Changelog
Версия 20.0.0 (28.03.2026)
- Коммит 187f6ФункциональностьOverhaul of the URL structure of the whole service. We change from a query string-based approach to a REST-like URL structure.
Версия 19.33.5 (12.03.2026)
- Коммит d4ca2ОптимизацияMuch more efficient handling of all supported languages.
Версия 19.33.4 (11.03.2026)
- Коммит 07d0aОптимизацияThe titles and breadcrumbs of Knowledge Base entries are optimized for smaller views.
Версия 19.33.3 (10.03.2026)
- Коммит fbfdcОптимизацияAll columns in CTI views are sortable properly.
Версия 19.33.2 (09.03.2026)
- Коммит 0bf47ОптимизацияThe views for exploits and exploits prices also contain ransomware details.
- Коммит 4ea48ОптимизацияIn the menu The exploit prices view was moved from Theat to Risk.
Версия 19.33.1 (08.03.2026)
- Коммит 89becОптимизацияWe send the HTTP response header
Content-Signalto define if and how AI-based processing of pages is allowed.
Версия 19.33.0 (02.03.2026)
- Коммит 4b4b0ФункциональностьЗапрос клиентаIntroduction of the language Klingon.
Версия 19.32.2 (25.02.2026)
- Коммит d51e7ОптимизацияCharts about different CVSS scoring show the amount of scored vulnerability items in the chart title.
Версия 19.32.1 (23.02.2026)
- Коммит 4919bОптимизацияVulnerability history views indicate commits by submitters in the remark column.
Версия 19.32.0 (22.02.2026)
- Коммит 9a3ddФункциональностьAll KEV views do indicate whether there is a ransomware to be known for specific vulnerability entries.
- Коммит 22b69ОптимизацияAll HTTP redirects on the web service are faster due to general code optimization.
Версия 19.31.0 (21.02.2026)
- Коммит cd758ФункциональностьThe web searches add CWE as a new column in the search results to provide better accessibility to relevant data.
Версия 19.30.0 (16.02.2026)
- Коммит aff18Функциональность
Версия 19.29.4 (15.02.2026)
- Коммит f6956ОптимизацияImproved country identification of actors and activities for Cyber Threat Intelligence analysis.
Версия 19.29.3 (13.02.2026)
- Коммит e3dfaИсправление ошибокFixed a very rare issue where CVSSv3 meta scores were not rounded properly.
Версия 19.29.2 (12.02.2026)
- Коммит bcfa9ОптимизацияUpgrade of server hardware to improve performance.
- Коммит bcfa9ОптимизацияUpgrade of all software components to the latest version tree.
- Коммит 25d73ОптимизацияImproved handling of user sessions for better performance and increased security.
Версия 19.29.1 (11.02.2026)
- Коммит d7ed0ОптимизацияFaster compilation of statistica data.
Версия 19.29.0 (10.02.2026)
- Коммит 77f5dФункциональностьЗапрос клиентаIntroduction of the support for CVSSv3 data by CISA as an ADP in different views (e.g. CVSSv3 overview, edit form).
- Коммит d5bc4ФункциональностьИзменение APIЗапрос клиентаIn API 3.86 introduction of the ADP CISA CVSSv3 vector and score which is accessible via
vulnerability_cvss3_adpcisa_*. - Коммит e03e8ОптимизацияCTI overviews show additional statistical data about CTI monitoring.
Версия 19.28.0 (09.02.2026)
- Коммит 5a9b8Функциональность
Версия 19.27.3 (08.02.2026)
- Коммит 5d194ОптимизацияFaster daily compilation of our extended CPE dictonary.
Версия 19.27.2 (06.02.2026)
- Коммит b09d3Исправление ошибокFixed an issue where existing users were not able to login if their username contained a string which is blacklisted for user registration. Thanks to the user pengroot for reporting this issue.
Версия 19.27.1 (04.02.2026)
- Коммит 6a8bdОптимизацияImproved the username validator to prevent disallowed usernames during registration.
Версия 19.27.0 (02.02.2026)
- Коммит cb05cФункциональность
Версия 19.26.3 (30.01.2026)
- Коммит bddb1ОптимизацияFixed a rare issue where vendor and product links were not aligned regarding case sensitivity.
Версия 19.26.2 (28.01.2026)
- Коммит e80fbОптимизацияThe recurring generation of the stats page is more efficient and informs concurrent users about the generation process.
Версия 19.26.1 (27.01.2026)
- Коммит 15d2cОптимизацияImproved product web site association for vulnerability entries.
Версия 19.26.0 (26.01.2026)
- Коммит 69e6dФункциональность
Версия 19.25.3 (25.01.2026)
- Коммит 5d608ОптимизацияImprovement of country activity analysis accuracy shown in CTI charts.
Версия 19.25.2 (24.01.2026)
- Коммит 90808ОптимизацияPerformance optimizazion of views containing CTI maps.
Версия 19.25.1 (23.01.2026)
- Коммит 11bc9ОптимизацияPerformance optimization for all text generation elements. Especially views with multiple descriptions profit from this.
Версия 19.25.0 (19.01.2026)
- Коммит f7d62Функциональность
Версия 19.24.1 (13.01.2026)
- Коммит 64d9cОптимизацияThe lookup of CWE identifiers shows the full name of items in diff views and commit items of vulnerability entries.
Версия 19.24.0 (12.01.2026)
- Коммит 64c79Функциональность
Версия 19.23.0 (05.01.2026)
- Коммит 4c461Функциональность
Версия 19.22.2 (04.01.2026)
- Коммит fe3ccОптимизацияPublic submits are flagged as community content more clearly.
Версия 19.22.1 (03.01.2026)
- Коммит b5b92Исправление ошибокUnder certain circumstances the CVSSv4 bscores and btscores were not calculated correctly for 3rd party sources.
Версия 19.22.0 (29.12.2025)
- Коммит f8723Функциональность
Версия 19.21.0 (22.12.2025)
- Коммит 15c9dФункциональность
Версия 19.20.4 (20.12.2025)
- Коммит 2887cОптимизацияSubmitting a new vulnerability will validate the source URL and reject invalid links.
Версия 19.20.3 (19.12.2025)
- Коммит 14e46Исправление ошибокThe Previous and Next buttons of Vulnerability Relate Views link to the corresponding main entry instead to an identified match.
Версия 19.20.2 (18.12.2025)
- Коммит ecb5dОптимизацияImprovement of PURL-based searches to get much better results.
Версия 19.20.1 (17.12.2025)
- Коммит b998eОптимизацияThe CTI view for vulnerability entries lists associated sources to make further analysis easier.
Версия 19.20.0 (15.12.2025)
- Коммит 86367Функциональность
Версия 19.19.2 (10.12.2025)
- Коммит e3c8eОптимизацияLinks to CPE entries of NIST NVD do not accept wilcards for version fields anymore. A workaround makes it possible to guarantee a reliable lookup again.
Версия 19.19.1 (09.12.2025)
- Коммит 7da1fОптимизацияWithin KEV views the due field links to the KEV entry for easier analysis capabilities.
Версия 19.19.0 (08.12.2025)
- Коммит af904Функциональность
Версия 19.18.3 (05.12.2025)
- Коммит ba595ОптимизацияEditing a vulnerability entry will allow to set the field
software_notaffectedlistas well.
Версия 19.18.2 (04.12.2025)
- Коммит 1b98eИсправление ошибокЗапрос клиентаThe CSRF token handling during settings updates was not working properly.
Версия 19.18.1 (02.12.2025)
- Коммит bbeefОптимизацияDB structure improvement of Monoblock to improve performance of vulnerability data queries.
Версия 19.18.0 (01.12.2025)
- Коммит 1e02fФункциональность
Версия 19.17.3 (30.11.2025)
- Коммит 1f8bcОптимизацияThe Live View of Commits does now provide time details based on minutes to guarantee better accuracy.
Версия 19.17.2 (28.11.2025)
- Коммит ecc57ОптимизацияCalculation of broad CTI analysis queries is much faster without losing any accuracy of results.
Версия 19.17.1 (25.11.2025)
- Коммит 92921ОптимизацияOptimized resource handling of high-performance queries.
Версия 19.17.0 (24.11.2025)
- Коммит e350eФункциональность
Версия 19.16.2 (23.11.2025)
- Коммит a2e0cИсправление ошибокFixed an issue where vulnerability titles contained fragments of foreign languages.
Версия 19.16.1 (18.11.2025)
- Коммит 89c9eОптимизацияThe language view shows how many languages are supported.
Версия 19.16.0 (17.11.2025)
- Коммит 43466Функциональность
Версия 19.15.2 (13.11.2025)
- Коммит 8a017ОптимизацияIf a user enables section counts in titles, then empty search results will shown the indicator as well.
Версия 19.15.1 (12.11.2025)
- Коммит d1c54ОптимизацияUpdated the CPE links in vulnerability entries to provide better accessibility to the NIST database.
Версия 19.15.0 (10.11.2025)
- Коммит ee129Функциональность
Версия 19.14.1 (05.11.2025)
- Коммит 22442Исправление ошибокИзменение APIIn API 3.85 fixed a race condition regarding API credit calculation which happened when an earlier API request had an extended execution time.
Версия 19.14.0 (03.11.2025)
- Коммит ccd7bФункциональность
Версия 19.13.2 (31.10.2025)
- Коммит 0a1d7Исправление ошибокFixed an issue where embedded YouTube videos were not loaded properly.
Версия 19.13.1 (30.10.2025)
- Коммит 4f637ОптимизацияPerformance improvement of yearly updates views.
Версия 19.13.0 (27.10.2025)
- Коммит 8bc95Функциональность
Версия 19.12.1 (25.10.2025)
- Коммит 42841ОптимизацияUsing intelligent processing order to optimize performance of simple search queries. This improves execution speed of most queries for approx. 30%.
Версия 19.12.0 (20.10.2025)
- Коммит 02c54Функциональность
Версия 19.11.0 (13.10.2025)
- Коммит 29acdФункциональность
Версия 19.10.0 (06.10.2025)
- Коммит 55d22Функциональность
Версия 19.9.4 (03.10.2025)
- Коммит 2202dОптимизацияCurrent status of submits during processing is available to resposible users only.
