warned that their passwords are going to expire. They are encouraged to define a new password.

  • Commit d843d
    Funzionalità
    Old passwords expire and require a password reset via email to enforce a high level of security.

Versione 16.23.2 (12/10/2023)

  • Commit c03c5
    Ottimizzazione
    Better handling of special characters in vulnerability titles to provide improved readability.

Versione 16.23.1 (11/10/2023)

Versione 16.23.0 (04/10/2023)

  • Commit c7f4e
    Funzionalità
    Vulnerability entries show a dedicated list of affected version numbers as well.

Versione 16.22.10 (23/09/2023)

  • Commit e7d66
    Ottimizzazione
    Better and faster processing of mail alerts to keep users up-to-date about their affected products.

Versione 16.22.9 (20/09/2023)

  • Commit 2b9d4
    Ottimizzazione
    Improvement of flooding and denial of service protection to guarantee an even more reliable service.

Versione 16.22.8 (17/09/2023)

  • Commit a91bf
    Ottimizzazione
    The fields software_website_vendor and software_website_product are now auto-completed much better to provide improved data quality for less popular entries.

Versione 16.22.7 (15/09/2023)

  • Commit eb2df
    Correzione dei bug
    Richiesta cliente
    Fixed an issue where duplicates in CPE lists were creating odd JSON responses.

Versione 16.22.6 (31/08/2023)

  • Commit 311c6
    Correzione dei bug
    Richiesta cliente
    Fixed an issue where exported CPE lists (JSON) were shown as objects instead of arrays. Reported by Dave Thornley.

Versione 16.22.5 (29/08/2023)

  • Commit 914ca
    Ottimizzazione
    Improved handling of malicious requests to guarantee availability and responsiveness for our customers.

Versione 16.22.4 (09/08/2023)

  • Commit 1e7dc
    Correzione dei bug
    Sums and average data of yearly views were not calculated correctly if there was a month with zero data.

Versione 16.22.3 (03/08/2023)

  • Commit b7490
    Ottimizzazione
    Vulnerability data storage of source_nessus_type is much more efficient which increases performance as well.

Versione 16.22.2 (02/08/2023)

  • Commit 65890
    Ottimizzazione
    Better handling of obsolete links to discontinued vulnerability sources.

Versione 16.22.1 (01/08/2023)

  • Commit 4423b
    Ottimizzazione
    Vulnerability data storage of source_vulnerabilitycenter_severity is much more efficient which increases performance as well.

Versione 16.22.0 (31/07/2023)

  • Commit 09088
    Funzionalità
    Richiesta cliente
    Changes to the personal filter are now considered critical and as such they will inform the user about the edit via email.

Versione 16.21.7 (30/07/2023)

  • Commit d6b1e
    Ottimizzazione
    Vulnerability data storage of source_nessus_risk and source_secunia_risk is much more efficient which increases performance as well.

Versione 16.21.6 (29/07/2023)

Versione 16.21.5 (26/07/2023)

  • Commit b552b
    Correzione dei bug
    In CTI views the list of references was not revealed entirely even if the user had a proper license.

Versione 16.21.4 (24/07/2023)

Versione 16.21.3 (19/07/2023)

  • Commit 707b0
    Ottimizzazione
    Better IP address association for verified IOC (Indicators of Compromise). This increases the accuracy of CTI analysis of vulnerability entries.

Versione 16.21.2 (17/07/2023)

Versione 16.21.1 (16/07/2023)

Versione 16.21.0 (05/07/2023)

  • Commit 0c32c
    Funzionalità
    Sometimes CNAs assign duplicate CVEs for the same vulnerability. We do now show such duplicates to help to better understand connections between CVE entries.

Versione 16.20.3 (27/06/2023)

  • Commit 6ee4c
    Ottimizzazione
    Better identification of vulnerability entries which affect products that are end-of-life. Version-specific association is now possible.

Versione 16.20.2 (26/06/2023)

  • Commit bb031
    Ottimizzazione
    Improvement of CTI analysis for vulnerabilities that spike within short timeframes (hours and days). The data is loaded, analyzed, and presented much faster.

Versione 16.21.2 (17/07/2023)

  • Commit 39c9a
    Ottimizzazione
    Optimization of monoblock capabilities to handle vulnerability data.

Versione 16.20.0 (13/06/2023)

Versione 16.19.0 (10/06/2023)

Versione 16.18.1 (03/06/2023)

  • Commit e3b45
    Ottimizzazione
    Detection of commit collisions during editing of vulnerability data. Entries will be locked until an edit has been finalized.

Versione 16.18.0 (26/05/2023)

Versione 16.17.2 (23/05/2023)

  • Commit b7248
    Ottimizzazione
    Improved use of vulnerability names for better data matching on the web service.

Versione 16.17.1 (17/05/2023)

  • Commit 6f54e
    Ottimizzazione
    Upgraded database servers to improve performance during peak times.

Versione 16.17.0 (13/05/2023)

  • Commit b7e2d
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 2.37/3.57 introduction of the field source_cve_duplicate to indicate whether a duplicate CVE has been assigned to an entry.

Versione 16.16.4 (11/05/2023)

  • Commit 0fa94
    Correzione dei bug
    Fixed a minor view issue with Indicator of Compromise (IOC) tables that list IP ranges.

Versione 16.16.3 (10/05/2023)

  • Commit 8f483
    Correzione dei bug
    Fixed an issue where sync of researcher data with the CVE stream did not happen properly under certain circumstances.

Versione 16.16.2 (05/05/2023)

Versione 16.16.1 (03/05/2023)

  • Commit bf769
    Ottimizzazione
    Improved intelligent matching of vendor and product definitions in all search queries, especially in multi-line fields.

Versione 16.16.0 (29/04/2023)

  • Commit eaaf4
    Funzionalità
    Due to our intensive involvement as a CNA (CVE Numbering Authority) we have extended the main menu to access CVE details that are maintained by us very quickly.

Versione 16.15.1 (22/04/2023)

  • Commit e45ea
    Ottimizzazione
    The discussion possibility for vulnerabilities mentions that they are intended for public exchange and not fort support queries. Use the contact form instead to approach our support team.

Versione 16.15.0 (21/04/2023)

Versione 16.14.1 (18/04/2023)

  • Commit f5a6c
    Ottimizzazione
    Improvement of the field advisory_type to indicate where a vulnerability disclosure is originating from.

  • Commit 9cf62
    Correzione dei bug
    Modifica API
    Fixed an issue where under certain circumstances the field advisory_type was not shown in an API response.

Versione 16.14.0 (17/04/2023)

  • Commit a040a
    Funzionalità
    Added the setting to enable count information for certain views in the site title. This helps to determine how many items are listed on a page.

  • Commit 2ef13
    Correzione dei bug
    Fixed an issue in the overview of personal posts which did not show the name of a vulnerability entry properly.

Versione 16.13.2 (16/04/2023)

  • Commit 9a6a2
    Ottimizzazione
    Changed the HTML title of vulnerability entries to use a colon instead of a pipe symbol as delimiter. Please update your parsers if you are relying on this data structure.

Versione 16.13.1 (15/04/2023)

Versione 16.13.0 (09/04/2023)

Versione 16.12.1 (02/04/2023)

Versione 16.12.0 (01/04/2023)

  • Commit 67624
    Funzionalità
    Modifica API
    In API 3.56 sources that are not available anymore are shown with the unavailable tag which contains the reason. This helps to determine defunct companies and dead links.

  • Commit b5b18
    Funzionalità
    Vulnerability entries indicate broken external links to help determine defunct companies and dead links.

Versione 16.11.1 (31/03/2023)

Versione 16.11.0 (23/03/2023)

  • Commit 7a109
    Funzionalità
    Modifica API
    In API 2.36/3.55 introduction of the field source_cve_duplicateof to indicate CVE assignments which are potential duplicates of existing CVE assignments.

Versione 16.10.3 (17/03/2023)

Versione 16.10.2 (16/03/2023)

  • Commit 7b3a5
    Ottimizzazione
    Improved accuracy of indicators for vulnerability entries of managed serviced that cannot get a CVE according to current CAN rules.

Versione 16.10.1 (13/03/2023)

  • Commit ab8a8
    Ottimizzazione
    Richiesta cliente
    Handling of CPE values of vulnerabilities was optimized to provide better accuracy of data.

Versione 16.10.0 (11/03/2023)

  • Commit c639d
    Funzionalità
    Richiesta cliente
    Comments of vulnerability entries will show official replies by our community team to help visitors to understand details and inner workings of our processes.

  • Commit 13ff7
    Funzionalità
    Hovering over the time indicator of comments will show the exact time of the submission.

Versione 16.9.3 (09/03/2023)

  • Commit f3d56
    Ottimizzazione
    Performance improvement of EPSS (Exploit Prediction Scoring System) value handling.

Versione 16.9.2 (19/02/2023)

Versione 16.9.1 (16/02/2023)

  • Commit 636cc
    Ottimizzazione
    Much better performance of the service by optimizing the partitioning of data. Especially if there are many tasks handled at the same time.

Versione 16.9.0 (15/02/2023)

Versione 16.8.0 (13/02/2023)

  • Commit 8a926
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.54 the field software_managedservice is introduced to indicate products that are managed services and therefore not maintained by users.

Versione 16.7.0 (11/02/2023)

  • Commit 0ceeb
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 1.17/2.35/3.53 the field software_rollingrelease is introduced to indicate whether the product is not using version numbering but establishing a rolling release instead.

  • Commit 27319
    Funzionalità
    Modifica API
    The changelog does now flag changes to the API as such. This helps customers to identify changes that might require their attention regarding automated processing of data.

Versione 16.6.12 (03/02/2023)

  • Commit 1c4ca
    Ottimizzazione
    Modifica API
    Richiesta cliente
    Invalid URL requests to the API are not always redirected to prevent inefficient usage of the API.

Versione 16.6.11 (28/01/2023)

  • Commit 9e571
    Correzione dei bug
    Modifica API
    Richiesta cliente
    Fixed an issue in the API where request for entry_timstampe_change for older entries did not return the desired amount of items.

Versione 16.6.10 (23/01/2023)

Versione 16.6.9 (22/01/2023)

  • Commit 05f5c
    Ottimizzazione
    Improvement of the Google Hacking view which provides a wide variety of Google Dorks.

  • Commit 32026
    Ottimizzazione
    Faster and smarter processing of cache data which improves the overall performance of the service drastically.

Versione 16.6.8 (21/01/2023)

  • Commit 830d3
    Ottimizzazione
    Invalid URL requests to the service are usually redirected, to point the user to the correct URL. This is now approached more consistantly.

Versione 16.6.7 (20/01/2023)

  • Commit e6e23
    Ottimizzazione
    Performance optimization to increase responsibility for a wide variety of views.

Versione 16.6.6 (12/01/2023)

  • Commit 6c542
    Ottimizzazione
    Improvement of search by purl statements. Better matching of products and versions possible.

Versione 16.6.5 (11/01/2023)

  • Commit 7c9bd
    Ottimizzazione
    Better indicator for disputed vulnerability entries that are handled by our CNA team.

Versione 16.6.4 (10/01/2023)

Versione 16.6.3 (09/01/2023)

  • Commit 9b662
    Ottimizzazione
    Better handling of user sessions, especially if there is a lot of activities on the service.