Версия 19.9.3 (02.10.2025)
- Коммит 0f974ОптимизацияCTI activity scores in overview lists announce upcoming data collection few very fresh vulnerability entries.
Версия 19.9.2 (01.10.2025)
- Коммит e47d2ОптимизацияИзменение APIThe API endpoint provides better detection and verbose details if there is a problem with the API key (e.g. wrong format, too short).
Версия 19.9.1 (30.09.2025)
- Коммит 165bcОптимизацияPerformance optimization of all vulnerability views that contain live CTI activity score data.
Версия 19.9.0 (29.09.2025)
- Коммит 22498Функциональность
Версия 19.8.2 (25.09.2025)
- Коммит 72bb1ОптимизацияUpgraded web server pool to improve performance.
Версия 19.8.1 (24.09.2025)
- Коммит 78515ОптимизацияImproved identification of similar vulnerability entries.
Версия 19.8.0 (22.09.2025)
- Коммит c061bФункциональность
Версия 19.7.1 (17.09.2025)
- Коммит df6ecОптимизацияPerformance optimization of excessive request handling.
Версия 19.7.0 (15.09.2025)
- Коммит b5296Функциональность
Версия 19.6.0 (08.09.2025)
- Коммит 20594Функциональность
Версия 19.5.3 (07.09.2025)
- Коммит 45a22ОптимизацияImproved the handling of version range declarations in different languages (e.g. "up to" and "prior").
Версия 19.5.2 (03.09.2025)
- Коммит 3c3a1ОптимизацияImproved case-sensitivity handling of multi-language menu items.
Версия 19.5.1 (02.09.2025)
- Коммит 211a8ОптимизацияIf a vulnerability entry does not list products with the field
software_affectedlistbut the fieldsource_certbund_productscontains useful information, then the vulnerability entry will list those as affected products.
Версия 19.5.0 (31.08.2025)
- Коммит b4b63Функциональность
Версия 19.4.3 (29.08.2025)
- Коммит 8b506ОптимизацияUser profiles provide a tooltip for the accepted vulnerability entry of a submit to see the title of the entry.
Версия 19.4.2 (28.08.2025)
- Коммит 42d76ОптимизацияPerformance improvement of application request blocking of very aggressive clients.
Версия 19.4.1 (27.08.2025)
- Коммит 525a3ОптимизацияIntroduction of a new network request limiter to block very aggressive clients.
Версия 19.4.0 (26.08.2025)
- Коммит 74b07ФункциональностьIntroduction of a new application request limiter to block very aggressive clients (e.g. scraping and flooding).
- Коммит 20f37ОптимизацияPerformance improvement of bursting request handling by the web platform.
Версия 19.3.0 (25.08.2025)
- Коммит 938d0Функциональность
Версия 19.2.0 (20.08.2025)
- Коммит 90b8fФункциональностьИзменение APIЗапрос клиентаIn API 3.84 the introduction of the request types
vendorlookupandproductlookupto provide a possibility for better product matching.
Версия 19.1.0 (19.08.2025)
- Коммит 8d677Функциональность
- Коммит 8a7c1ОптимизацияView optimization of the language selection on smaller screens.
Версия 19.0.0 (18.08.2025)
- Коммит 3d859ФункциональностьTotal overhaul of the language handling system to improve texts, descriptions, and details of the service. This will introduce the possibility to add new supported languages.
Версия 18.35.3 (17.08.2025)
- Коммит 23052ОптимизацияBetter HTML compression for authenticated users to provide faster, smaller, and more efficient content delivery.
- Коммит db90cОптимизацияImproved duplicate detection and handling for vulnerability submits.
Версия 18.35.2 (10.08.2025)
- Коммит 83d65ОптимизацияVulnerability titles on narrow views are optimized to discard irrelevant data points.
- Коммит b4a46ОптимизацияUsers are only listed as committers of vulnerability entries and CVE entries if their commits were approved. Unmoderated and rejected commits are not used.
Версия 18.35.1 (09.08.2025)
- Коммит 6c88cОптимизацияData in the CTI view per vulnerability entry is streamlined and provides better loading times.
Версия 18.35.0 (08.08.2025)
- Коммит c9346ФункциональностьЗапрос клиентаVulnerability entries and RSS vulnerability feeds enhance information regarding local and remote exploitability by physical possibilities.
- Коммит 5cd4bФункциональностьИзменение APIЗапрос клиентаIn API 2.46/3.83 introduction of the fields
exploit_physical,exploit_local, andexploit_remotewhich indicate theoretical exploit capabilities. - Коммит c32fcОптимизацияInformation about local and remote exploitability provide better accuracy.
Версия 18.34.0 (07.08.2025)
- Коммит 2e23fФункциональностьSimple search and advanced search provide improved lookups for CERT Bund WID identifiers.
Версия 18.33.0 (06.08.2025)
- Коммит d3b3dФункциональностьЗапрос клиентаSimple search and advanced search provide improved lookups for EUVD identifiers.
Версия 18.32.5 (21.07.2025)
- Коммит f6b40ОптимизацияChanging credit card information for existing customers announces the requirement for a login to finalize the action.
Версия 18.32.4 (18.07.2025)
- Коммит d5250ОптимизацияIP address classification better reflects IP address structures and age.
Версия 18.32.3 (17.07.2025)
- Коммит bb891ОптимизацияCyber threat intelligence views show count indicators for interest and vulnerabilities.
- Коммит 04b9cОптимизацияЗапрос клиентаSearch queries and filters are able to better handle special variants of characters like accents and Umlaute. This guarantees a better search experience with less risk for false-negatives.
Версия 18.32.2 (16.07.2025)
- Коммит cbc9aОптимизацияThe sub-menu of IP address views links to recent IP adresses instead of recent actors.
Версия 18.32.1 (15.07.2025)
- Коммит 6da2fОптимизацияDatabase structures, dependencies, and index handling was drastically optimized, which improves the performance of many complex queries.
Версия 18.32.0 (14.07.2025)
- Коммит 14073ФункциональностьИзменение APIIn API 3.82 introduction of the fields
source_certbund_wid,source_certbund_published,source_certbund_title,source_certbund_products,source_certbund_classification,source_certbund_basescore,source_certbund_tempscore,source_certbund_nopatch.
Версия 18.31.7 (13.07.2025)
- Коммит 6eaa5ОптимизацияVulnerability entries in other languages provide better translation for certain items.
Версия 18.31.6 (11.07.2025)
- Коммит 7004bОптимизацияView optimization of mail alert messages. CVSSv3 was renamed to CVSS and details at the bottom do not deploy an alignment anymore.
Версия 18.31.5 (10.07.2025)
- Коммит 620fbОптимизацияЗапрос клиентаStatistical data for views with old entries were blurried for free users. This limitation is now disabled to provide better possibilities to review the coverage and quality of our data.
Версия 18.31.4 (04.07.2025)
- Коммит f5e98ОптимизацияIn the submit view long descriptions are broken to provide better data accessibility.
Версия 18.31.3 (30.06.2025)
- Коммит 7a489ОптимизацияIn the submit moderation overview long descriptions are broken to provide better accessibility for moderators.
Версия 18.31.2 (28.06.2025)
- Коммит 1745bОптимизацияSlightly better loading times for the Live Updates View due to optimized query handling.
Версия 18.31.1 (26.06.2025)
- Коммит c485aИсправление ошибокFixed an issue where CVSSv4 scores by third parties with a value of 0.0 were not shown correctly.
Версия 18.31.0 (19.06.2025)
- Коммит b25dfФункциональностьIndicator in the site footer shows which data pool is used to serve the user.
Версия 18.30.1 (15.06.2025)
- Коммит 40bd7ОптимизацияPerformance improvement of al My Alert views.
Версия 18.30.0 (14.06.2025)
- Коммит 22b80ФункциональностьЗапрос клиентаComplete overhaul of the My Alert overview to provide more data and better accessibility. This includes total, maximum, and average CVSS scores per alert.
- Коммит 01b86ФункциональностьЗапрос клиентаMy Alert summaries can be shown per month to provide better accessibility to earlier alerts.
Версия 18.29.1 (10.06.2025)
- Коммит da6c0Исправление ошибокFixed an issue where in vulnerability overviews field data for CVSSv2 was wrongfully accessed via cache if the server was under heavy load.
- Коммит da6c0Исправление ошибокFixed an issue where in vulnerability overviews field data for CVSSv2 was wrongfully shown even though commits for it were rejected.
Версия 18.29.0 (07.05.2025)
- Коммит b9127ФункциональностьOpening a support ticket creates a unique ticket number to make tracking easier.
Версия 18.28.3 (06.06.2025)
- Коммит 17e13ОптимизацияCVE entries maintained by us as a CVE Numbering Authority (CNA) do also include temporal attributes for all the available CVSS vectors.
Версия 18.28.2 (04.06.2025)
- Коммит f2375ОптимизацияKEV views do not display the exploitability status anymore, because this is always Attacked anyway.
Версия 18.28.1 (02.06.2025)
- Коммит be29eОптимизацияPerformance optimization to handle load and access peaks much better.
Версия 18.28.0 (01.06.2025)
- Коммит eeb1aФункциональностьИзменение APIIn API 1.20/2.45/3.81 introduction of the value A (Attacked) for the field
exploit_exploitability. - Коммит 6f71bФункциональностьOverview lists of vulnerabilities which display exploitability information do now support the value Attacked to indicate entries which are known for real-word exploiting.
Версия 18.27.0 (19.05.2025)
- Коммит e0463ФункциональностьИзменение APIЗапрос клиентаIn API 3.80 introduction of a new CTI API query type
iplist_datewhich allows to fetch a list of IP addresses added on a specific date.
Версия 18.26.1 (14.05.2025)
- Коммит 17f96ОптимизацияLayout of email notification for password changes optimized.
Версия 18.26.0 (13.05.2025)
- Коммит faa4eФункциональностьИзменение APIЗапрос клиентаIn API 3.79 introduction of the field
source_euvd_idto reflect identifiers of the European Union Vulnerability Database.
Версия 18.25.3 (08.05.2025)
- Коммит 8f54aОптимизацияЗапрос клиентаPermabans of weak comments was too aggressive and affected users which did not violate any expectations. This issue was reported by user portal.
Версия 18.25.2 (04.05.2025)
- Коммит a5f89ОптимизацияImprovement of category and confidence tagging of Indicators of Compromise (IOC).
Версия 18.25.1 (27.04.2025)
- Коммит 613efОптимизацияImprovement of automated spam detection for comment posting of vulnerability entries. Malicious users are automatically temporarily or permanently banned from postig if they violate the terms.
Версия 18.25.0 (26.04.2025)
- Коммит 004c0ФункциональностьИзменение APIIn API 3.78 introduction of the fields
source_cnvd_id,source_cnvd_submit,source_cnvd_open,source_cnvd_severity, andsource_cnvd_title.
Версия 18.24.1 (25.04.2025)
- Коммит 9d0ffОптимизацияЗапрос клиентаThe creation of version ranges of affected vulnerabilities does provide a more accurate upper bound value. This improves accuracy of version lists and CPE lists alike.
Версия 18.24.0 (23.04.2025)
- Коммит 93434ФункциональностьИзменение APIЗапрос клиентаIn API 3.77 introduction of the virtual fields
source_gcve_cveandsource_gcve_vuldbto highlight our activity as GCVE Numbering Authority (GNA) for the Global CVE Allocation System (GCVE).
Версия 18.23.1 (22.04.2025)
- Коммит 5e790ОптимизацияList of comments for vulnerability entries show the title of the entry as the tool tip of the VDB identifier.
- Коммит 5e790ОптимизацияList of comments for vulnerability entries show the associated CVE in a dedicated column to provide better accessibility.
Версия 18.23.0 (20.04.2025)
- Коммит e6859ФункциональностьЗапрос клиентаDedicated dashboard for Global CVE Allocation System (GCVE) available with most recent entries and their associated mappings.
- Коммит b752bФункциональностьЗапрос клиентаThe export section does provide free access to Global CVE Allocation System (GCVE) reference maps.
Версия 18.22.3 (19.04.2025)
- Коммит 3a614ОптимизацияHiding unavailble fields of commit details which are not moderated yet.
Версия 18.22.2 (18.04.2025)
- Коммит 5a426ОптимизацияVulnerability entries contain the GCVE identifier of CVE (range 0) and VulDB (range 100) if available.
Версия 18.22.1 (17.04.2025)
- Коммит 64514ОптимизацияЗапрос клиентаImprovement of the accuracy of the virtual field
exploit_exploitabilitywhich will assess multiple other fields to determine the most reasonable value.
Версия 18.22.0 (16.04.2025)
- Коммит e0f77ФункциональностьVulDB has officially become a GCVE Numbering Authority (GNA) for the Global CVE Allocation System (GCVE). Our namespace is
100and GCVE identifiers are derived from our VDB identifiers. GCVE identifiers are shown in the header and the source section of vulnerability entries.
Версия 18.21.6 (03.04.2025)
- Коммит e3929ОптимизацияCVSS score handling of new commits in vulnerability entries is more robust.
Версия 18.21.5 (31.03.2025)
- Коммит af45cИсправление ошибокThe average amount of vulnerability entry updates was not calculated correctly for the statistical overview.
Версия 18.21.4 (30.03.2025)
- Коммит c690aОптимизацияImprovement of performance by cleaning up unused code. Especially legacy code that was used for megablock handling.
Версия 18.21.3 (29.03.2025)
- Коммит 96bb8ОптимизацияImprovement of the view of commit details to provide better data accessibility.
Версия 18.21.2 (28.03.2025)
- Коммит a2393Исправление ошибокMail alerts were sent with the wrong language which has been reverted to being sent always in English.
Версия 18.21.1 (27.03.2025)
- Коммит 750afОптимизацияBetter weighting of CTI activity scores for older vulnerability entries.
Версия 18.21.0 (25.03.2025)
- Коммит a743bФункциональностьImprovement of CTI activity signal handling to better extract highly important entries and to demote older vulnerabilities.
Версия 18.20.4 (20.03.2025)
- Коммит 35505Исправление ошибокFixed an issue in certain CTI views were the amount of references and samples was not displayed correctly.
Версия 18.20.3 (19.03.2025)
- Коммит 5e5caОптимизацияImprovement of translation of the web service to provide a better wording and reflect cultural context in details.
Версия 18.20.2 (12.03.2025)
- Коммит 8b65dОптимизацияImproved accessibility of submit moderation to increase performance and quality.
Версия 18.20.1 (11.03.2025)
- Коммит 98de0ОптимизацияPerformance improvements of chart views which do not include timeseries data.
Версия 18.20.0 (10.03.2025)
- Коммит 4a434ФункциональностьAdditional predictive view for Known Exploited Vulnerabilities which includes issues which might get added to the catalogue in the future.
Версия 18.19.1 (09.03.2025)
- Коммит 72ac9ОптимизацияOptimization of the monoblock database engine to increase performance for certain special queries.
Версия 18.19.0 (05.03.2025)
- Коммит 8ef0dФункциональностьЗапрос клиентаWe provide a very accessible view for all recent entries declared as Known Exploited Vulnerabilities by CISA.
Версия 18.18.1 (02.03.2025)
- Коммит adeb6Исправление ошибокFixed an issue where certain CVSSv4 CNA vector values were not stored properly during update processes. This affected updates happening between 2025-02-24 and 2025-03-01. They will be corrected in a later update run.
Версия 18.18.0 (28.02.2025)
- Коммит 391ceФункциональностьThe form to submit new vulnerabilities informs users about delays due to many open items waiting to be processed in the queue already.
Версия 18.17.3 (27.02.2025)
- Коммит a3a19Исправление ошибокИзменение APIFixed an issue where the renewal for an API key did not show a login prompt if an unauthenticated user accessing the feature.
Версия 18.17.2 (24.02.2025)
- Коммит 7b151Исправление ошибокFixed an issue where vulnerability entries without a CVSSv4 impact were not shown correctly in overview lists and detail views.
Версия 18.17.1 (20.02.2025)
- Коммит 61977Исправление ошибокFixed an issue where votes for threads of vulnerability comments were not possible on certain instances.
Версия 18.17.0 (18.02.2025)
- Коммит f2efeФункциональностьЗапрос клиентаWe provide a statistical overview of all CWE that are used in our vulnerability database entries.
Версия 18.16.3 (17.02.2025)
- Коммит 9b5d0ОптимизацияPerformance and stability optimization of vulnerability database queries.
Версия 18.16.2 (16.02.2025)
- Коммит d4857ОптимизацияVulnerability submissions with weak or wrong disclosure links get much less community points.
Версия 18.16.1 (02.02.2025)
- Коммит 861aaОптимизацияCleaning obsolete code of features like threat intelligence, vulnerability edit handling, worldmap display, and blocklist maintenance.
Версия 18.16.0 (29.01.2025)
- Коммит c9cdbФункциональностьList of users with top activities shows number of points per year on average as well.
Версия 18.15.2 (20.01.2025)
- Коммит 10affИсправление ошибокFixed an issue where complex searches regarding affected versions were not returning all associated results correctly.
Версия 18.15.1 (19.01.2025)
- Коммит 369b1ОптимизацияImproved handling of version data of Linux Kernel vulnerability entries.
Версия 18.15.0 (16.01.2025)
- Коммит 91aefФункциональностьIt is possible to review commits live as well to see ongoing and upcoming changes to vulnerability entries.
Версия 18.14.9 (15.01.2025)
- Коммит c4721Исправление ошибокFixed a rare issue where certain extended search queries were not able to collect the necessary vulnerability information.
Версия 18.14.8 (13.01.2025)
- Коммит 92072ОптимизацияИзменение APIIn API 2.44/3.76 the ETag header of API responses is compressed to provide better performance.
Версия 18.14.7 (05.01.2025)
- Коммит f402cОптимизацияPublic vulnerability submits automatically hide real-world IP addresses to prevent any form of privacy leakage.
Версия 18.14.6 (29.12.2024)
- Коммит d5923Исправление ошибокVulnerability entries with open edits were not properly rendered in user profiles.
Версия 18.14.5 (26.12.2024)
- Коммит a077dОптимизацияEmbargoed vulnerability submits are hidden on smaller screens to provide better visibility for important submits.
Версия 18.14.4 (23.12.2024)
- Коммит 9a559ОптимизацияEditing a vulnerability entry will show a small tutorial to help new users enriching existing entries.
Версия 18.14.3 (22.12.2024)
- Коммит 60777ОптимизацияBetter value analysis of vulnerability submissions to establish temporary and permanent bans of malicious activities.
Версия 18.14.2 (21.12.2024)
- Коммит dd0d7ОптимизацияThe reference map for Tools also lists Qualys identifiers.
Версия 18.14.1 (20.12.2024)
- Коммит fa758ОптимизацияBetter value analysis of vulnerability commits to establish temporary or permanent bans of malicious activities.
Версия 18.14.0 (19.12.2024)
- Коммит 54d4bФункциональностьИзменение APIЗапрос клиентаIn API 3.75 the CTI API support the new query type
sectorwhich shows recent activities targeting specific sectors.
Версия 18.13.0 (16.12.2024)
- Коммит da7dcФункциональностьИзменение APIЗапрос клиентаIn API 3.74 most CTI queries may include targeted software types and sectors.
Версия 18.12.6 (12.12.2024)
- Коммит 13bd3ОптимизацияИзменение APIIn API 3.73 requesting CTI queries listing associated countries are now sorted in descending order of activity detection.
Версия 18.12.5 (06.12.2024)
- Коммит 1081dОптимизацияUpdate of most active countries for CTI data is much faster and demands less memory.
Версия 18.12.4 (05.12.2024)
- Коммит 6cc69Исправление ошибокИзменение APIЗапрос клиентаIn API 3.72 fixed an issue where VulDB CVSSv4 scores with a value of 0.0 were not shown properly. This affected just a few vulnerability entries. Thanks to Ryan Egbert for reporting this issue.
- Коммит 6cc69Исправление ошибокИзменение APIЗапрос клиентаIn API 3.72 fixed an issue where external CVSSv4 sources did not always contain
vulnerability_cvss4_cna_bvectorandvulnerability_cvss4_cna_btvectorfields. Thanks to Ryan Egbert for reporting this issue.
Версия 18.12.3 (30.11.2024)
- Коммит 7b1beОптимизацияFaster and more accurate merge of CPE data provided by NVD with our own CPE data.