Versione 16.6.2 (07/01/2023)

Versione 16.6.1 (04/01/2023)

Versione 16.6.0 (03/01/2023)

Versione 16.5.4 (02/01/2023)

  • Commit 9a5e1
    Ottimizzazione
    Extended display of multiline quotes of vulnerabilities for software, advisories, vulnerabilities, exploits, and countermeasures.

Versione 16.5.3 (21/12/2022)

  • Commit 89dfe
    Correzione dei bug
    In very rare cases the derivative identification of vulnerability classes was not working.

Versione 16.5.2 (18/12/2022)

Versione 16.5.1 (17/12/2022)

Versione 16.5.0 (16/12/2022)

Versione 16.4.6 (12/12/2022)

Versione 16.4.5 (10/12/2022)

  • Commit 47588
    Ottimizzazione
    Modifica API
    More performance improvement of the API for timeranges like advisory_date_start, entry_timestamp_create_start, entry_timestamp_change_start, and entry_timestamp_all_start.

Versione 16.4.4 (08/12/2022)

  • Commit fc381
    Ottimizzazione
    Modifica API
    Richiesta cliente
    In API 3.52 performance optimization of certain queries requesting timeranges like advisory_date_start, entry_timestamp_create_start, entry_timestamp_change_start, and entry_timestamp_all_start.

Versione 16.4.3 (07/12/2022)

  • Commit dba58
    Ottimizzazione
    Improved handling of duplicate vulnerability entries. These are processed much faster, flagged as duplicates or even hidden under certain circumstances.

Versione 16.4.2 (05/12/2022)

Versione 16.4.1 (04/12/2022)

Versione 16.4.0 (03/12/2022)

Versione 16.3.4 (26/11/2022)

  • Commit dae79
    Ottimizzazione
    Improved extended CPE dictionary generation. By dropping attributes that are not necessary the file generation becomes faster and the file becomes smaller.

Versione 16.3.3 (25/11/2022)

  • Commit 726b4
    Ottimizzazione
    Hardware upgrade for better memory and processing handling.

Versione 16.3.2 (22/11/2022)

  • Commit 21d9b
    Ottimizzazione
    Improved coverage and flagging of software products known to be end-of-life.

Versione 16.3.1 (21/11/2022)

  • Commit 23f71
    Ottimizzazione
    Better handling of vulnerability entries flagges as false-positives or revoked data parts. Summaries reflect the status better and overviews tag them more prominent.

Versione 16.3.0 (18/11/2022)

  • Commit 085b7
    Funzionalità
    Additional links to the internal knowledge base and external sources available in vulnerability summaries and descriptions. This makes research a lot faster, easier, and more comfortable.

Versione 16.2.0 (08/11/2022)

  • Commit ba2e4
    Funzionalità
    Modifica API
    Richiesta cliente
    Introduction of the field software_support_availability to identify products which are end-of-life. These are shown in vulnerability entries and since API 3.51.

Versione 16.1.1 (07/11/2022)

  • Commit 21a87
    Correzione dei bug
    Richiesta cliente
    Fixed a bug where some searches for CPE strings were not working properly.

Versione 16.1.0 (31/10/2022)

  • Commit 62218
    Funzionalità
    Modifica API
    Richiesta cliente
    Introduction of the fields software_license_type and software_license_name to better understand licensing and support coverage of an affected product. These are shown in vulnerability entries and since API 3.50.

Versione 16.0.3 (20/10/2022)

Versione 16.0.2 (19/10/2022)

  • Commit df7bf
    Correzione dei bug
    Vulnerability entries without the definition of software_version but with a definition of countermeasure_upgrade_version will show this information properly in the document title.

Versione 16.0.1 (18/10/2022)

  • Commit f18ee
    Ottimizzazione
    Vulnerability entries list associated changesets with date and count of changes. This makes it easier to understand the lifecycle of an entry.

Versione 16.0.0 (15/10/2022)

  • Commit 30f76
    Funzionalità
    Richiesta cliente
    The vulnerability data team is taking advantage of the new source monitoring modules. An advanced artificial intelligence enumerates different sources to determine new vulnerabilities or additional details. If such are found, they are added to the submission queue and will be reviewed by the moderation team. This will increase coverage, processing speed, and data quality of vulnerability entries drastically.

Versione 15.5.6 (10/10/2022)

Versione 15.5.5 (07/10/2022)

  • Commit fb472
    Ottimizzazione
    Optimization of the user menu as shown on devices with smaller screens.

Versione 15.5.4 (06/10/2022)

  • Commit 78b19
    Ottimizzazione
    Sites showing search results with a new search form will set the focus on the form field for faster processing of new search queries.

Versione 15.5.3 (30/09/2022)

  • Commit 53399
    Correzione dei bug
    Modifica API
    Richiesta cliente
    In API 3.48 fixed an issue for the field parameter where only old notations of vulnerability_cvss3_basevector_vuldb and vulnerability_cvss3_tempvector_vuldb instead also of vulnerability_cvss3_vuldb_basevector and vulnerability_cvss3_vuldb_tempvector were supported.

  • Commit 4995f
    Ottimizzazione
    Modifica API
    In API 1.16/2.34/3.49 a more graceful handling of too many definitions in the fields parameter got established. If there are too many fields defined, only the first ones will be used and the others silently ignored.

Versione 15.5.2 (28/09/2022)

Versione 15.5.1 (25/09/2022)

Versione 15.5.0 (23/09/2022)

Versione 15.4.1 (20/09/2022)

  • Commit c9710
    Ottimizzazione
    Improved the declaration of impacts within description and summaries of vulnerabilities.

Versione 15.4.0 (19/09/2022)

Versione 15.3.11 (18/09/2022)

Versione 15.3.10 (15/09/2022)

  • Commit 8028c
    Ottimizzazione
    Better memory handling of the service to improve responsiveness of queries and views.

Versione 15.3.9 (14/09/2022)

Versione 15.3.8 (11/09/2022)

  • Commit b4aec
    Correzione dei bug
    Fixed an issue where empty CWE data was shown in vulnerability entries. This was just an interface error on the web frontend.

Versione 15.3.7 (08/09/2022)

  • Commit e5ba5
    Correzione dei bug
    Richiesta cliente
    Fixed an issue with the RSS feeds where certain special characters in the title element lead to XML validation errors. Reported by Calvin Mende.

Versione 15.3.6 (07/09/2022)

Versione 15.3.5 (06/09/2022)

  • Commit 144c0
    Correzione dei bug
    Modifica API
    Richiesta cliente
    Fixed an issue where certain search requests via web and API were not executed at all. Reported by user showmax

Versione 15.3.4 (05/09/2022)

  • Commit 61068
    Ottimizzazione
    Another performance improvement of search queries. Lookups for functions and arguments are now multiple times faster as well.

Versione 15.3.3 (02/09/2022)

  • Commit 6ae56
    Ottimizzazione
    Richiesta cliente
    Performance improvement of search queries. Especially queries for URLs are now multiple times faster.

Versione 15.3.2 (30/08/2022)

Versione 15.3.1 (29/08/2022)

Versione 15.3.0 (27/08/2022)

  • Commit 13bc6
    Funzionalità
    Richiesta cliente
    Vulnerability entries show multiple CWE if available. In this case they are listed in descending order of accuracy.

Versione 15.2.3 (19/08/2022)

  • Commit 87315
    Ottimizzazione
    Vulnerability entries flagged as false-positive are shown with this tag in lists (e.g. overview, search).

Versione 15.2.2 (17/08/2022)

  • Commit 4bf82
    Ottimizzazione
    Another improvement of entropy of the CSRF token generation for critical forms.

Versione 15.2.1 (14/08/2022)

  • Commit 6d5fa
    Ottimizzazione
    Modifica API
    In API 3.46 he virtual fields advisory_reportconfidence, exploit_exploitability, countermeasure_remediationlevel provide better data accurary to improve data quality.

Versione 15.2.0 (11/08/2022)

  • Commit c5cd8
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.45 the Vulnerability API is able to show additional CTI information by enabling cti=1 within requests. This is possible for free accounts, commercial accounts and enterprise accounts with the CTI option enabled. The real-time availability of the data introduces some increased round trip times for such queries.

Versione 15.1.2 (09/08/2022)

Versione 15.1.1 (12/07/2022)

  • Commit b168a
    Ottimizzazione
    Fixed an issue where vulnerabilities with product versions ending with .x wildcards were handled inapprorpiately.

Versione 15.1.0 (08/07/2022)

  • Commit 5134e
    Funzionalità
    Richiesta cliente
    Certain views contain a column listing the latest EPSS (Exploit Prediction Scoring System) values for vulnerabilities.

Versione 15.0.0 (05/07/2022)

  • Commit c13ba
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.44 introduced the CTI API which supports the request types ipaddr, actor, and events. API credit consumption is slightly different than within the Vulnerability API.

Versione 14.27.1 (29/06/2022)

  • Commit 093a3
    Ottimizzazione
    Listing of important identifiers of vulnerabilities were optimized to provide better searchability.

Versione 14.27.0 (24/06/2022)

  • Commit ab1f7
    Funzionalità
    English vulnerability descriptions explain the vulnerability classes according to the CWE definitions.

Versione 14.26.6 (23/06/2022)

  • Commit 0761d
    Ottimizzazione
    Improved the support for less popular CWE classes to provide better identification capabilities of exotic vulnerabilities.

Versione 14.26.5 (16/06/2022)

  • Commit 4a400
    Ottimizzazione
    Faster synchronization of EPSS (Exploit Prediction Scoring System) data to increase confidence of predictions.

Versione 14.26.4 (11/06/2022)

  • Commit e54df
    Ottimizzazione
    Improved version listing for releases using letters in version numbering (e.g. OpenSSL).

Versione 14.26.3 (10/06/2022)

  • Commit 986a8
    Ottimizzazione
    Better accuracy of product requests in the Monoblock.

Versione 14.26.2 (07/06/2022)

Versione 14.26.1 (02/06/2022)

Versione 14.26.0 (01/06/2022)

  • Commit 6b2ff
    Funzionalità
    Richiesta cliente
    Introduction of the Exploit Prediction Scoring System which is able to predict chances of successful exploitation of vulnerabilities. Official EPSS data is kept in sync and shown in the vulnerability details.

  • Commit 51aab
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 2.32/3.43 introduced the fields exploit_epss_score and exploit_epss_percentile which provide live data of EPSS (Exploit Prediction Scoring System) to predict chances of successful exploitation.

Versione 14.25.10 (31/05/2022)

  • Commit 6436a
    Correzione dei bug
    Fixed an issue where certain links were not correctly used in the vulnerability summaries for authenticated users. Reported by Andrea Hauser

Versione 14.25.9 (25/05/2022)

Versione 14.25.8 (23/05/2022)

  • Commit 01046
    Correzione dei bug
    Modifica API
    Richiesta cliente
    In API 3.41 accessing the field software_cpe23 is possible again. Other major releases of the API were not affected. Reported by Stefan Sander.

Versione 14.25.7 (15/05/2022)

  • Commit ed7b9
    Correzione dei bug
    Sending certain host requests introduced the possibility for unexpected redirects. Reported by Pankaj lakshkar

Versione 14.25.6 (12/05/2022)

Versione 14.25.5 (11/05/2022)

Versione 14.25.4 (10/05/2022)

  • Commit 0098a
    Correzione dei bug
    Richiesta cliente
    Fixed an error message which was shown under certain circumstances for recent entries.

Versione 14.25.3 (06/05/2022)

  • Commit e8a31
    Ottimizzazione
    The latest videos shown on the frontpage are updated faster to provide access to the latest entries.