Версия 18.12.2 (28.11.2024)
- Коммит 534e8ОптимизацияИзменение APIOptimization of personal views for access history, search history, and API history.
Версия 18.12.1 (25.11.2024)
- Коммит 0bb99ОптимизацияImproved generation of CSRF tokens to increase complexity of successful CSRF attacks.
Версия 18.12.0 (21.11.2024)
- Коммит 573a5ФункциональностьIntroduction of a new advanced search with additional artificial intelligence capabilities. Queries are much faster and provide better accuracy.
Версия 18.11.0 (19.11.2024)
- Коммит 17636ФункциональностьIntroduction of a new simple search with additional artificial intelligence capabilities. Queries are much faster and provide better accuracy.
Версия 18.10.1 (13.11.2024)
- Коммит 30cdeИсправление ошибокFixed an issue where under certain circumstances a listing of affected version numbers was not ordered properly.
Версия 18.10.0 (08.11.2024)
- Коммит b7453ФункциональностьЗапрос клиентаProviding a new overview of CTI identifiers and warnings to help to determine emerging threats quickly.
Версия 18.9.7 (06.11.2024)
- Коммит 2c281ОптимизацияBetter duplicate action detection and processing warning during vulnerability moderation.
Версия 18.9.6 (05.11.2024)
- Коммит f5ab6ОптимизацияVulnerability entries with merged CPE data originating from NVD respect the different splitting methodologies to prevent data overloading between affected products.
Версия 18.9.5 (04.11.2024)
- Коммит e6800ОптимизацияVulnerability relate views show associated CVE identifiers for better analysis capabilities.
- Коммит f1d3fОптимизацияPerformance optimization of see also data of vulnerability entries.
Версия 18.9.4 (03.11.2024)
- Коммит 3227dОптимизацияRepositioning of expiring password information hint in the user menu.
- Коммит f3710ОптимизацияPerformance optimization of complex vulnerability views.
- Коммит f3710ОптимизацияPerformance optimization of CTI actor views.
Версия 18.9.3 (02.11.2024)
- Коммит f135fОптимизацияPerformance optimization of vulnerability live views.
- Коммит f135fОптимизацияPerformance optimization of file integrity checks.
Версия 18.9.2 (01.11.2024)
- Коммит ed9c3ОптимизацияImproved speed of collecting and displaying CTI data in vulnerability entries (requires a CTI license).
Версия 18.9.1 (29.10.2024)
- Коммит 2cee7ОптимизацияИзменение APIIn API 3.71 improves the generation of Vulnerability API CTI values enabled with
cti=1drastically.
Версия 18.9.0 (28.10.2024)
- Коммит ce30bФункциональностьИзменение APIЗапрос клиентаIn API 3.70 introduces the Vulnerability API CTI fields
cti_activity_ipaddr,cti_ioa_file,cti_ioa_library,cti_ioa_argument,cti_ioa_inputvalue,cti_ioa_pattern,cti_ioa_networkport,cti_ttp_attck,cti_ttp_cwe, andcti_ttp_capec.
Версия 18.8.3 (26.10.2024)
- Коммит c0ee8ОптимизацияVulnerability diff views now display up to 5 changes of an entry to provide better analysis possibilities.
Версия 18.8.2 (25.10.2024)
- Коммит 5de35ОптимизацияVulnerability diff views always show up to the last 4 changes of an entry, no matter if it was the initial creation or succeeding updates.
Версия 18.8.1 (24.10.2024)
- Коммит fad87ОптимизацияImproved wording for the temporary authentication of embargoed submits.
- Коммит 20ee8Исправление ошибокFixed an issue where CVSSv2 and CVSSv3 temp scores were updated properly but the underlying vectors were updated delayed. This affected VulDB vectors only.
- Коммит e7432Исправление ошибокИзменение APIЗапрос клиентаFixed a very rare issue where the JSON format of the API did not list versions properly. Thanks to the user bors2908 for reporting this issue.
Версия 18.8.0 (23.10.2024)
- Коммит 8ab0aФункциональностьИзменение APIЗапрос клиентаUsers are able to rotate their personal API key. This will revoke the existing API key which will then require to deploy the new API key on all clients (e.g. Splunk).
Версия 18.7.1 (22.10.2024)
- Коммит 60c2aИсправление ошибокЗапрос клиентаFixed a bug where some emails were sent with wrong end-of-line characters.
Версия 18.7.0 (18.10.2024)
- Коммит 4be6aФункциональностьЗапрос клиентаThe Cyber Threat Intelligence platform does not provide details about IP addresses. A CTI license is required to get full access.
Версия 18.6.8 (17.10.2024)
- Коммит 05b00ОптимизацияThe statistical view shows additional details about cyber threat intelligence (actor monitoring and exploit identification).
Версия 18.6.7 (14.10.2024)
- Коммит 18e76ОптимизацияImprovement of vulnerability titles containing complex file name structures.
Версия 18.6.6 (13.10.2024)
- Коммит 950f4Исправление ошибокFixed an issue where certain products were flagged as end of life even though that was not true.
Версия 18.6.5 (12.10.2024)
- Коммит 08e5aИсправление ошибокFixed an issue where CVSSv4 vectors of sources without CVSS-BT data were transponding these fields from the VulDB vector data which could lead to sometimes confusing assignments.
Версия 18.6.4 (11.10.2024)
- Коммит 797c4ОптимизацияИзменение APIЗапрос клиентаIn API 1.19/2.43/3.69 the CSV output format contains additional CVSS scoring fields.
Версия 18.6.3 (09.10.2024)
- Коммит 5ffedОптимизацияWithin vulnerability diff views all data fields based on unix timestamps show human-readable dates as well.
Версия 18.6.2 (27.09.2024)
- Коммит a7c8aОптимизацияPrioritizing Nessus Plugin ID in vulnerability entry headers.
Версия 18.6.1 (23.09.2024)
- Коммит 419a8Исправление ошибокUnder certain circumstances the calculation of community points was not correct which lead to a decrease in collected points. Thanks to the user guru for reporting this issue.
Версия 18.6.0 (22.09.2024)
- Коммит 45d0dФункциональностьLinked certain CTI views to the according knowledge base entries (e.g. actors, countries, events).
Версия 18.5.0 (21.09.2024)
- Коммит c23e4ОптимизацияAdded a symbol to all views that require moderation or administrative permissions.
- Коммит aac87ФункциональностьИзменение APIAdded CNA and API details to the CVE sync view which requires CNA or vulnerability moderation permissions.
Версия 18.4.13 (20.09.2024)
- Коммит 5030cОптимизацияHighlighted and tagged all main menu items that require moderation or administrative permissions.
- Коммит dbbf5ОптимизацияImproved the view and capabilities of the manual vulnerability import feature available to vulnerability moderators.
Версия 18.4.12 (19.09.2024)
- Коммит 7d964ОптимизацияEnhanced the wording for vulnerability coordination emails to reflect possibilities for quotes in CVE summaries better.
Версия 18.4.11 (17.09.2024)
- Коммит 456c0ОптимизацияBetter evening out anomalies during CTI activity score detection to provide more accurate results.
Версия 18.4.10 (16.09.2024)
- Коммит 5a06cОптимизацияListings of vulnerability submits show the granted community points to honor better submission entries.
- Коммит 854a0ОптимизацияVulnerability submit entries show assigned points for non-authenticated users as well.
Версия 18.4.9 (15.09.2024)
- Коммит 1efeeОптимизацияRe-caclulation of all points for vulnerability submits to penalize weak submission entries more (e.g. missing product details, very short descriptions).
Версия 18.4.8 (14.09.2024)
- Коммит 052f0ОптимизацияListing members of the vulnerability moderation team in the vulnerability moderation view.
- Коммит 89d2bОптимизацияImproved action forms in the vulnerability moderation view.
Версия 18.4.7 (13.09.2024)
- Коммит df251ОптимизацияAutomated expiration of moderation rights for admin users.
Версия 18.4.6 (12.09.2024)
- Коммит af51eОптимизацияListing members of the actor moderation team in the actor import view.
Версия 18.4.5 (09.09.2024)
- Коммит cf860ОптимизацияBetter performance to import new Indicators of Compromise (IOC) for malicious actors.
Версия 18.4.4 (04.09.2024)
- Коммит 6c28eОптимизацияHistory views of vulnerability entries show the username instead of the user in the chart legend.
- Коммит 6c28eОптимизацияHistory views of vulnerability entries show shortened field names in the chart legend.
- Коммит 6c28eОптимизацияHistory views of vulnerability entries list commits and approvals with 0 confidence as well in the charts.
Версия 18.4.3 (03.09.2024)
- Коммит 400a0Исправление ошибокFixed an issue where vulnerability entries sometimes mention a fix timeline even though there is no fix available.
Версия 18.4.2 (31.08.2024)
- Коммит 2a249ОптимизацияImproved display of long submit titles on small displays like smart phones.
Версия 18.4.1 (28.08.2024)
- Коммит ca544ОптимизацияOptimized database connection handling to improve performance and decrease ressource occupancy on the servers.
Версия 18.4.0 (27.08.2024)
- Коммит 7a8cbФункциональностьLinking to the RSS feed of the changelog in the HTML header for easier accessibility.
Версия 18.3.2 (26.08.2024)
- Коммит 59fafОптимизацияImproved the handling of vulnerability titles if many names are listed as affected vendor.
Версия 18.3.1 (25.08.2024)
- Коммит 1909dОптимизацияThe assignment of points for submits is more strict but takes details into consideration (e.g. technical details in descriptions).
Версия 18.3.0 (24.08.2024)
- Коммит 0d864ФункциональностьPublic user profiles show details about their community engagement with posts and comments.
- Коммит 3e979ОптимизацияThe view for personal posts history is improved and contains additional details.
Версия 18.2.0 (23.08.2024)
- Коммит 6c1a6ФункциональностьPublic user profiles show details about their community engagement like recent submits and commits.
Версия 18.1.7 (22.08.2024)
- Коммит 2e090ОптимизацияThe view for personal search history is improved and contains additional details.
- Коммит 44262Исправление ошибокFixed an issue were large vulnerability lists were sometimes not showing special characters properly due to an encoding problem.
Версия 18.1.6 (21.08.2024)
- Коммит 49395ОптимизацияVulnerability titles with unusual vulnerability classes explain those whenever possible and do not just show "unknown vulnerability" anymore.