  • Commit dfe4e
    Correzione dei bug
    Modifica API
    Richiesta cliente
    In API 1.14/2.31/3.41 fixed an issue where requests with entry_timestamp_create did include entries that matched entry_timestamp_change instead. Reported by user peeradon.no

Versione 14.25.2 (04/05/2022)

  • Commit 52eb6
    Ottimizzazione
    The personal view of My Alert shows matching entries ranging back 90 days.

Versione 14.25.1 (03/05/2022)

Versione 14.25.0 (02/05/2022)

Versione 14.24.1 (29/04/2022)

Versione 14.24.0 (27/04/2022)

  • Commit 91fce
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.40 using the parameter format=csv makes it possible to output vulnerability data as CSV. Not all request types are supported, not all fields are included, and API header information is not part of the output.

Versione 14.23.1 (25/04/2022)

  • Commit c49ec
    Ottimizzazione
    Improved the actor and compaign association of the CTI module. Interlinking data is better and provides results with increased accuracy.

  • Commit 30e2c
    Ottimizzazione
    CTI indicators shown are either verified or predictive and shown with the associated tag.

Versione 14.23.0 (24/04/2022)

Versione 14.22.0 (21/04/2022)

Versione 14.21.2 (20/04/2022)

  • Commit 1ca57
    Ottimizzazione
    Richiesta cliente
    Alerts sent via email use asterisks to prevent Microsoft Outlook from deleting newlines.

  • Commit 1ca57
    Ottimizzazione
    Alerts sent via email refer to entries with the new format VDB-1234 instead of the old format ID 1234.

  • Commit 00701
    Ottimizzazione
    Switched symbols used in the community activity stream from emoji to a dedicated font to provide better reliability on different platforms.

Versione 14.21.1 (19/04/2022)

  • Commit 90187
    Ottimizzazione
    Certain elements on the frontpage use additional icons to visualize data sources.

Versione 14.21.0 (16/04/2022)

Versione 14.20.9 (14/04/2022)

Versione 14.20.8 (13/04/2022)

Versione 14.20.7 (11/04/2022)

  • Commit 766de
    Ottimizzazione
    Performance optimization of certain filtered views used by the CNA team.

  • Commit 45617
    Correzione dei bug
    Richiesta cliente
    The autocomplete feature for versioning of certain products was not able to finalize the output. Reported by user lywand

Versione 14.20.6 (09/04/2022)

Versione 14.20.5 (08/04/2022)

  • Commit 14036
    Ottimizzazione
    Richiesta cliente
    Registration does allow mail addresses with rather long top-level-domains.

Versione 14.20.4 (01/04/2022)

  • Commit 8e9e6
    Ottimizzazione
    The overview of monitored actors displays the number of collected IOC (Indicators of Compromise), TTP (Tactics, Techniques, Procedures), IOA (Indicators of Attack), campaigns and external references.

Versione 14.20.3 (29/03/2022)

  • Commit 45456
    Ottimizzazione
    New overview of actors shows the amount of available indicators and used sources. The list is also sortable for better viewing.

Versione 14.20.2 (28/03/2022)

  • Commit fdbeb
    Ottimizzazione
    Update of icons used in menus and on other parts of the service.

Versione 14.20.1 (26/03/2022)

Versione 14.20.0 (21/03/2022)

Versione 14.19.0 (20/03/2022)

Versione 14.18.4 (19/03/2022)

Versione 14.18.3 (15/03/2022)

  • Commit c2804
    Ottimizzazione
    Scrollbars of elements provide better styling to improve user experience, especially on smaller screens.

Versione 14.18.2 (14/03/2022)

Versione 14.18.1 (10/03/2022)

  • Commit 25bad
    Ottimizzazione
    Improved layout of the changelog items to provide better visibility.

  • Commit ed2be
    Ottimizzazione
    Timelines in vulnerability entries do always link to countermeasures if patch or upgrade URLs are known.

  • Commit 91b01
    Correzione dei bug
    Some links to countermeasures were clickable but still threw a 404 even though the requested resources were available. Reported by user mael

Versione 14.18.0 (09/03/2022)

  • Commit 72d69
    Funzionalità
    Items listed in legends of charts are clickable to allow quick drilldowns.

  • Commit a7e66
    Correzione dei bug
    Certain pie charts did not reflect the correct number of known matches.

Versione 14.17.5 (07/03/2022)

  • Commit c162c
    Ottimizzazione
    A better layout helps vulnerability moderators to identify priority entries in the submission queue.

Versione 14.17.4 (01/03/2022)

  • Commit 23a47
    Correzione dei bug
    In certain views the generation of timeline graphs was not possible if the advisory_date of an entry has been changed to another year.

Versione 14.17.3 (28/02/2022)

Versione 14.17.2 (27/02/2022)

  • Commit c8b23
    Ottimizzazione
    Performance optimization of list views which contain CVSSv3 Meta Scores.

  • Commit 48019
    Correzione dei bug
    Under certain circumstances an existing remediation level based on the field countermeasure_remediationlevel was not shown correctly.

Versione 14.17.1 (25/02/2022)

  • Commit 4882d
    Ottimizzazione
    Icon text in the submenu allows hyphenation to optimize the view on narrow screens.

  • Commit 60d49
    Ottimizzazione
    Charts for timespans are optimized to zoom into the timeframe whenever possible and useful.

Versione 14.17.0 (23/02/2022)

  • Commit f8d99
    Funzionalità
    The applicable copyright license is shown in the footer of the page.

Versione 14.16.1 (22/02/2022)

  • Commit c6483
    Ottimizzazione
    Table listings with narrow columns provide better spacing to fit the content.

Versione 14.16.0 (21/02/2022)

  • Commit 93389
    Funzionalità
    Richiesta cliente
    The CTI views do allow for drilldown of IP addresses as IoC (Indicator of Compromise).

  • Commit 9e1e2
    Correzione dei bug
    Richiesta cliente
    Listing of version numbers ranging back to 0.x might have contained version 0.0. This is usually wrong and got fixed. Thanks to Cheek Yang of xFusion Digital Technologies for making us aware of this issue.

Versione 14.15.1 (20/02/2022)

  • Commit 24c78
    Ottimizzazione
    Certain CTI views which have complex hostnames as IoC (Indicator of Compromise) allow much faster analysis.

Versione 14.15.0 (18/02/2022)

  • Commit 4da51
    Funzionalità
    Richiesta cliente
    Custom CTI analysis contains IOC (Indicator of Compromise), TTP (Tactics, Techniques, Procedures) and IOA (Indicator of Attack) as well.

Versione 14.14.0 (17/02/2022)

  • Commit 52552
    Funzionalità
    Richiesta cliente
    The CTI view for countries lists popular TTP (Tactics, Techniques, Procedures) and IOA (Indicator of Attack) as well.

Versione 14.13.4 (09/02/2022)

  • Commit 291bf
    Ottimizzazione
    Search requests for CVE identifiers detects mismatching dashes (e.g. en and em) and corrects them automatically.

Versione 14.13.3 (08/02/2022)

Versione 14.13.2 (31/01/2022)

  • Commit b0bff
    Ottimizzazione
    Activity charts provide data with better accuracy.

  • Commit b0bff
    Ottimizzazione
    Activity charts have a better performance during generation.

Versione 14.13.1 (30/01/2022)

  • Commit f1aa5
    Ottimizzazione
    Performance optimization of APT actor association charts during generation.

Versione 14.13.0 (28/01/2022)

Versione 14.12.1 (27/01/2022)

  • Commit 37a7c
    Ottimizzazione
    Modifica API
    In API 1.13/2.29/3.37 provoking 405 Unknown request type errors again is only possible after a few minutes. This prevents flooding the API access log and prevents misconfigured clients from exhausting the API credits quickly.

Versione 14.12.0 (24/01/2022)

Versione 14.11.8 (21/01/2022)

  • Commit b1aa4
    Ottimizzazione
    Improvement of URL validation during moderation to prevent incorrect values.

Versione 14.11.7 (15/01/2022)

  • Commit 9fa88
    Ottimizzazione
    Improved security of SPF and DMARC. Recommendations were submitted by Nikhil Rane.

  • Commit 9fa88
    Ottimizzazione
    Improved security and usability of signup procedure and passwort recovery procedure. Recommendations were submitted by Nikhil Rane.

Versione 14.11.6 (14/01/2022)

  • Commit 68c68
    Ottimizzazione
    Layout optimization of certain forms using additional information or CAPTCHA elements.

Versione 14.11.5 (13/01/2022)

  • Commit ac2a6
    Ottimizzazione
    Performance tweaks of certain views.

Versione 14.11.4 (12/01/2022)

Versione 14.11.3 (11/01/2022)

  • Commit b59d0
    Ottimizzazione
    Performance and memory optimization of certain queries which do not need CTI data to be shown.

Versione 14.11.2 (07/01/2022)

  • Commit 9ade9
    Ottimizzazione
    Multi-threading has been optimized to decrease resource consumption and to increase performance.

  • Commit 509bb
    Ottimizzazione
    External links in the table of contents of the Knowledge Base open a new window.

Versione 14.11.1 (05/01/2022)

Versione 14.11.0 (04/01/2022)

  • Commit bfdcd
    Funzionalità
    Richiesta cliente
    It is possible to do a CTI analysis of dedicated entries to show activities, interest distribution, active actors, and indicators of compromise. This feature requires an additional CTI license.

Versione 14.10.2 (28/12/2021)

  • Commit f43dd
    Correzione dei bug
    Users hiding their profile were not able to show their own profile. This has been fixed.

Versione 14.10.1 (24/12/2021)

  • Commit 8b772
    Ottimizzazione
    Richiesta cliente
    Scrollbars on Mozilla browsers are styled or even hidden whenever useful to provide a better user experience on smaller screens.

Versione 14.10.0 (23/12/2021)

Versione 14.9.0 (22/12/2021)

Versione 14.8.1 (18/12/2021)

Versione 14.8.0 (17/12/2021)

  • Commit bb5ae
    Funzionalità
    Richiesta cliente
    Language support for Russian (ru). This includes basic parts of the web site and vulnerability details.

Versione 14.7.0 (14/12/2021)

Versione 14.6.0 (12/12/2021)

Versione 14.5.0 (11/12/2021)

Versione 14.4.1 (10/12/2021)

  • Commit 5213b
    Ottimizzazione
    Commit details show more information and link to additional resources.

  • Commit 03ef5
    Ottimizzazione
    Performance optimization of the front page which loads the vulnerability of the day much faster.

Versione 14.4.0 (09/12/2021)

  • Commit 53394
    Funzionalità
    Richiesta cliente
    All documentation files are moved into the new Knowledge Base. Old links to the documentation remain valid.

  • Commit e75bd
    Ottimizzazione
    Optimized padding of breadcrumb items provides better usability.

Versione 14.3.1 (08/12/2021)

  • Commit 9f087
    Ottimizzazione
    New multi-threading handling of expensive database queries increases the performance of many requests and views.

Versione 14.3.0 (07/12/2021)

  • Commit 0328b
    Funzionalità
    Added a breadcrumb navigation item to access higher level sections easier.

  • Commit 20ade
    Funzionalità
    Release versions in the changelog might be accessed via ID.

  • Commit ebad6
    Correzione dei bug
    The user data in the side menu are shown properly even if there are very long strings used.

Versione 14.2.0 (06/12/2021)

Versione 14.1.3 (05/12/2021)

  • Commit 6ba63
    Ottimizzazione
    Databox with vulnerability of the day uses better search box for increased accessibility.