- Коммит 8db81ОптимизацияThe view for personal submits is improved and contains additional stats and more details.
- Коммит d167fИсправление ошибокFixed a very rare issue where internal moderators were not able to debug search queries properly.
Версия 18.1.5 (20.08.2024)
- Коммит 971a6Исправление ошибокUnder certain circumstances the CPE string for products with dedicated patch levels was not shown correctly.
Версия 18.1.4 (17.08.2024)
- Коммит 39bc4ОптимизацияEditing a vulnerability entry will warn if a deprecated CWE value is selected.
Версия 18.1.3 (11.08.2024)
- Коммит 15e3fОптимизацияViews with user avatars are loaded much faster thanks to multiple query optimization techniques.
- Коммит e1f4fОптимизацияColor of duplicate submissions set to a darker orange tone to highlight that they are not very useful.
Версия 18.1.2 (10.08.2024)
- Коммит 80e03Исправление ошибокFixed an issue where the recent chart on the front page was not updated properly when the service was under heavy load.
Версия 18.1.1 (09.08.2024)
- Коммит b7371ОптимизацияOptimized the exploit 0day price calculation which was sometimes too low.
- Коммит 1ad05ОптимизацияSubmit overviews will show users even on smaller screens.
- Коммит f6871ОптимизацияThe personal avatar is shown in the side menu as well (instead of the old user icon).
Версия 18.1.0 (08.08.2024)
- Коммит 91a5fФункциональностьЗапрос клиентаCommunity users are able to create their individual avatars in their profile settings.
- Коммит 91a5fФункциональностьCommunity user avatars are shown in lists, submits, commits, and posts.
Версия 18.0.0 (07.08.2024)
- Коммит 6b586ФункциональностьЗапрос клиентаAll community user submits are now public and accessible to provide full transparency.
- Коммит b9313ФункциональностьA new live view shows the most recent community user submits.
Версия 17.29.0 (06.08.2024)
- Коммит 4f9b9ФункциональностьIt is easier possible to change the password of existing accounts without using the password reset process.
- Коммит 091b3ФункциональностьAll password changes are reported to the associated mail address.
Версия 17.28.10 (02.08.2024)
- Коммит 49614ОптимизацияЗапрос клиентаOptimized queries and performance for personal My-Views (Recent, Updates, and Alerts).
Версия 17.28.9 (01.08.2024)
- Коммит a64d7ОптимизацияShort vulnerability titles do also show affected file names even if large quantities of GET parameters are necessary.
Версия 17.28.8 (28.07.2024)
- Коммит 697deОптимизацияEditing vulnerability entries loads forms and dependencies much faster.
Версия 17.28.7 (27.07.2024)
- Коммит a07e4ОптимизацияThe overview ob submits hides blurried items on small screens to provide better accessibility.
Версия 17.28.6 (24.07.2024)
- Коммит 8bc47ОптимизацияCTI views of vulnerabilities are able to link the correct actor or campaign based on associated vulnerability names.
Версия 17.28.5 (23.07.2024)
- Коммит a3456ОптимизацияVulnerability history views do not have links to new data anymore if the data value is empty (e.g. an existing data point was deleted).
Версия 17.28.4 (20.07.2024)
- Коммит a7ec5ОптимизацияStatistical overviews of vulnerability submits done by users is introducing color codes to make them more readable.
Версия 17.28.3 (18.07.2024)
- Коммит 0aeaaОптимизацияIndicators for CERT vulnerabilities are more prominent and link directly to the according advisory.
- Коммит e4a9dОптимизацияDiff views for vulnerabilities now indicate the creation of an entry and the dedicated updatesets.
- Коммит 04f0fИсправление ошибокИзменение APIFixed an issue where under certain circumstances paying customers with additional free API credits were shown negative values for available API credits in their user profile.
Версия 17.28.2 (17.07.2024)
- Коммит df755ОптимизацияImproved CVE range search to prevent long queries.
- Коммит f3eb9ОптимизацияReordered sources in vulnerability entries to better reflect availability and popularity.
Версия 17.28.1 (16.07.2024)
- Коммит 0b780ОптимизацияVulnerability history views highlight rollbacks and reverts to distinguish them from regular rejects.
Версия 17.28.0 (04.07.2024)
- Коммит 45cc8ФункциональностьИзменение APIЗапрос клиентаIn API 2.42/3.68 introduced the fields
source_cnnvd_id,source_cnnvd_name,source_cnnvd_hazardlevel,source_cnnvd_create,source_cnnvd_publish, andsource_cnnvd_update.
Версия 17.27.0 (03.07.2024)
- Коммит e5f8eФункциональностьCertain views like Live Recent show a column with the responsible CNA.
Версия 17.26.1 (30.06.2024)
- Коммит 6f955ОптимизацияSource monitoring parsing optimized for new CVSSv4 vectors provided by external parties (e.g. CVE, CISA).
Версия 17.26.0 (29.06.2024)
- Коммит 5ccf0ФункциональностьVulnerability views for history and diff show the count of established commits.
Версия 17.25.4 (25.06.2024)
- Коммит 45ee7ОптимизацияVulnerability diff views are able to show 4 instead of just 3 generations of updated collections.
- Коммит 45ee7ОптимизацияVulnerability history views provide optimized field names for better layouting and clarity.
Версия 17.25.3 (22.06.2024)
- Коммит 92046ОптимизацияPerformance optimization of the vulnerability database tables to make them smaller and faster to work with.
Версия 17.25.2 (19.06.2024)
- Коммит b1b1aОптимизацияImproved the structure of notification emails if a login of a new device was detected.
Версия 17.25.1 (18.06.2024)
- Коммит d774aИсправление ошибокИзменение APIIn API 3.67 fixed a bug which affected IP address based CTI queries with partially missing indicators.
Версия 17.25.0 (16.06.2024)
- Коммит 9b733ФункциональностьИзменение APIIn API 2.41/3.66 introduced the fields
source_0daytoday_id,source_0daytoday_date, andsource_0daytoday_title.
Версия 17.24.0 (14.06.2024)
- Коммит 26795ФункциональностьИзменение APIIn API 2.40/3.65 introduced the fields
source_milw0rm_idandsource_milw0rm_unavailablefor historical purposes.
Версия 17.23.0 (11.06.2024)
- Коммит 672d2ФункциональностьThe reliability level of IOCs degrades over time and is better shown with the confidence indicator.
Версия 17.22.0 (09.06.2024)
- Коммит f4433ФункциональностьVulnerability lists and vulnerability entries mentioning zero-day.cz do properly link to the source entry.
Версия 17.21.0 (08.06.2024)
- Коммит 2ecd8ФункциональностьVulnerability list overviews with EPSS scores show a tooltip with the associated EPSS percentile value.
- Коммит 2ecd8ФункциональностьVulnerability list overviews with revoked CVE identifiers show a tooltip with the reasoning.
Версия 17.20.1 (06.06.2024)
- Коммит 63c1cОптимизацияИзменение APIThe detail view for personal API access history items is optimized to provide a better overview.
Версия 17.20.0 (03.06.2024)
- Коммит 0e4d1ФункциональностьИзменение API
Версия 17.19.3 (01.06.2024)
- Коммит 99084ОптимизацияPerformance optimization of database queries for vulnerability entries.
Версия 17.19.2 (28.05.2024)
- Коммит a51a7ОптимизацияOptimized the language menu view to make it better readable.
Версия 17.19.1 (27.05.2024)
- Коммит cdf1bОптимизацияCommit histories of vulnerability entries flag not accepted commits and reverted commits differently.
Версия 17.19.0 (26.05.2024)
- Коммит ddbe8ФункциональностьThe most important articles in the Knowledge Base are tagged to make access for new users easier.
Версия 17.18.2 (18.05.2024)
- Коммит ff750ОптимизацияBehavior of vulnerability submits is shown in all user profiles of community member that have made at least one vulnerability submission.
Версия 17.18.1 (15.05.2024)
- Коммит 8644aОптимизацияLayout optimization of the relate table view for vulnerability entries.
Версия 17.18.0 (14.05.2024)
- Коммит 5c336ФункциональностьIntroduction of the relate view for vulnerability entries which shows associated vulnerabilities based on affected elements.
Версия 17.17.4 (13.05.2024)
- Коммит debd2ОптимизацияVulnerability entries show other associated and similar entries much better.
Версия 17.17.3 (12.05.2024)
- Коммит 6e778ОптимизацияUpdating all references to align with the new structure of the upcoming CNA Rules 4.0.
Версия 17.17.2 (10.05.2024)
- Коммит 66367ОптимизацияCompleting version data for known products based on historical data is improved regarding quality and performance.
Версия 17.17.1 (08.05.2024)
- Коммит 8d986ОптимизацияPerformance improvement of historical version analysis provides a better user experience when accessing vulnerability enrtries.
Версия 17.17.0 (07.05.2024)
- Коммит c8039ФункциональностьVulnerability entries contain the cache identifier to better associate activities to user groups.
Версия 17.16.2 (05.05.2024)
- Коммит f65a0ОптимизацияVulnerability submission entries link better to the associated vulnerability entry.
- Коммит f65a0ОптимизацияVulnerability submissions link to the current process step as explained in the Knowledge Base.
Версия 17.16.1 (29.04.2024)
- Коммит 6c2e6ОптимизацияЗапрос клиентаThe CPE list is automcompleted based on historical data if a countermeasure version is known but affected versions are unknown.
Версия 17.16.0 (27.04.2024)
- Коммит 79b0dФункциональностьApproved vulnerability submits are also published within a new RSS feed to make analysis of new vulnerability entries much easier.
Версия 17.15.1 (25.04.2024)
- Коммит 05482Исправление ошибокFixed an issue where under some rare circumstances some vulnerability entries did not show the CPE strings.
Версия 17.15.0 (24.04.2024)
- Коммит 08a14ФункциональностьVulnerability entries list associated CAPEC identifierts.
Версия 17.14.0 (23.04.2024)
- Коммит 07133ФункциональностьИзменение APIIn API 3.63 CTI responses may contain the field
capecwhich lists all associated CAPEC items.
Версия 17.13.0 (22.04.2024)
- Коммит b56acФункциональностьCTI views containing TTP (Tactics, Techniques, Procedures) information do also list associated CAPEC (Common Attack Pattern Enumeration and Classification) data.