Versione 14.1.2 (04/12/2021)

  • Commit ab33b
    Ottimizzazione
    Responsive app elements behave better on smaller rectangular screens.

  • Commit 07841
    Correzione dei bug
    All risk views show data properly under any circumstances for authenticated users.

Versione 14.1.1 (03/12/2021)

  • Commit e5209
    Ottimizzazione
    Richiesta cliente
    The layout for printing views is optimized for better user experience.

  • Commit d0822
    Ottimizzazione
    The language path for Japanese is changed from /jp/ to /ja/ to respect ISO 639-1 language two-letter conventions. Old links remain active and redirect to the new URL structure.

  • Commit fa317
    Ottimizzazione
    The user menu layout has been optimized for better readability. Especially VulDB moderators and administrators get easier access to relevant data.

Versione 14.1.0 (02/12/2021)

  • Commit e68e7
    Funzionalità
    Some chart types, especially pie charts and doughnut charts, show an additional legend to provide better visibility of data.

  • Commit 2fa71
    Ottimizzazione
    Richiesta cliente
    The responsiveness of the user menu on the side behaves better on smaller screens.

  • Commit ee455
    Ottimizzazione
    External URLs to MITRE CVE link to the new cve.org domain.

Versione 14.0.1 (01/12/2021)

Versione 14.0.0 (30/11/2021)

  • Commit bb919
    Funzionalità
    Richiesta cliente
    Relaunch of the service with a new layout and extended app capabilities.

Versione 13.41.1 (11/11/2021)

  • Commit a667c
    Ottimizzazione
    Vulnerability entries without user comments show the requested languages, even if English was the only language selected.

  • Commit 1ff69
    Ottimizzazione
    Layout of the login recommendation to comment on vulnerability entries was optimized.

Versione 13.41.0 (10/11/2021)

  • Commit 0c2ae
    Funzionalità
    Richiesta cliente
    Commercial customers using credit card as payment method are able to show their last invoices online. Invoices and receipts can be downloaded from our partner Stripe. All documents are hosted externally. VulDB does not store credit card details, invoices nor receipts.

Versione 13.40.1 (09/11/2021)

  • Commit dbc8a
    Correzione dei bug
    Modifica API
    In API 2.28/3.36 the field vulnerability_bugbounty_price is only shown if there is a bug bounty price defined.

  • Commit 5fe48
    Ottimizzazione
    Performance improvement (CPU and memory consumption) of long list views.

Versione 13.40.0 (08/11/2021)

Versione 13.39.1 (06/11/2021)

  • Commit 1c057
    Correzione dei bug
    Richiesta cliente
    Under rare circumstances a timeframe request did contain entries outside the defined timeframe. Additional validation has been introduced to prevent this effect. Reported by user guliang

Versione 13.39.0 (03/11/2021)

  • Commit 02e0b
    Funzionalità
    Richiesta cliente
    Language support for Portuguese (pt). This includes basic parts of the web site and vulnerability details.

Versione 13.38.0 (01/11/2021)

  • Commit 49840
    Funzionalità
    Richiesta cliente
    Enterprise customers are able to create a custom dashboard with individual charts and lists to maintain their professional vulnerability management.

Versione 13.37.0 (29/10/2021)

  • Commit ecf36
    Funzionalità
    External links in vulnerability entries known to be not working anymore are flagged as 404 Not Found.

  • Commit 00f47
    Ottimizzazione
    In the commit view the column Moderated is renamed to Accepted to indicate the moment a change was approved.

Versione 13.36.2 (27/10/2021)

  • Commit 6ba60
    Ottimizzazione
    Most recent entries on the frontpage are listed faster and with more details right after the creation of a new entry.

Versione 13.36.1 (26/10/2021)

  • Commit fe47a
    Ottimizzazione
    Richiesta cliente
    Overview pages with an huge number of entries are not limited anymore.

Versione 13.36.0 (25/10/2021)

Versione 13.35.1 (19/10/2021)

  • Commit fab04
    Ottimizzazione
    Optimization of summaries and descriptions in certain languages to better consider the expected vulnerability class of an entry.

Versione 13.35.0 (09/10/2021)

Versione 13.34.0 (15/09/2021)

  • Commit 153c8
    Funzionalità
    Modifica API
    In API 2.26/3.34 information about bug bounty organization vulnerability_bugbounty_organization, price vulnerability_bugbounty_price, and payout date vulnerability_bugbounty_payoutdate were introduced.

Versione 13.33.1 (13/09/2021)

Versione 13.33.0 (10/09/2021)

Versione 13.32.4 (07/09/2021)

Versione 13.32.3 (06/09/2021)

  • Commit 3c9ba
    Ottimizzazione
    Ranges between versions and up to versions are shown with even higher level of accuracy. This includes titles and summaries as well.

Versione 13.32.2 (02/09/2021)

Versione 13.32.1 (31/08/2021)

  • Commit 7ad33
    Ottimizzazione
    Hardware upgrade for better memory and processing handling.

Versione 13.32.0 (27/08/2021)

Versione 13.31.0 (26/08/2021)

Versione 13.30.1 (25/08/2021)

Versione 13.30.0 (24/08/2021)

Versione 13.29.3 (23/08/2021)

  • Commit 2d4fa
    Ottimizzazione
    Vulnerability comments in a specific language are only shown if the site is loaded in that language.

Versione 13.29.2 (22/08/2021)

  • Commit 12bbe
    Ottimizzazione
    Finalized data migration to provide much better performance.

  • Commit 363e0
    Ottimizzazione
    Performance optimization of the year views of CVSSv3, CVSSv2, and Exploits by eliminating redundant queries.

Versione 13.29.1 (21/08/2021)

  • Commit b2396
    Ottimizzazione
    Eliminated all links to SecurityFocus vulnerability database as they discontinued the service. Thank you for all your contributions to the cyber security industry!

  • Commit adec0
    Ottimizzazione
    Re-ordered the listing of external resourced within the reference tables.

  • Commit 9b464
    Ottimizzazione
    New color scheme for yearly comparison of CVSS base and temp vectors.

Versione 13.29.0 (19/08/2021)

Versione 13.28.11 (18/08/2021)

  • Commit 2f6c2
    Ottimizzazione
    Announcement banner is shown only if necessary to provide the maximum of space.

  • Commit abbea
    Ottimizzazione
    Time-only statements are now always shown depending on the selected request language.

Versione 13.28.10 (17/08/2021)

  • Commit 8ae38
    Ottimizzazione
    Vulnerability entries hide header tooltip icons as soon as the screen is too small to read them.

Versione 13.28.9 (16/08/2021)

  • Commit 51f56
    Ottimizzazione
    Faster calculation and loading of Threat Intelligence activity index chart on the frontpage.

Versione 13.28.8 (15/08/2021)

  • Commit 2b166
    Ottimizzazione
    Better performance thanks to optimized database index for several different tables.

Versione 13.28.7 (08/08/2021)

  • Commit 0fc46
    Correzione dei bug
    Fixed a rare bug on the frontpage where very recent entries are not shown with all available technical details in the title.

Versione 13.28.6 (07/08/2021)

Versione 13.28.5 (05/08/2021)

  • Commit 98081
    Ottimizzazione
    Optimized the capabilities of searching with CPE strings. Such searches are now much faster and more accurate.

Versione 13.28.4 (04/08/2021)

  • Commit b697e
    Ottimizzazione
    Richiesta cliente
    Aligned the listing of entry_changelog to show the field name of vulnerabilitycenter_lastupdatedate correctly. This issue was reported by Fergus Nelson.

  • Commit 006fc
    Correzione dei bug
    Richiesta cliente
    Under certain circumstances the calculation of exploit prices was not happening. This has been fixed. This bug was reported by Fergus Nelson.

Versione 13.28.3 (02/08/2021)

  • Commit 9864d
    Ottimizzazione
    External redirects first tested for malicious code are using HTTP status code 301 Moved Permanently instead of 302 Found.

Versione 13.28.2 (28/07/2021)

Versione 13.28.1 (27/07/2021)

Versione 13.28.0 (26/07/2021)

  • Commit 5f4e7
    Funzionalità
    Richiesta cliente
    Language support for Arabic (ar). This includes basic parts of the web site and vulnerability details. Right-to-left is implemented whenever required.

Versione 13.27.4 (24/07/2021)

  • Commit 7430f
    Ottimizzazione
    Current CTI scores in overviews are loaded and shown much faster which improves speed of site generation.

  • Commit 7430f
    Correzione dei bug
    Current CTI scores are shown in overviews in any case even if the servers are under heavy load.

  • Commit 7430f
    Correzione dei bug
    Current CTI scores in overviews show the correct timestamp of the last update for the most recent entries in the tooltip of the field.

Versione 13.27.3 (17/07/2021)

  • Commit 6861b
    Ottimizzazione
    Better import and validation handling for APT actor IoC moderation to improve processing and quality.

Versione 13.27.2 (16/07/2021)

  • Commit 363b6
    Ottimizzazione
    Clarification of titles of privilege escalation vulnerabilities. Remote issues that require some form of authentication are shown as Privilege Escalation without mentioning of Remote. Only remote issues without authentication are shown as true Remote Privilege Escalation.

  • Commit 61142
    Correzione dei bug
    Modifica API
    Richiesta cliente
    Fixed a rare bug in API 1.11/2.24/3.31 that created an associative array for software_version if the list of versions numbers contained the value 0. Thanks to Fergus Nelson for reporting this issue.

Versione 13.27.1 (15/07/2021)

Versione 13.27.0 (14/07/2021)

  • Commit cc0e3
    Funzionalità
    Richiesta cliente
    Cyber threat intelligence events display emerging, current, and upcoming activities by actors.

  • Commit dacc3
    Correzione dei bug
    Fixed a bug that temp scores of CVSS vectors are not properly stored during initial entry create. This did not affect updated entries.

Versione 13.26.4 (07/07/2021)

Versione 13.26.3 (30/06/2021)

  • Commit ea669
    Ottimizzazione
    Reinstated linking to CVEdetails.com as they resumed adding and updating new CVEs.

Versione 13.26.2 (25/06/2021)

  • Commit 28728
    Ottimizzazione
    Modifica API
    Richiesta cliente
    The Content-Type of all API responses is changed to application/json; charset=utf-8. This is not a change in the API itself which is why the version number of the API endpoints is not incremented.

Versione 13.26.1 (24/06/2021)

  • Commit 0d89b
    Ottimizzazione
    Modifica API
    Richiesta cliente
    The official vulnerability API endpoint is located at /?api and will redirect faulty URLs and GET parameters. Microsoft Power Apps did not respect this URL structure and changed the query string to a parameter tuple with an empty value. Our API endpoint redirected to the correct URL but Power Apps is not capable of following such HTTP redirects. This issue got fixed as Power Apps is now allowed to access the API endpoint even though the request URL format is not entirely correct.

Versione 13.26.0 (18/06/2021)

Versione 13.25.3 (16/06/2021)

  • Commit 0494b
    Ottimizzazione
    Performance optimization during stress (e.g. many users, DDoS attacks).

  • Commit 9660e
    Ottimizzazione
    Changed the algorithm to generate the category values local and remote in the RSS feeds. Also added the value partial for local if the attack vector is physical.

Versione 13.25.2 (15/06/2021)

Versione 13.25.1 (14/06/2021)

  • Commit fd133
    Ottimizzazione
    More accurate timing information about new IoC (Indicator of Compromise) assigned to an APT actor.