Версия 17.12.0 (19.04.2024)
- Коммит 94d29ФункциональностьЗапрос клиентаAll fields about the CISA Known Exploited Vulnerabilities Catalog (KEV) were upgraded from virtual fields to monoblock fields. As of today changes will be reflected in updates as well.
Версия 17.11.1 (17.04.2024)
- Коммит b9de6ОптимизацияWithin vulnerability detail views the link for CPE strings is optimized to provide better search results on NVD.
Версия 17.11.0 (14.04.2024)
- Коммит 37e20ФункциональностьSome CTI list views show the EPSS percentile value to better assess exploiting risks for vulnerabilities.
- Коммит 079a3ОптимизацияAll list views containing date or time values support tooltips which show how long ago an event happened.
Версия 17.10.0 (13.04.2024)
- Коммит 13074ФункциональностьAll vulnerability list views associated with our work as a CVE Numbering Authority show the associated user submission to improve and simplify research capabilities.
- Коммит 12479ОптимизацияIn some vulnerability list views the columns EPSS and CTI were swapped to show CTI values as last data point.
Версия 17.9.1 (12.04.2024)
- Коммит 52022Исправление ошибокЗапрос клиентаFixed a rare issue where lists of versions were not created properly.
Версия 17.9.0 (09.04.2024)
- Коммит e278eФункциональностьIf a user made some vulnerability submissions these are shon in the personal user profile.
Версия 17.8.1 (08.04.2024)
- Коммит 2dcc5ОптимизацияImproved the vulnerability submission quality analaysis system to provide fair blacklisting due to weak submissions.
Версия 17.8.0 (03.04.2024)
- Коммит efec4ФункциональностьИзменение APIIn API 3.62 introduced additional detail fields for CISA Known Exploited Vulnerabilities Catalog data with the structure
exploit_kev_*.
Версия 17.7.1 (02.04.2024)
- Коммит e3042ОптимизацияЗапрос клиентаAvailability of CPE for vulnerabilities is drastically improved as they are compiled based on historical data and different sources as well.
Версия 17.7.0 (01.04.2024)
- Коммит f0176ФункциональностьЗапрос клиентаVulnerability entries contain updated information by the CISA Known Exploited Vulnerabilities Catalog (KEV).
- Коммит a46bbИсправление ошибокИзменение APIIn API 1.18/2.38/3.61 fixed an issue where under certain circumstances the field
software_versiondid not contain the available items.
Версия 17.6.4 (31.03.2024)
- Коммит 6c8e5ОптимизацияPerformance improvement of updates of the internal EPSS data storage.
Версия 17.6.3 (30.03.2024)
- Коммит ae76cОптимизацияImprovement of automated blocking of malicious users.
Версия 17.6.2 (29.03.2024)
- Коммит c8646ОптимизацияImproved performance of generation and display of commit detail views.
Версия 17.6.1 (28.03.2024)
- Коммит 223deОптимизацияDisabled delayed caching for certain views to provide better data in real-time.
Версия 17.6.0 (26.03.2024)
- Коммит 1003aФункциональностьЗапрос клиентаIt is possible to see all successfully processed vulnerability submissions. This raw data helps to get a better understanding of the structure of a security issue.
- Коммит b415cФункциональностьVulnerability entries that are based on a submission by a VulDB community user list the associated submissions.
Версия 17.5.1 (25.03.2024)
- Коммит 669e0ОптимизацияИзменение APIImproved CTI actors associated with a vulnerability entry is delivered via Vulnerability API which provides increased data quality.
Версия 17.5.0 (23.03.2024)
- Коммит 55fecФункциональностьPage titles contain an info button which links to the knowledge base article which is associated with a page view.
Версия 17.4.0 (21.03.2024)
- Коммит 9dc56ФункциональностьИзменение APIAPI 3.60 introduced additional detail fields for CVSS data:
_basevectorand_tempvectorfor all,_baseseverityand_tempseverityfor CVSSv2 and CVSSv3,_bseverityand_btseverityfor CVSSv4.
Версия 17.3.1 (20.03.2024)
- Коммит 0cf6eИсправление ошибокUnder certain circumstances yearly statistics for CVSSv4 entries were not updating properly.
Версия 17.3.0 (19.03.2024)
- Коммит c8e35ФункциональностьИзменение APIЗапрос клиентаIn API 3.59 added support for CVSSv4 with the fields family
vulnerability_cvss4_vuldb_*.
Версия 17.2.0 (18.03.2024)
- Коммит b7147ФункциональностьCVSSv4 scores in vulnerability entries are clickable to learn more about the generation of such scores.
- Коммит b7147ФункциональностьCVSSv4 scores do also show the reliability level of the scoring assignment like we already do for CVSSv3 scores.
Версия 17.1.0 (17.03.2024)
- Коммит 026acФункциональностьЗапрос клиентаDedicated view for CVSSv4 scores is available. All entries in our database do support CVSS-B and CVSS-BT scores.
Версия 17.0.0 (16.03.2024)
- Коммит 357ceФункциональностьЗапрос клиентаVulnerability entries display CVSSv4 scores (CVSS-B as Base and CVSS-BT as Temp). The main CVSS scores remain based on CVSSv3 until CVSSv4 is well-accepted in the industry.
Версия 16.30.6 (23.02.2024)
- Коммит 49ba9ОптимизацияCTI data shown for vulnerability entries provides better identification of predictive and verified indicators.
Версия 16.30.5 (19.02.2024)
- Коммит c912dОптимизацияИзменение APIЗапрос клиентаStrong performance improvement of CTI data requests within the Vulnerability API and the CTI API in general.
Версия 16.30.4 (18.02.2024)
- Коммит f694cОптимизацияVulnerability entries that show CTI data will list countries with their proper name.
- Коммит 20626ОптимизацияPerformance improvement if CTI data is shown in vulnerability entries.
Версия 16.30.3 (17.02.2024)
- Коммит d0970ОптимизацияComments of vulnerability entries awaiting moderation or being rejected show more details for the posting user.
Версия 16.30.2 (16.02.2024)
- Коммит e616dОптимизацияCommunity points for posts are added during the approval process.
Версия 16.30.1 (13.02.2024)
- Коммит 686daОптимизацияCVE fields during the editing of a vulnerability are protected if VulDB is the official CNA for that assignment.
Версия 16.30.0 (07.02.2024)
- Коммит 9f123ФункциональностьA list of the top active community members is available. Users that enabled their privacy settings are shown as anonymous members.
- Коммит 482f4ФункциональностьA longer list of the most recent users is available. Users that enabled their privacy settings are shown as anonymous members.
Версия 16.29.4 (06.02.2024)
- Коммит 14d6eОптимизацияSlight changes of community user level calculations.
- Коммит f7ccaОптимизацияIntroduction of two new community user levels Senior Expert and Superguru.
- Коммит d63d6ОптимизацияDuring the setup procedure new users are asked to set their new username and password to prevent any confusion.
- Коммит 2242fИсправление ошибокThe button to submit new vulnerabilities was not shown for unauthenticated users.
Версия 16.29.3 (05.02.2024)
- Коммит 778ffОптимизацияЗапрос клиентаThe calculation of user community points is much faster to provide better updates of values.
Версия 16.29.2 (03.02.2024)
- Коммит 90afbОптимизацияЗапрос клиентаIf a vulnerability submission gets accepted, the submitter will receive an email which does now contain the request to keep and maintain the attached sources to help others verify and investigate the issue.
Версия 16.29.1 (27.01.2024)
- Коммит daaeeОптимизацияA new vulnerability submit which gets merged into an existing entry as a duplicate will not give community points to the submitter.
Версия 16.29.0 (26.01.2024)
- Коммит 7ddcfФункциональностьИзменение APIЗапрос клиентаIn API 3.58 the CTI responses for actors and IP addresses contain the object
cvewhich lists all associated CVE identifiers.
Версия 16.28.4 (25.01.2024)
- Коммит 90a4fОптимизацияChanged the live view for recent updates to address specific needs to review changes better.
Версия 16.28.3 (24.01.2024)
- Коммит dbc60ОптимизацияVulnerability entries show researchers as human-readable listings delimited by commas.
Версия 16.28.2 (19.01.2024)
- Коммит 87dcaОптимизацияCTI views with actor names are now considering special characters properly to support multi-language representation of source data.
Версия 16.28.1 (18.01.2024)
- Коммит afc60ОптимизацияImproved handling of an increased amount of service requests to provide a better user experience.
Версия 16.28.0 (17.01.2024)
- Коммит a7d0eФункциональностьЗапрос клиентаThe CTI export endpoint for IP addresses lists most recent entries for the last 24 hours by default. By adding a date in the form of
YYYYmmddit is possible to request items for a specific day. - Коммит 7f645ОптимизацияBetter identification of vulnerabilities with duplicate CVE assignments.
Версия 16.27.2 (16.01.2024)
- Коммит d65c0ОптимизацияЗапрос клиентаImproved version handling of vulnerable products that use release candidates (e.g. Linux Kernel).
Версия 16.27.1 (15.01.2024)
- Коммит af91bОптимизацияЗапрос клиентаImproved version handling of vulnerable products that use characters as their minor version identifiers (e.g. OpenSSL).
Версия 16.27.0 (12.01.2024)
- Коммит 124a4ФункциональностьCVEs that we reserve and publish as a CNA distinguish between identifier (finder), submitter (reporter), and commiter (analyst).
Версия 16.26.0 (26.12.2023)
- Коммит c138aФункциональностьVulnerability commits that were rejected or reverted show an indicator within the commit history for better identification.
Версия 16.25.1 (08.12.2023)
- Коммит a86acОптимизацияPerformance improvement of internal HTTP processing to handle requests more efficient and to deliver results faster.
Версия 16.25.0 (18.11.2023)
- Коммит 346c5ФункциональностьVulnerability entries link to the software licenses of the affected products.
Версия 16.24.7 (17.11.2023)
- Коммит 1c1faОптимизацияIdentification of software licenses of affected products is much faster.
Версия 16.24.6 (09.11.2023)
- Коммит fdcd0ОптимизацияThe user menu shows more items to provide better accessibility.
Версия 16.24.5 (06.11.2023)
- Коммит 47d40ОптимизацияUpgrade of the database engine to provide better performance and ressource management.
Версия 16.24.4 (30.10.2023)
- Коммит 9d609Исправление ошибокFixed an issue where certain CTI queries for hostnames were not executed in time.
Версия 16.24.3 (27.10.2023)
- Коммит a64b7ОптимизацияBetter performance for CTI administrators using the backend to moderate indicators of compromise.
Версия 16.24.2 (26.10.2023)
- Коммит 5be54ОптимизацияBetter and more efficient matching of version numbers in basic search requests.
Версия 16.24.1 (21.10.2023)
- Коммит d0fa5ОптимизацияThe CTI actor views prefer more recent indicator of compromise to be shown if there is a limit enforced.
Версия 16.24.0 (14.10.2023)
- Коммит 1c51aФункциональностьЗапрос клиентаUsers with old passwords are warned that their passwords are going to expire. They are encouraged to define a new password.
- Коммит d843dФункциональностьOld passwords expire and require a password reset via email to enforce a high level of security.
Версия 16.23.2 (12.10.2023)
- Коммит c03c5ОптимизацияBetter handling of special characters in vulnerability titles to provide improved readability.
Версия 16.23.1 (11.10.2023)
- Коммит 3257fОптимизацияImproved layout of recent CTI views for new IP addresses and actors.
Версия 16.23.0 (04.10.2023)
- Коммит c7f4eФункциональностьVulnerability entries show a dedicated list of affected version numbers as well.
Версия 16.22.10 (23.09.2023)
- Коммит e7d66ОптимизацияBetter and faster processing of mail alerts to keep users up-to-date about their affected products.
Версия 16.22.9 (20.09.2023)
- Коммит 2b9d4ОптимизацияImprovement of flooding and denial of service protection to guarantee an even more reliable service.
Версия 16.22.8 (17.09.2023)
- Коммит a91bfОптимизацияThe fields
software_website_vendorandsoftware_website_productare now auto-completed much better to provide improved data quality for less popular entries.
Версия 16.22.7 (15.09.2023)
- Коммит eb2dfИсправление ошибокЗапрос клиентаFixed an issue where duplicates in CPE lists were creating odd JSON responses.
Версия 16.22.6 (31.08.2023)
- Коммит 311c6Исправление ошибокЗапрос клиентаFixed an issue where exported CPE lists (JSON) were shown as objects instead of arrays. Reported by Dave Thornley.
Версия 16.22.5 (29.08.2023)
- Коммит 914caОптимизацияImproved handling of malicious requests to guarantee availability and responsiveness for our customers.
Версия 16.22.4 (09.08.2023)
- Коммит 1e7dcИсправление ошибокSums and average data of yearly views were not calculated correctly if there was a month with zero data.
Версия 16.22.3 (03.08.2023)
- Коммит b7490ОптимизацияVulnerability data storage of
source_nessus_typeis much more efficient which increases performance as well.
Версия 16.22.2 (02.08.2023)
- Коммит 65890ОптимизацияBetter handling of obsolete links to discontinued vulnerability sources.
Версия 16.22.1 (01.08.2023)
- Коммит 4423bОптимизацияVulnerability data storage of
source_vulnerabilitycenter_severityis much more efficient which increases performance as well.
Версия 16.22.0 (31.07.2023)
- Коммит 09088ФункциональностьЗапрос клиентаChanges to the personal filter are now considered critical and as such they will inform the user about the edit via email.
Версия 16.21.7 (30.07.2023)
- Коммит d6b1eОптимизацияVulnerability data storage of
source_nessus_riskandsource_secunia_riskis much more efficient which increases performance as well.
Версия 16.21.6 (29.07.2023)
- Коммит 3a72bИсправление ошибокA display bug showed merged vulnerability submissions as rejected instead of merged into the existing entry. Thanks to Calvin Star for making us aware of this issue.
Версия 16.21.5 (26.07.2023)
- Коммит b552bИсправление ошибокIn CTI views the list of references was not revealed entirely even if the user had a proper license.
Версия 16.21.4 (24.07.2023)
- Коммит 520d2ОптимизацияBetter listing of sources associated with CTI actor activity analysis.
Версия 16.21.3 (19.07.2023)
- Коммит 707b0ОптимизацияBetter IP address association for verified IOC (Indicators of Compromise). This increases the accuracy of CTI analysis of vulnerability entries.
Версия 16.21.2 (17.07.2023)
- Коммит 71759ОптимизацияThe submission form for new vulnerabilities allows URLs for exploits as well.
Версия 16.21.1 (16.07.2023)
- Коммит ab061ОптимизацияVulnerability exports do contain duplicate CVEs that got assigned.
Версия 16.21.0 (05.07.2023)
- Коммит 0c32cФункциональностьSometimes CNAs assign duplicate CVEs for the same vulnerability. We do now show such duplicates to help to better understand connections between CVE entries.
Версия 16.20.3 (27.06.2023)
- Коммит 6ee4cОптимизацияBetter identification of vulnerability entries which affect products that are end-of-life. Version-specific association is now possible.
Версия 16.20.2 (26.06.2023)
- Коммит bb031ОптимизацияImprovement of CTI analysis for vulnerabilities that spike within short timeframes (hours and days). The data is loaded, analyzed, and presented much faster.
Версия 16.21.2 (17.07.2023)
- Коммит 39c9aОптимизацияOptimization of monoblock capabilities to handle vulnerability data.
Версия 16.20.0 (13.06.2023)
- Коммит e7287ФункциональностьThere is also a list of most recent IP addresses added as IOCs available for paying users.
Версия 16.19.0 (10.06.2023)
- Коммит e6e0dФункциональностьA list of the most recent actor IOCs is available for paying users.
Версия 16.18.1 (03.06.2023)
- Коммит e3b45ОптимизацияDetection of commit collisions during editing of vulnerability data. Entries will be locked until an edit has been finalized.
Версия 16.18.0 (26.05.2023)
- Коммит b9b95ФункциональностьActor analysis adds links to malware samples to support in-depth analysis.
Версия 16.17.2 (23.05.2023)
- Коммит b7248ОптимизацияImproved use of vulnerability names for better data matching on the web service.
Версия 16.17.1 (17.05.2023)
- Коммит 6f54eОптимизацияUpgraded database servers to improve performance during peak times.
Версия 16.17.0 (13.05.2023)
- Коммит b7e2dФункциональностьИзменение APIЗапрос клиентаIn API 2.37/3.57 introduction of the field
source_cve_duplicateto indicate whether a duplicate CVE has been assigned to an entry.
Версия 16.16.4 (11.05.2023)
- Коммит 0fa94Исправление ошибокFixed a minor view issue with Indicator of Compromise (IOC) tables that list IP ranges.
Версия 16.16.3 (10.05.2023)
- Коммит 8f483Исправление ошибокFixed an issue where sync of researcher data with the CVE stream did not happen properly under certain circumstances.
Версия 16.16.2 (05.05.2023)
- Коммит ba5c5ОптимизацияImprovement of timeseries handling which contain CTI activity scores and exploit today prices.
Версия 16.16.1 (03.05.2023)
- Коммит bf769ОптимизацияImproved intelligent matching of vendor and product definitions in all search queries, especially in multi-line fields.
Версия 16.16.0 (29.04.2023)
- Коммит eaaf4ФункциональностьDue to our intensive involvement as a CNA (CVE Numbering Authority) we have extended the main menu to access CVE details that are maintained by us very quickly.
Версия 16.15.1 (22.04.2023)
- Коммит e45eaОптимизацияThe discussion possibility for vulnerabilities mentions that they are intended for public exchange and not fort support queries. Use the contact form instead to approach our support team.
Версия 16.15.0 (21.04.2023)
- Коммит f33dfФункциональностьThe CTI views for actors and IP addresses show the date of the first identification of Indicators of Compromise.
Версия 16.14.1 (18.04.2023)
- Коммит f5a6cОптимизацияImprovement of the field
advisory_typeto indicate where a vulnerability disclosure is originating from. - Коммит 9cf62Исправление ошибокИзменение APIFixed an issue where under certain circumstances the field
advisory_typewas not shown in an API response.
Версия 16.14.0 (17.04.2023)
- Коммит a040aФункциональностьAdded the setting to enable count information for certain views in the site title. This helps to determine how many items are listed on a page.
- Коммит 2ef13Исправление ошибокFixed an issue in the overview of personal posts which did not show the name of a vulnerability entry properly.
Версия 16.13.2 (16.04.2023)
- Коммит 9a6a2ОптимизацияChanged the HTML title of vulnerability entries to use a colon instead of a pipe symbol as delimiter. Please update your parsers if you are relying on this data structure.
Версия 16.13.1 (15.04.2023)
- Коммит 22190ОптимизацияPerformance optimization for all views that list our entries as a CVE Numbering Authority.
- Коммит 853b1ОптимизацияAccess to all entries that are maintained by us as the responsible CVE Numbering Authority are accessible without any restrictions for all users.
Версия 16.13.0 (09.04.2023)
- Коммит 792c6ФункциональностьAccess to our activities as a CVE Numbering Authority possible by year. This has become mandatory due to the enormous amount of CVEs that we are handling.
- Коммит a1d8bОптимизацияRecent CNA entries do now redirect to the current year.
Версия 16.12.1 (02.04.2023)
- Коммит 2085fОптимизацияImproved the speed and accuracy of the display of recent vulnerabilities on the front page.
Версия 16.12.0 (01.04.2023)
- Коммит 67624ФункциональностьИзменение APIIn API 3.56 sources that are not available anymore are shown with the
unavailabletag which contains the reason. This helps to determine defunct companies and dead links. - Коммит b5b18ФункциональностьVulnerability entries indicate broken external links to help determine defunct companies and dead links.
Версия 16.11.1 (31.03.2023)
- Коммит fd85cИсправление ошибокFixed an issue where reverse lookups of CPE strings was not matching properly.
Версия 16.11.0 (23.03.2023)
- Коммит 7a109ФункциональностьИзменение APIIn API 2.36/3.55 introduction of the field
source_cve_duplicateofto indicate CVE assignments which are potential duplicates of existing CVE assignments.
Версия 16.10.3 (17.03.2023)
- Коммит 05831ОптимизацияOptimized the speed to update community points earned by users for submissions of new vulnerability entries.