Versione 13.25.0 (11/06/2021)

Versione 13.24.1 (09/06/2021)

  • Commit 0d01f
    Ottimizzazione
    Optimized abuse detection of search queries for authenticated users.

Versione 13.24.0 (08/06/2021)

Versione 13.23.0 (07/06/2021)

Versione 13.22.1 (04/06/2021)

  • Commit 03370
    Ottimizzazione
    Timelines indicating activities show the so called activity index instead of the generic entries label.

  • Commit 03359
    Ottimizzazione
    Bar charts showing exploit prives use exploit instead of the generic entries label.

Versione 13.22.0 (31/05/2021)

Versione 13.21.0 (26/05/2021)

  • Commit edf52
    Funzionalità
    Richiesta cliente
    Language support for Japanese (jp). This includes basic parts of the web site and vulnerability details.

Versione 13.20.4 (18/05/2021)

  • Commit 02cd6
    Ottimizzazione
    The event of web code improvement shown in the community stream links to the changelog.

  • Commit e9923
    Ottimizzazione
    Modifica API
    In API 1.9/2.21/3.28 requests by the official Splunk app with a license of less than 10 API credits will throw an 403 Splunk app license expired error to prevent stressing the service with expired Splunk installations.

Versione 13.20.3 (12/05/2021)

  • Commit b4953
    Ottimizzazione
    Streamlined entry identifier wording on community activity stream on the frontpage.

Versione 13.20.2 (04/05/2021)

Versione 13.20.1 (02/05/2021)

  • Commit b0e75
    Ottimizzazione
    Community activities shown on the frontpage do refer to entries with their corresponding VDB ID to increase readability.

Versione 13.20.0 (29/04/2021)

  • Commit 0d72f
    Funzionalità
    Frontpage does now show the latest changelog entries of the current day.

  • Commit d6b22
    Ottimizzazione
    Richiesta cliente
    Vulnerability entries do now always contain links to available upgrades and patches in the Countermeasure section.

Versione 13.19.3 (28/04/2021)

  • Commit 6df70
    Ottimizzazione
    Performance optimization of the Threat Intelligence chart on the frontpage.

  • Commit d1eb6
    Correzione dei bug
    Richiesta cliente
    Fixed an issue where count and overview of user commits were not updated. Reported by user misc

Versione 13.19.2 (26/04/2021)

  • Commit a9542
    Ottimizzazione
    Hardware upgrade for better memory and processing handling.

  • Commit 8dd8c
    Ottimizzazione
    Modifica API
    In API 3.27 the values of numeric request types is verified and if not acceptable, a 400 Bad request error message is shown.

Versione 13.19.1 (24/04/2021)

  • Commit 3855b
    Ottimizzazione
    Optimized load balancing, limiter, and DDoS mitigation to provide more stability for legitimate users.

Versione 13.19.0 (22/04/2021)

  • Commit a85dc
    Funzionalità
    Richiesta cliente
    Submitted items are reviewed by an automated pre-parser to define a priority for processing by the moderation team. This increases priority for most important items and therefore improves processing speed.

Versione 13.18.0 (20/04/2021)

  • Commit 612a5
    Funzionalità
    Richiesta cliente
    Language support for Chinese simplified (zh-Hans). This includes basic parts of the web site and vulnerability details.

Versione 13.17.1 (16/04/2021)

  • Commit b93ed
    Ottimizzazione
    Code optimization of CTI map generation for faster processing with less memory requirements.

Versione 13.17.0 (15/04/2021)

  • Commit 1ffb5
    Funzionalità
    Richiesta cliente
    Description of CTI trigger possibilities and threshold handling to create events and reports.

  • Commit 881a3
    Ottimizzazione
    Footer does now refer to your specific copyright and license depending whether there is a commercial, enterprise, or reseller license established.

Versione 13.16.0 (12/04/2021)

  • Commit f7832
    Funzionalità
    Richiesta cliente
    Some users mistake their mail address as legitimate username to login. In this case a warning message informs the user about the mistake.

Versione 13.15.3 (08/04/2021)

  • Commit 265e0
    Ottimizzazione
    Performance optimization for CTI country analysis (closed beta invite only at the moment). Time range analysis is now incremental which makes report generation much faster (especially for larger ranges).

Versione 13.15.2 (31/03/2021)

  • Commit 05005
    Ottimizzazione
    All listings in the personal profile do contain timestamps to make identification of single items much easier.

  • Commit cddb4
    Ottimizzazione
    Completed some of the missing translations for French, Italian, Spanish, Polish, and Swedish.

  • Commit 6dc4a
    Ottimizzazione
    Improved the handling of time format regarding country-specific definitions. The language en will show A.M. and P.M. only if the browser is also set to en-us. Otherwise the 24 hour format is used. If the language is set to fr and the browser announces fr-fr there will be the French format 12h34. The 24 hour format is also used as default for all languages without a specific definition.

Versione 13.15.1 (30/03/2021)

  • Commit d71be
    Correzione dei bug
    Fixed a bug where some long product names, product listings and titles did not show the product name in its entirety.

  • Commit 44ee5
    Ottimizzazione
    Modifica API
    In API 3.26 fixed an issue where queries for advisory_date_start, entry_timestamp_create_start, entry_timestamp_change_start, and entry_timestamp_all_start did not work properly if the request value had a trailing whitespace.

Versione 13.15.0 (29/03/2021)

  • Commit 15c50
    Funzionalità
    Modifica API
    The personal API history does show the execution time for a request to help optimize queries. The column is shown as seconds and sortable.

  • Commit c4d04
    Funzionalità
    Richiesta cliente
    Added planned features in a roadmap to announce upcoming functionality. The items shown are just suggestions and might change regarding implementation and deployment.

Versione 13.14.3 (28/03/2021)

  • Commit 1ec36
    Ottimizzazione
    Richiesta cliente
    Better description of update handling, especially prioritization of new data for existing entries and update requests by customers.

  • Commit ae8c3
    Ottimizzazione
    Optimized the description of different commit moderation approaches. The actions for handling spam and profanity are explained in detail.

Versione 13.14.2 (26/03/2021)

Versione 13.14.1 (25/03/2021)

  • Commit a8cdf
    Ottimizzazione
    Added a new community rank Guru which requires 5000 points to be reached. Therefore, Grand Master is not the highest rank anymore.

Versione 13.14.0 (24/03/2021)

  • Commit 434e3
    Funzionalità
    Modifica API
    Richiesta cliente
    Introduced API 3.24 with the new request type entry_timestamp_all_start which combines new items from entry_timestamp_create_start and updated items from entry_timestamp_change_start in a single stream.

Versione 13.13.1 (20/03/2021)

Versione 13.13.0 (17/03/2021)

Versione 13.12.0 (10/03/2021)

  • Commit 699d0
    Funzionalità
    Richiesta cliente
    Made internal changelog public to provide full transparency for our customers. Entries earlier than 2020 just show milestones and not detailed changes.

  • Commit 43dfe
    Funzionalità
    Added link to changelog under support in main menu and in the footer of the page.

  • Commit c0ba0
    Ottimizzazione
    Updated internal quality guidance for CVSS fields during creation of new entries based on official Microsoft disclosures.

Versione 13.11.3 (08/03/2021)

  • Commit 1faf6
    Ottimizzazione
    Updated internal quality requirements for advisory_person_name and advisory_person_nickname fields to prevent inaccurate information during daily update procedure.

Versione 13.11.2 (04/03/2021)

  • Commit ecf32
    Ottimizzazione
    Optimized limiter to prohibit crawling of view elements by non-commercial users.

  • Commit fa612
    Ottimizzazione
    Limiter uses better geolocation data to prevent malicious users from changing IP addresses to slow down detection of abuse.

Versione 13.11.1 (03/03/2021)

  • Commit 09cef
    Correzione dei bug
    Fixed a rare German translation issue in a specific sentence of some vulnerability summaries.

Versione 13.11.0 (01/03/2021)

  • Commit 17052
    Funzionalità
    Prepared language database for upcoming translations.

  • Commit b3dfc
    Ottimizzazione
    Optimized language database for better performance.

Versione 13.10.0 (28/02/2021)

Versione 13.9.0 (22/02/2021)

Versione 13.8.0 (04/02/2021)

  • Commit 5626b
    Funzionalità
    Added load balancing features to handle performance peaks much better.

  • Commit 2efad
    Funzionalità
    Enabled priority module to provide high-availability for enterprise customers.

Versione 13.7.1 (03/02/2021)

  • Commit 167ac
    Ottimizzazione
    Optimized normalize module to improve quality assurance of vulnerability data management.

Versione 13.7.0 (01/02/2021)

  • Commit 14106
    Funzionalità
    Initiated preparation for port of web services to PHP8. First polyfill functions tested.

Versione 13.6.1 (17/01/2021)

  • Commit bdc13
    Correzione dei bug
    Fixed a bug where some new user submissions were shown as rejected even though they were still not processsed yet. This issue was reported by user misc.

Versione 13.6.0 (16/01/2021)

  • Commit 960f5
    Funzionalità
    Start of internal testing for CTI attribution module to identify APT group activities as such. Used by CTI team to create CTI alerts and infos for paying customers.

Versione 13.5.4 (09/01/2021)

  • Commit d53a8
    Ottimizzazione
    Modifica API
    Richiesta cliente
    Changed entry_timestamp_delta behavior from 7200 to 120 to keep commit grouping much smaller. Entries updated within a short period of time will pushed into the update stream to provide the most actual data to API users.

Versione 13.5.3 (04/01/2021)

  • Commit 96326
    Ottimizzazione
    Performance improvement of search engine. Early dissection will speed up some specific search requests.

  • Commit 96326
    Ottimizzazione
    Performance improvement of monoblock engine. Compilation of entries is a bit faster under certain circumstances.

Versione 13.5.2 (23/12/2020)

  • Commit db3d5
    Ottimizzazione
    Unordered lists in regular content to not a a maximum heigh and auto scrollbars anymore.

Versione 13.5.1 (15/12/2020)

  • Commit c227f
    Ottimizzazione
    Performance optimization of monoblock data processing.

Versione 13.5.0 (09/12/2020)

  • Commit 93707
    Funzionalità
    Added a stylesheet to display "time ago" for stream items.

Versione 13.4.0 (08/12/2020)

  • Commit dcd32
    Funzionalità
    Modifica API
    In API 3.23 added request type cursorinit to determine ideal initial cursor position for ongoing vulnerability stream (e.g. Splunk).

Versione 13.3.0 (04/12/2020)

  • Commit 3abdf
    Funzionalità
    Introduced information regarding ATT&CK. The fields are currently auto-generated and not part of the monoblock.

  • Commit dbcd2
    Funzionalità
    Modifica API
    In API 2.19/3.22 added field source_cve_cna which contains a string of the CVE Numbering Authority that assigned the CVE.

  • Commit 118c6
    Correzione dei bug
    Corrected a display bug for tooltips of CVSS fields on certain overview pages.

Versione 13.2.1 (03/12/2020)

  • Commit 6c403
    Ottimizzazione
    Optimized signup flood protection to prevent malicious users from auto-generating community accounts.

Versione 13.2.0 (26/11/2020)

  • Commit 0cd93
    Funzionalità
    Added new import feature for vulnerability moderators to handle custom entries and large batches of submissions.

  • Commit a4571
    Funzionalità
    The differences in a diff view are highlighted by color to provide better visibility.

Versione 13.1.2 (13/11/2020)

  • Commit 7983d
    Ottimizzazione
    Performance optimization of monoblock data processing.

Versione 13.1.1 (06/11/2020)

Versione 13.1.0 (02/11/2020)

  • Commit f6cc6
    Funzionalità
    Paying customers do now see a summary on top of every vulnerability entry to identify the most important aspects of the vulnerability.

Versione 13.0.1 (16/10/2020)

  • Commit 68339
    Ottimizzazione
    Optimized some indexes within the database to improve performance.

Versione 13.0.0 (09/10/2020)

  • Commit 8b201
    Funzionalità
    Introduced new monoblock structure to provide more possibilities like commits, commit histories, etc.

Versione 12.26.1 (26/09/2020)

Versione 12.26.0 (10/09/2020)

  • Commit b015c
    Funzionalità
    The live symbol is pulsating.

  • Commit 2d270
    Ottimizzazione
    The CSS code for the custom worldmap is deleted to stramline the CSS file.

Versione 12.25.1 (10/08/2020)

  • Commit b3264
    Ottimizzazione
    Optimization of browser rendering speed by adding font-display: swap to the CSS style sheet.

Versione 12.25.0 (16/05/2020)

  • Commit f6e38
    Funzionalità
    Added an optimization banner to inform users about upcoming changes and features.

Versione 12.24.0 (13/05/2020)

  • Commit 58be3
    Funzionalità
    New horizontal table style to make some upcoming views better readable.

Versione 12.23.5 (01/05/2020)

  • Commit e655c
    Ottimizzazione
    Upgrading to an extended server cluster for better performance.

Versione 12.23.4 (17/04/2020)

  • Commit ee0cc
    Correzione dei bug
    Modifica API
    In API 3.21 the field entry_timestamp_change is now always present even if the entry was just created and never updated yet. In this case it will contain the same value like entry_timestamp_create. User of the official VulDB Splunk App are advised to update to the latest release.

Versione 12.23.3 (04/03/2020)

  • Commit 328c8
    Ottimizzazione
    CVEdetails.com stopped updating their database. We keep linking old CVEs to their sites but do not do so for newer entries.

Versione 12.23.2 (10/01/2020)

  • Commit ce27f
    Ottimizzazione
    Added validation styles for numbers, dates, emails, and urls for forms. These detect missing or wrong data before submitting a form.

Versione 12.23.1 (19/11/2019)

  • Commit 7d12f
    Ottimizzazione
    Decreased the font-size of labes from 90% to 75% for better readability.

  • Commit c8999
    Ottimizzazione
    Improved style and layout of tooltips for better readability.

Versione 12.23.0 (15/11/2019)

  • Commit 5c4b5
    Funzionalità
    Load new pages with extended loading time show progress bar spinner at top of the site.

Versione 12.22.0 (09/11/2019)

  • Commit c4f43
    Funzionalità
    Added logos of vendors/products in entries if available.

  • Commit 46f6e
    Ottimizzazione
    Stramlined CSS style sheet regarding mini buttons.

Versione 12.21.0 (08/11/2019)

  • Commit 4f1af
    Funzionalità
    Added tooltips for easier access to more information.

  • Commit 63433
    Ottimizzazione
    Added fade effect for mini buttons for a better user experience.

Versione 12.20.1 (06/11/2019)

  • Commit 01634
    Ottimizzazione
    Stramlined box elements and columns.

Versione 12.20.0 (31/10/2019)

  • Commit 032a9
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.20 added field vulnerability_name which contains a string or array a popular names of the vulnerability (e.g. Shellshock, Poodle).

Versione 12.19.0 (13/09/2019)

  • Commit eaf94
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.19 added field family entry_details_* which contain entry_details_affected, entry_details_vulnerability, entry_details_impact, entry_details_exploit, entry_details_countermeasures, and entry_details_sources.

Versione 12.18.0 (31/08/2019)

Versione 12.17.0 (26/08/2019)

Versione 12.16.0 (22/08/2019)

  • Commit 3ef93
    Funzionalità
    Added experimental world map to highlight CTI activities.

  • Commit 5054e
    Ottimizzazione
    Improved the layout of checkboxes on web forms.

Versione 12.15.0 (06/07/2019)

Versione 12.14.0 (01/07/2019)

  • Commit 2fcc6
    Funzionalità
    Richiesta cliente
    Introduction of software type categories available in the field software_type.

Versione 12.13.3 (04/06/2019)

  • Commit dd112
    Correzione dei bug
    Modifica API
    In API 3.16 fixed value of field advisory_identifier, disabled safeguard mechanism to prevent inconsistency in result count.

Versione 12.13.2 (01/06/2019)

Versione 12.13.1 (27/05/2019)

  • Commit 6e92e
    Ottimizzazione
    Added loading bar on top of the page to indicate the loading of large pages.

Versione 12.13.0 (24/05/2019)

  • Commit bcb85
    Funzionalità
    Submitting forms locks input fields and shows progress indicator.

Versione 12.12.0 (17/05/2019)

Versione 12.11.0 (08/05/2019)

  • Commit 0fb91
    Funzionalità
    Modifica API
    In API 3.14 requesting dedicated CVSS fields supports the official response format (e.g. vulnerability_cvss3_vuldb_basescore) and the legacy format (e.g. vulnerability_cvss3_basescore_vuldb). The legacy format will be dropped in a future major release of the API.

Versione 12.10.1 (24/04/2019)

  • Commit 1dc8a
    Ottimizzazione
    Improved the layout of the search menu item for better accessibility.

  • Commit bb0d0
    Ottimizzazione
    The status boxes of live views are now pulsating if there is currently some activity.

Versione 12.10.0 (17/04/2019)

Versione 12.9.0 (15/04/2019)

  • Commit 3bfed
    Funzionalità
    Added a detailed clendar view for years an months.

  • Commit faa07
    Ottimizzazione
    Streamlined the row behavior.

Versione 12.8.2 (10/04/2019)

  • Commit 35519
    Ottimizzazione
    Hovering a clickable symbol in an overview will now be indicated by the cursor as pointer.

  • Commit cdf7b
    Ottimizzazione
    Improved the layout of buttons inside text boxes (e.g. searches).

Versione 12.8.1 (01/04/2019)

  • Commit 27ca6
    Ottimizzazione
    Centered the purchase table for better accessibility.

Versione 12.8.0 (29/03/2019)

Versione 12.7.0 (21/03/2019)

Versione 12.6.0 (15/03/2019)

  • Commit d3ac7
    Funzionalità
    Richiesta cliente
    Added multiple levels to the main menu to provide better accessibility to the variety of features.

  • Commit 35f3e
    Funzionalità
    Added the possibility for buttons within textboxes (e.g. searches).

Versione 12.5.0 (08/03/2019)

Versione 12.4.0 (04/03/2019)

  • Commit 55a0e
    Funzionalità
    Modifica API
    In API 1.7/2.17/3.12 added fields entry_locked_status and entry_locked_reason to inform about entries undergoing update and review processes (they might change soon).

Versione 12.3.0 (01/03/2019)

  • Commit 81d15
    Funzionalità
    Introduction of the C3BM Index (CVSSv3 Base Meta Index) based on CVSS data of multiple sources.

Versione 12.2.0 (28/02/2019)

  • Commit 231a4
    Funzionalità
    Large tables might be shown with a striped layout to improve readability.

  • Commit 16d23
    Ottimizzazione
    Improved the layout of buttons in the user submenu.

Versione 12.1.0 (25/02/2019)

  • Commit 9c6de
    Funzionalità
    Richiesta cliente
    Symbols in overviews are clickable to provide a drilldown feature. This is true for CVSS, exploit prices, exploitability, and countermeasures.

  • Commit 92aac
    Ottimizzazione
    Header text is now a graphical element.

Versione 12.0.4 (23/02/2019)

  • Commit 82de5
    Ottimizzazione
    Slightly changed the colorization of remedation and exploitability levels.

Versione 12.0.3 (22/02/2019)

  • Commit 55aa5
    Ottimizzazione
    Changed the pointer behavior of certain table headers from grab to regular pointer.

Versione 12.0.2 (21/02/2019)

  • Commit 81d16
    Ottimizzazione
    Streamlined user menu buttons.

  • Commit 81d16
    Ottimizzazione
    Streamlined exploitability fields.

Versione 12.0.1 (20/02/2019)

Versione 12.0.0 (18/02/2019)

  • Commit b9184
    Funzionalità
    Richiesta cliente
    New overviews introduced with a lot of information items.

  • Commit 65679
    Funzionalità
    Added support for dynamic behavior for long tables with more than six columns.

  • Commit 4c719
    Ottimizzazione
    Streamlined the behavior of content and article.

  • Commit 4c719
    Ottimizzazione
    Streamlined the behavior of tables.

  • Commit 4c719
    Ottimizzazione
    Streamlined the behavior of buttons.

Versione 11.27.0 (15/02/2019)

  • Commit c278e
    Funzionalità
    Added the posibility to fade-in some elements for a better user experience.

  • Commit 07fdc
    Ottimizzazione
    Improved the width behavior of user menu buttons.

Versione 11.26.0 (08/02/2019)

Versione 11.25.0 (06/02/2019)

Versione 11.24.1 (01/02/2019)

  • Commit 5d94f
    Ottimizzazione
    Reached the 10.000th community user. Congratulations!

Versione 11.24.0 (18/01/2019)

Versione 11.23.0 (11/01/2019)

  • Commit dfb03
    Funzionalità
    Modifica API
    Richiesta cliente
    In API 3.8 VulDB CVSSv3 scores use AI-driven autocomplete based on historical data and additional sources. The field vulnerability_cvss3_vuldb_confidence indicates the confidence of the vectors.

Versione 11.22.1 (08/01/2019)

Versione 11.22.0 (01/01/2019)

  • Commit 772cf
    Funzionalità
    Enabling real-time views of recent and updated entries. You are now able to see the moderation time at work.

Versione 11.21.0 (13/12/2018)

Versione 11.20.0 (28/10/2018)

Versione 11.19.0 (01/10/2018)

Versione 11.18.1 (20/09/2018)

  • Commit c4d5c
    Ottimizzazione
    Changed the cursor behavior for votes from copy to default.

  • Commit c4d5c
    Ottimizzazione
    Changed the cursor behavior of ribbons to default.

Versione 11.18.0 (18/09/2018)

  • Commit afb23
    Funzionalità
    Added custom ribbons to popup with interesting details if needed.

  • Commit 8ee7c
    Ottimizzazione
    Improved the behavior of items which have a fade-in effect.

Versione 11.17.0 (01/09/2018)

Versione 11.16.0 (31/08/2018)

  • Commit c00a7
    Funzionalità
    Richiesta cliente
    Introduction of CPE lists in entry views to indicate the affected products.

Versione 11.15.0 (06/08/2018)

  • Commit 9e978
    Funzionalità
    Modifica API
    In API 3.5 support for the queries advisory_date_start, entry_timestamp_create_start, entry_timestamp_change_start.

  • Commit 576a2
    Ottimizzazione
    Richiesta cliente
    Disabled the gradients in symbols.

Versione 11.14.4 (04/08/2018)

  • Commit 48a03
    Ottimizzazione
    Fixed an issue with the visibility of long date symbols.

Versione 11.14.3 (03/08/2018)

  • Commit 7d763
    Ottimizzazione
    Improvement of gradient in symbols.

  • Commit 856af
    Ottimizzazione
    Adding support for other font families in symbols.

Versione 11.14.2 (02/08/2018)

  • Commit b0000
    Ottimizzazione
    Introduction of gradients in symbols.

Versione 11.14.1 (01/08/2018)

  • Commit 7ef2d
    Ottimizzazione
    Introduction of antialiasing of fonts for better readability on high-resolution displays.

Versione 11.14.0 (31/07/2018)

  • Commit dc2ae
    Funzionalità
    Added support for stream symbols shown on overviews.

Versione 11.13.1 (22/07/2018)

  • Commit b675b
    Ottimizzazione
    Improved the layout of mini buttons.

Versione 11.13.0 (12/07/2018)

  • Commit b1af8
    Funzionalità
    Richiesta cliente
    Added dynamic layouts for tables to hide certain columns under specific conditions. This improves the mobile view a lot.

Versione 11.12.1 (10/07/2018)

  • Commit d5a10
    Ottimizzazione
    Optimized the margin of header elements.

Versione 11.12.0 (06/07/2018)

Versione 11.11.3 (05/07/2018)

  • Commit be3b7
    Ottimizzazione
    A new table wrapper optimizes how tables are shown on different screen sizes.

Versione 11.11.2 (04/07/2018)

Versione 11.11.1 (29/06/2018)

  • Commit 7409e
    Ottimizzazione
    Streamlining of mini button for unlock announcements.

Versione 11.11.0 (28/06/2018)

Versione 11.10.1 (12/06/2018)

Versione 11.10.0 (11/06/2018)

Versione 11.9.4 (10/06/2018)

Versione 11.9.3 (08/06/2018)

  • Commit 88f01
    Ottimizzazione
    Mini buttons do now animate on hover.

Versione 11.9.2 (06/06/2018)

Versione 11.9.1 (04/06/2018)

Versione 11.9.0 (18/05/2018)

Versione 11.8.0 (15/05/2018)

Versione 11.7.1 (14/05/2018)

Versione 11.7.0 (08/05/2018)

Versione 11.6.0 (07/05/2018)

Versione 11.5.0 (01/05/2018)

Versione 11.4.0 (01/04/2018)

Versione 11.3.0 (22/03/2018)

  • Commit b90e6
    Funzionalità
    Richiesta cliente
    Working on a proof-of-concept to use Alexa as a gateway to work with vulnerability data.

Versione 11.2.3 (17/02/2018)

  • Commit f3590
    Ottimizzazione
    Introduction of a container element to have more flexibility with layout positioning on the web frontend.

Versione 11.2.2 (01/02/2018)

  • Commit 51a81
    Ottimizzazione
    Introduction of a sub-title on the site title to better describe the service.

Versione 11.2.1 (29/01/2018)

Versione 11.2.0 (22/01/2018)

Versione 11.1.1 (23/09/2017)

  • Commit aebb3
    Ottimizzazione
    Improvement of the container margins to have a better layout.

Versione 11.1.0 (16/09/2017)

Versione 11.0.1 (02/06/2017)

Versione 11.0.0 (01/06/2017)

  • Commit a862d
    Funzionalità
    Introduction of dynamic graphs shown in different views.

Versione 10.12.2 (19/05/2017)

Versione 10.12.1 (16/05/2017)

  • Commit 93c6e
    Correzione dei bug
    Fixed a display issue on the frontpage. Under certain circumstances new items were not shown as bold.

Versione 10.12.0 (28/04/2017)

Versione 10.11.0 (21/04/2017)

  • Commit e7f52
    Funzionalità
    Added dynamic charts of all kind of overview pages.

Versione 10.10.0 (10/04/2017)

Versione 10.9.0 (01/04/2017)

Versione 10.8.0 (22/03/2017)

  • Commit 1f1f6
    Funzionalità
    Richiesta cliente
    Vulnerability entries flagged as false-positive do now highlight this fact on their pages (title and introduction).

Versione 10.7.0 (21/03/2017)

  • Commit 2eb19
    Funzionalità
    Introduced data for OVAL and IAVM. Completed all existing entries with appropriate data.

Versione 10.6.0 (23/02/2017)

  • Commit f7af4
    Funzionalità
    Richiesta cliente
    Supporting CVSS scores from multiple sources (VulDB, vendor, researcher, NVD).

Versione 10.5.1 (13/02/2017)

  • Commit 915e2
    Ottimizzazione
    Optimized the indexing of the database to improve search performance.

Versione 10.5.0 (01/02/2017)

Versione 10.4.1 (20/01/2017)

  • Commit ed89a
    Ottimizzazione
    Optimized performance by using specific features and configuration settings in PHP7.

Versione 10.4.0 (18/01/2017)

Versione 10.3.0 (01/01/2017)

  • Commit 766b4
    Funzionalità
    Start open beta of community edition.

Versione 10.2.0 (20/12/2016)

  • Commit afa9d
    Funzionalità
    Introduced Bug of the Day on the front page. One of the more serious or interesting issues of the recent days is shown every day.

Versione 10.1.1 (19/12/2016)

  • Commit e0724
    Ottimizzazione
    Redesign of the frontpage with a slick layout and better data accessibility.

Versione 10.1.0 (16/12/2016)

  • Commit 17b00
    Funzionalità
    Implemented a module to detect loss of data integrity on the service.

Versione 10.0.0 (01/12/2016)

Versione 9.19.1 (08/11/2016)

  • Commit 1bf65
    Ottimizzazione
    Optimization of database table structures to gain more flexibility and performance.

Versione 9.19.0 (07/11/2016)

  • Commit 41c1a
    Funzionalità
    Implementation of Content Security Policy (CSP) to improve web security of the service.

Versione 9.18.0 (02/11/2016)

  • Commit 2c835
    Funzionalità
    It is now possible to upvote comments for vulnerability entries. Upvoted comments are shown on top of the list.

Versione 9.17.0 (01/11/2016)

  • Commit 01762
    Funzionalità
    Start closed beta of community edition.

Versione 9.16.0 (26/10/2016)

  • Commit 464dc
    Funzionalità
    Editing a section of a vulnerability will automatically jump to the correct section of the edit form.

Versione 9.15.0 (25/10/2016)

  • Commit cbba3
    Funzionalità
    Existing vulnerability entries can now be edited immediately by members of the moderation team.

Versione 9.14.0 (14/10/2016)

  • Commit 83203
    Funzionalità
    Enhanced the existing cache module to allow caching of database queries and results.

Versione 9.13.0 (11/10/2016)

  • Commit 786cb
    Funzionalità
    Every user account has now a profile.

  • Commit 7868e
    Funzionalità
    Registered users are able to tweak their own configuration of the service.

Versione 9.12.0 (10/10/2016)

  • Commit b9c2d
    Funzionalità
    Registered users are able to see history of vulnerability entries they have been viewing earlier.

Versione 9.11.0 (07/10/2016)

Versione 9.10.0 (06/10/2016)

Versione 9.9.0 (05/10/2016)

  • Commit da14a
    Funzionalità
    Users accessing resources which require an authentication receive a proper error message.

Versione 9.8.0 (04/10/2016)

  • Commit 2f00f
    Funzionalità
    Users are able to reset their password via email (password recovery).

Versione 9.7.0 (03/10/2016)

  • Commit 5a1b1
    Funzionalità
    Richiesta cliente
    Logins with a new device or from an unknown source will inform the account holder about the potentially suspicious login. New devices are stored and shown in the personal device management overview.

Versione 9.6.0 (24/06/2016)

  • Commit 688a5
    Funzionalità
    Added a limiter to prevent malicious users from scraping our data without authorization.

Versione 9.5.0 (22/06/2016)

Versione 9.4.0 (01/10/2016)

Versione 9.3.1 (05/07/2016)

  • Commit 4aa37
    Ottimizzazione
    Performance optimization for all web views.

Versione 9.3.0 (30/06/2016)

  • Commit 4aecf
    Funzionalità
    Some statistical data is now stored in a centralized table which allows them to be shown on multiple places without new calculations every time.

Versione 9.2.0 (02/05/2016)

  • Commit 3fee0
    Funzionalità
    Support for data fields of Tenable Nessus.

Versione 9.1.1 (29/04/2016)

Versione 9.1.0 (27/04/2016)

  • Commit 8ab5b
    Funzionalità
    Some data points are now shown in bubbles.

  • Commit 939cf
    Ottimizzazione
    Introduced a new site footer.

Versione 9.0.0 (14/04/2016)

  • Commit b3559
    Ottimizzazione
    Complete rewrite of the search engine to provide better matches and optimized performance.

Versione 8.1.2 (06/04/2016)

  • Commit 3ce21
    Ottimizzazione
    Optimization of HTML code to make pages smaller and faster to download and render.

Versione 8.1.1 (04/04/2016)

  • Commit 3b609
    Correzione dei bug
    Fixed a bug or slow indexes which improved the performance of vulnerability display a lot.

Versione 8.1.0 (01/04/2016)

  • Commit 7bc0a
    Funzionalità
    Introduction of new summaries and descriptions with more data enrichment.

  • Commit 56864
    Ottimizzazione
    Performance optimization.

Versione 8.0.0 (14/03/2016)

  • Commit 5e4e5
    Funzionalità
    Introducing Chart.js to generate dynamic charts.

Versione 7.1.3 (11/03/2016)

  • Commit a0b92
    Ottimizzazione
    Establish VulDB as independent service to gain more flexibility.

Versione 7.1.2 (23/02/2016)

Versione 7.1.1 (17/02/2016)

  • Commit 07bfb
    Ottimizzazione
    Renaming the Twitter handle from scipvulbot to "vuldb"https://twitter.com/vuldb.

Versione 7.1.0 (19/01/2016)

  • Commit 55bf1
    Funzionalità
    Enhancing statistical overview to provide previews and forecasts based in historical data.

  • Commit 72424
    Funzionalità
    Creating new text for different pages and sub-pages.

Versione 7.0.5 (01/12/2015)

  • Commit ea951
    Ottimizzazione
    Richiesta cliente
    Adding caching modules to improve site performance. Caching is possible per site and file.

Versione 7.0.4 (20/11/2015)

  • Commit 58def
    Ottimizzazione
    Richiesta cliente
    Increasing update frequency of existing entries.

Versione 7.0.3 (19/08/2015)

  • Commit 2ddb7
    Correzione dei bug
    Corrected the listing of multiple authors of a vulnerability.

Versione 7.0.2 (07/08/2015)

  • Commit 3b6e7
    Ottimizzazione
    More performance optimization of database queries.

Versione 7.0.1 (03/08/2015)

  • Commit b1554
    Ottimizzazione
    Performance optimization of database queries.

Versione 7.0.0 (10/07/2015)

  • Commit 243a7
    Funzionalità
    Redesign of modular frontpage with the introduction of Top 5 lists.

Versione 6.31.0 (07/07/2015)

  • Commit 44e99
    Funzionalità
    Adding Qualys data to vulnerability entries.

  • Commit fe3d0
    Funzionalità
    Adding SecurityCenter data to vulnerability entries.

Versione 6.30.0 (09/03/2015)

  • Commit e19c1
    Funzionalità
    Introduction of new queue for vulnerability processing by mod team.

Versione 6.29.3 (25/02/2015)

  • Commit 8695f
    Ottimizzazione
    Optimization of all X-Force data import and display.

Versione 6.29.2 (03/02/2015)

  • Commit 3453e
    Ottimizzazione
    Optimizaton of summaries and descriptions of vulnerability entries.

Versione 6.29.1 (08/01/2015)

  • Commit 7ac76
    Ottimizzazione
    Optimization of version descriptions of vulnerability entries.

Versione 6.29.0 (24/06/2014)

  • Commit 0b232
    Funzionalità
    Richiesta cliente
    Approaching backlog of old entries before 2003 with vulnerabilities ranging back to 1988. More information.

Versione 6.28.0 (26/05/2014)

  • Commit 0f72a
    Funzionalità
    Introduction of the "see also" hint which lists entries with are connected or similar.

Versione 6.27.0 (17/04/2014)

  • Commit 35f6f
    Funzionalità
    Adding a field to declare the date of the introduction of a vulnerability.

Versione 6.26.1 (27/03/2014)

  • Commit 3efc3
    Ottimizzazione
    Optimization of queuing of new vulnerabilities to better prioritize processing.

Versione 6.26.0 (20/03/2014)

Versione 6.25.12 (14/03/2014)

Versione 6.25.11 (07/03/2014)

  • Commit d0dda
    Ottimizzazione
    Optimizing collision detection during the processing of new entries.

Versione 6.25.10 (10/02/2014)

  • Commit ce076
    Ottimizzazione
    Optimizing summaries regarding sources of vulnerability entries.

Versione 6.25.9 (29/01/2014)

  • Commit 03d37
    Ottimizzazione
    Added helper for vulnerability moderation team to determine arguments of attacks faster and more reliable.

Versione 6.25.8 (28/01/2014)

  • Commit 53a64
    Ottimizzazione
    Optimizing summaries regarding code samples.

Versione 6.25.7 (23/01/2014)

  • Commit 61b0d
    Ottimizzazione
    Optimizing helper for vulnerability moderation team to complete new and existing entries with additional data. This increases data quality drastically.

Versione 6.25.6 (14/01/2014)

  • Commit a17f4
    Correzione dei bug
    Fixed a bug where sometimes summaries and descriptions did contain spaces twice instead of once. This was just a problem in the HTML source code and not on the rendered web site.

Versione 6.25.5 (09/01/2014)

  • Commit 1cd31
    Ottimizzazione
    Added helper for vulnerability moderation team to determine keywords which shall be used within the title of a vulnerability entry.

Versione 6.25.4 (19/12/2013)

  • Commit 12a4f
    Ottimizzazione
    Optimizing the autocomplete feature to update new entries with historical data.

Versione 6.25.3 (06/11/2013)

  • Commit 1434c
    Ottimizzazione
    Optimizing the pre-parser to handle import of new vulnerability entries.

Versione 6.25.2 (22/10/2013)

  • Commit a52cf
    Ottimizzazione
    Changing the algorithm to calculate the current threat level.

Versione 6.25.1 (21/10/2013)

  • Commit 921d7
    Ottimizzazione
    Changing the algorithm to calculate the risk rating of vulnerability entries.

Versione 6.25.0 (18/10/2013)

  • Commit b4283
    Funzionalità
    Adding the support for OpenVAS data.

Versione 6.24.0 (17/10/2013)

  • Commit 01303
    Funzionalità
    Introducing the threat level to show an indicator for the current vulnerability landscape.

Versione 6.23.0 (03/10/2013)

  • Commit e8e8f
    Funzionalità
    Adding the possibility to add a custom word to the title to provide more details on first sight.

Versione 6.22.0 (01/10/2013)

  • Commit f8c1e
    Funzionalità
    Establishing a background updater which handles entries which need to be updated without interfering with the manual work of the moderation team.

  • Commit 5abb3
    Ottimizzazione
    Enhancement of the review procedure of CVE entries pushed by MITRE to improve processing and quality.

Versione 6.21.0 (13/09/2013)

Versione 6.20.1 (12/09/2013)

  • Commit 088ac
    Ottimizzazione
    Completing all existing entries with Secunia data.

Versione 6.20.0 (11/09/2013)

  • Commit 2b409
    Funzionalità
    Introducing risk maps to provide easy comparability between risk ratings of different sources.

Versione 6.19.0 (10/09/2013)

  • Commit 8966c
    Funzionalità
    Introducing support for Secunia data as a source.

  • Commit 8966c
    Funzionalità
    Introducing support for IBM X-Force data as a source.

Versione 6.18.0 (23/08/2013)

Versione 6.17.0 (12/08/2013)

Versione 6.16.0 (09/08/2013)

Versione 6.15.2 (05/07/2013)

  • Commit 4dffe
    Ottimizzazione
    Enhancement of the review procedure of Nessus entries.

Versione 6.15.1 (28/06/2013)

  • Commit 4b14b
    Ottimizzazione
    Optimizing the plausability checks during vulnerability moderation to prevent contradicting and wrong data.

Versione 6.15.0 (19/06/2013)

  • Commit 0b42c
    Funzionalità
    Added support for CPE to better identification of products.

Versione 6.14.1 (11/06/2013)

  • Commit 0b61c
    Ottimizzazione
    Updating large quantities of vulnerabilities is now improved thanks to incremental updates.

Versione 6.14.0 (03/06/2013)

  • Commit 207db
    Funzionalità
    Added support for screenshots per entries to illustrate attacks and countermeasures. More information.

  • Commit 207db
    Funzionalità
    Added support to embed external videos per entries to illustrate attacks and countermeasures. Videos can be hosted at YouTube and Vimeo. More information.

Versione 6.13.0 (31/05/2013)

  • Commit 22b2b
    Funzionalità
    Added the capability to add quotes from advisories to enrich entries.

  • Commit 22b2b
    Funzionalità
    Added the capability to add links to videos for a vulnerability.

Versione 6.12.0 (29/04/2013)

Versione 6.11.0 (11/04/2013)

  • Commit 6a9d2
    Funzionalità
    Added the capability to list multiple different products in an affected list. This is done additionally to the main product that is affected by a vulnerability.

Versione 6.10.2 (04/04/2013)

  • Commit 239ac
    Ottimizzazione
    Enhanced input validation mechanism during vulnerability management to prevent mistakes regarding vendor/product definitions.

Versione 6.10.1 (28/03/2013)

  • Commit 497c0
    Ottimizzazione
    Optimization of logging and tracking of queued items processed by the moderation team.

Versione 6.10.0 (19/03/2013)

  • Commit c46f6
    Funzionalità
    Added input validation mechanisms during vulnerability management.

  • Commit bc987
    Ottimizzazione
    Optimized input validation mechanisms during vulnerability management.

Versione 6.9.1 (09/01/2013)

  • Commit b0410
    Correzione dei bug
    Fixed an issue in the database. This did only affect moderation of vulnerabilities and was not reflected on the user-side of the service.

Versione 6.9.0 (21/12/2012)

  • Commit 79a9b
    Funzionalità
    Added a feature to normalize terms between different vulnerability entries.

Versione 6.8.1 (26/11/2012)

  • Commit d0a20
    Ottimizzazione
    Prepared the support for Milw0rm data for entries with an ID up to 50000.

Versione 6.8.0 (31/10/2012)

Versione 6.7.0 (15/10/2012)

Versione 6.6.0 (01/10/2012)

Versione 6.5.0 (24/09/2012)

Versione 6.4.0 (04/07/2012)

  • Commit a681e
    Funzionalità
    Migrating all available data from NASLDB.

Versione 6.3.0 (18/06/2012)

Versione 6.2.2 (05/06/2012)

  • Commit 895ea
    Ottimizzazione
    Optimizing the autocomplete feature to update new entries with historical data.

Versione 6.2.1 (10/04/2012)

Versione 6.2.0 (13/03/2012)

  • Commit e00e9
    Funzionalità
    Added support for better linking to external sources.

Versione 6.1.1 (09/03/2012)

Versione 6.1.0 (08/03/2012)

  • Commit c17b6
    Funzionalità
    Added the calculation of the exposure time which measures the time of the disclosure and the mitigation possibilities of a vulnerability.

  • Commit 23aa8
    Ottimizzazione
    Reviewed all available data of OSVDB.

Versione 6.0.0 (06/03/2012)

  • Commit 934a4
    Ottimizzazione
    Optimization of summaries and descriptions.

  • Commit 3484c
    Funzionalità
    Added support to show images of vendors/products.

  • Commit 3484c
    Funzionalità
    Added support for Google dorks to find issues very quickly.

Versione 5.2.2 (05/03/2012)

Versione 5.2.1 (02/03/2012)

Versione 5.2.0 (15/02/2012)

  • Commit d6183
    Funzionalità
    Added web import feature for vulnerability moderators to handle new entries based on web resources.

Versione 5.1.0 (06/01/2012)

  • Commit 2e4ed
    Funzionalità
    Added single import feature for vulnerability moderators to handle single entries outside the regular queueing.

Versione 5.0.0 (22/02/2011)

  • Commit 04086
    Funzionalità
    Establishing new database backend with much more possibilities.

Versione 4.10.2 (01/12/2010)

  • Commit 8b4df
    Ottimizzazione
    Move to more powerful hardware due to increase in access.

Versione 4.10.1 (30/07/2010)

Versione 4.10.0 (10/06/2010)

  • Commit 57677
    Funzionalità
    Adding Alert Info on web site to inform visitors about latest critical issue.

  • Commit 80bfa
    Funzionalità
    Delivering ads for non-paying and unauthenticated users.

  • Commit acc6f
    Ottimizzazione
    Optimizing database structure for more flexibility and performance.

Versione 4.9.0 (08/03/2010)

Versione 4.8.1 (10/02/2010)

Versione 4.8.0 (08/02/2010)

  • Commit 47351
    Funzionalità
    Adding the alert info on top of the site to show the most recent vulnerability with the highest emergency rating.

Versione 4.7.2 (05/02/2020)

  • Commit 1a52b
    Ottimizzazione
    Improvement of VulDB alert system.

Versione 4.7.1 (02/02/2010)

Versione 4.7.0 (11/01/2011)

  • Commit 90de3
    Funzionalità
    Richiesta cliente
    Added VulDB Alert to inform customers about issues applicable for them.

Versione 4.6.0 (16/12/2009)

Versione 4.5.0 (27/10/2009)

Versione 4.4.0 (03/09/2009)

Versione 4.3.0 (25/08/2009)

  • Commit 61ad7
    Funzionalità
    Completing existing entries with most actual data. This includes but is not limited to CVE, Secunia, SecurityTracker, vendor, and confirmation details. More information.

Versione 4.2.0 (20/08/2009)

Versione 4.1.0 (01/08/2009)

Versione 4.0.1 (26/06/2009)

Versione 4.0.0 (23/06/2009)

Versione 3.5.0 (01/07/2006)

Versione 3.4.0 (19/05/2004)

Versione 3.3.0 (01/01/2004)

  • Commit a2ec5
    Funzionalità
    Introduction of Emergency-SMS notification service.

Versione 3.2.0 (19/12/2003)

Versione 3.1.0 (18/11/2003)

Versione 3.0.0 (01/03/2003)

  • Commit d28ca
    Funzionalità
    Service is completely re-written in Perl and uses a dedicated backend for vulnerability moderation to gain more flexibility.

  • Commit 94f12
    Ottimizzazione
    Bugbase is re-branded as scip VulnDB and hosted on www.scip.ch.

Versione 2.0.0 (01/09/2002)

  • Commit 51e87
    Ottimizzazione
    Changed from static web site to dynamic database (with the kind support of DukeCS).

Versione 1.0.0 (01/01/1997)

Interested in the pricing of exploits?

See the underground prices here!

◂ PrecedenteVisione D'ensembleIl prossimo ▸