Версия 16.10.2 (16.03.2023)
- Коммит 7b3a5ОптимизацияImproved accuracy of indicators for vulnerability entries of managed serviced that cannot get a CVE according to current CAN rules.
Версия 16.10.1 (13.03.2023)
- Коммит ab8a8ОптимизацияЗапрос клиентаHandling of CPE values of vulnerabilities was optimized to provide better accuracy of data.
Версия 16.10.0 (11.03.2023)
- Коммит c639dФункциональностьЗапрос клиентаComments of vulnerability entries will show official replies by our community team to help visitors to understand details and inner workings of our processes.
- Коммит 13ff7ФункциональностьHovering over the time indicator of comments will show the exact time of the submission.
Версия 16.9.3 (09.03.2023)
- Коммит f3d56ОптимизацияPerformance improvement of EPSS (Exploit Prediction Scoring System) value handling.
Версия 16.9.2 (19.02.2023)
- Коммит 72d23ОптимизацияReferences lists use the general naming convention for VulDB entries as well.
Версия 16.9.1 (16.02.2023)
- Коммит 636ccОптимизацияMuch better performance of the service by optimizing the partitioning of data. Especially if there are many tasks handled at the same time.
Версия 16.9.0 (15.02.2023)
- Коммит dc811ФункциональностьSwitches VulDB CVSSv3 scores from 3.0 to 3.1 to adopt latest version of the industry standard.
Версия 16.8.0 (13.02.2023)
- Коммит 8a926ФункциональностьИзменение APIЗапрос клиентаIn API 3.54 the field
software_managedserviceis introduced to indicate products that are managed services and therefore not maintained by users.
Версия 16.7.0 (11.02.2023)
- Коммит 0ceebФункциональностьИзменение APIЗапрос клиентаIn API 1.17/2.35/3.53 the field
software_rollingreleaseis introduced to indicate whether the product is not using version numbering but establishing a rolling release instead. - Коммит 27319ФункциональностьИзменение APIThe changelog does now flag changes to the API as such. This helps customers to identify changes that might require their attention regarding automated processing of data.
Версия 16.6.12 (03.02.2023)
- Коммит 1c4caОптимизацияИзменение APIЗапрос клиентаInvalid URL requests to the API are not always redirected to prevent inefficient usage of the API.
Версия 16.6.11 (28.01.2023)
- Коммит 9e571Исправление ошибокИзменение APIЗапрос клиентаFixed an issue in the API where request for
entry_timstampe_changefor older entries did not return the desired amount of items.
Версия 16.6.10 (23.01.2023)
- Коммит 8a095ОптимизацияAdditional details available about default licenses by vendors.
Версия 16.6.9 (22.01.2023)
- Коммит 05f5cОптимизацияImprovement of the Google Hacking view which provides a wide variety of Google Dorks.
- Коммит 32026ОптимизацияFaster and smarter processing of cache data which improves the overall performance of the service drastically.
Версия 16.6.8 (21.01.2023)
- Коммит 830d3ОптимизацияInvalid URL requests to the service are usually redirected, to point the user to the correct URL. This is now approached more consistantly.
Версия 16.6.7 (20.01.2023)
- Коммит e6e23ОптимизацияPerformance optimization to increase responsibility for a wide variety of views.
Версия 16.6.6 (12.01.2023)
- Коммит 6c542ОптимизацияImprovement of search by purl statements. Better matching of products and versions possible.
Версия 16.6.5 (11.01.2023)
- Коммит 7c9bdОптимизацияBetter indicator for disputed vulnerability entries that are handled by our CNA team.
Версия 16.6.4 (10.01.2023)
- Коммит c8bc3Исправление ошибокFixed an issue where emails confirming the moderation of a vulnerability submission mention the wrong submission ID in the mail subject.
Версия 16.6.3 (09.01.2023)
- Коммит 9b662ОптимизацияBetter handling of user sessions, especially if there is a lot of activities on the service.
Версия 16.6.2 (07.01.2023)
- Коммит 5e9a7ОптимизацияIntroduction of a simple way for moderators to postpone processing of queued vulnerability items.
- Коммит cfb9aОптимизацияMuch better performance for moderators to import new vulnerabilities.
Версия 16.6.1 (04.01.2023)
- Коммит cd64fОптимизацияImprovement of priority indicators for vulnerability queue handling by moderators.
Версия 16.6.0 (03.01.2023)
- Коммит 02196ФункциональностьNew queue handling of identifier vulnerabilities to improve quality and speed of processing by moderators.
Версия 16.5.4 (02.01.2023)
- Коммит 9a5e1ОптимизацияExtended display of multiline quotes of vulnerabilities for software, advisories, vulnerabilities, exploits, and countermeasures.
Версия 16.5.3 (21.12.2022)
- Коммит 89dfeИсправление ошибокIn very rare cases the derivative identification of vulnerability classes was not working.
Версия 16.5.2 (18.12.2022)
- Коммит 6924dОптимизация
Версия 16.5.1 (17.12.2022)
- Коммит a0204ОптимизацияAll update views show duplicates and false-positives accordingly.
Версия 16.5.0 (16.12.2022)
- Коммит 91e21ФункциональностьИзменение APIЗапрос клиента
Версия 16.4.6 (12.12.2022)
- Коммит 1b860Оптимизация
Версия 16.4.5 (10.12.2022)
- Коммит 47588ОптимизацияИзменение APIMore performance improvement of the API for timeranges like
advisory_date_start,entry_timestamp_create_start,entry_timestamp_change_start, andentry_timestamp_all_start.
Версия 16.4.4 (08.12.2022)
- Коммит fc381ОптимизацияИзменение APIЗапрос клиентаIn API 3.52 performance optimization of certain queries requesting timeranges like
advisory_date_start,entry_timestamp_create_start,entry_timestamp_change_start, andentry_timestamp_all_start.
Версия 16.4.3 (07.12.2022)
- Коммит dba58ОптимизацияImproved handling of duplicate vulnerability entries. These are processed much faster, flagged as duplicates or even hidden under certain circumstances.
Версия 16.4.2 (05.12.2022)
- Коммит 67c94ОптимизацияPerformance optimization due to intelligent caching of cyber threat intelligence views like countries, sectors, and actors.
Версия 16.4.1 (04.12.2022)
- Коммит 8dc47ОптимизацияAccess to cyber threat intelligence information which is not unlocked yet will show a proper amount of demo data to help to understand features, coverage, and possibilities.
Версия 16.4.0 (03.12.2022)
- Коммит 12800ФункциональностьЗапрос клиентаThe Cyber Threat Intelligence platform does now provide a new view. The sector view helps to understand the emerging, current, and future threats for specific economic sectors.
Версия 16.3.4 (26.11.2022)
- Коммит dae79ОптимизацияImproved extended CPE dictionary generation. By dropping attributes that are not necessary the file generation becomes faster and the file becomes smaller.
Версия 16.3.3 (25.11.2022)
- Коммит 726b4ОптимизацияHardware upgrade for better memory and processing handling.
Версия 16.3.2 (22.11.2022)
- Коммит 21d9bОптимизацияImproved coverage and flagging of software products known to be end-of-life.
Версия 16.3.1 (21.11.2022)
- Коммит 23f71ОптимизацияBetter handling of vulnerability entries flagges as false-positives or revoked data parts. Summaries reflect the status better and overviews tag them more prominent.
Версия 16.3.0 (18.11.2022)
- Коммит 085b7ФункциональностьAdditional links to the internal knowledge base and external sources available in vulnerability summaries and descriptions. This makes research a lot faster, easier, and more comfortable.
Версия 16.2.0 (08.11.2022)
- Коммит ba2e4ФункциональностьИзменение APIЗапрос клиента
Версия 16.1.1 (07.11.2022)
- Коммит 21a87Исправление ошибокЗапрос клиентаFixed a bug where some searches for CPE strings were not working properly.
Версия 16.1.0 (31.10.2022)
- Коммит 62218ФункциональностьИзменение APIЗапрос клиента
Версия 16.0.3 (20.10.2022)
- Коммит 698a4Исправление ошибокFixed an issue on the front page where under certain circumstances the exploit price overview was not refreshed properly.
Версия 16.0.2 (19.10.2022)
- Коммит df7bfИсправление ошибокVulnerability entries without the definition of
software_versionbut with a definition ofcountermeasure_upgrade_versionwill show this information properly in the document title.
Версия 16.0.1 (18.10.2022)
- Коммит f18eeОптимизацияVulnerability entries list associated changesets with date and count of changes. This makes it easier to understand the lifecycle of an entry.
Версия 16.0.0 (15.10.2022)
- Коммит 30f76ФункциональностьЗапрос клиентаThe vulnerability data team is taking advantage of the new source monitoring modules. An advanced artificial intelligence enumerates different sources to determine new vulnerabilities or additional details. If such are found, they are added to the submission queue and will be reviewed by the moderation team. This will increase coverage, processing speed, and data quality of vulnerability entries drastically.
Версия 15.5.6 (10.10.2022)
- Коммит 6ab11Оптимизация
Версия 15.5.5 (07.10.2022)
- Коммит fb472ОптимизацияOptimization of the user menu as shown on devices with smaller screens.
Версия 15.5.4 (06.10.2022)
- Коммит 78b19ОптимизацияSites showing search results with a new search form will set the focus on the form field for faster processing of new search queries.
Версия 15.5.3 (30.09.2022)
- Коммит 53399Исправление ошибокИзменение APIЗапрос клиентаIn API 3.48 fixed an issue for the
fieldparameter where only old notations ofvulnerability_cvss3_basevector_vuldbandvulnerability_cvss3_tempvector_vuldbinstead also ofvulnerability_cvss3_vuldb_basevectorandvulnerability_cvss3_vuldb_tempvectorwere supported. - Коммит 4995fОптимизацияИзменение APIIn API 1.16/2.34/3.49 a more graceful handling of too many definitions in the
fieldsparameter got established. If there are too many fields defined, only the first ones will be used and the others silently ignored.
Версия 15.5.2 (28.09.2022)
- Коммит aaebcОптимизацияBetter handling of data uncertainty while generating stats and charts to improve result accuracy.
Версия 15.5.1 (25.09.2022)
- Коммит 3985dОптимизацияИзменение APIIn API 1.15/2.33/3.47 additional data analysis is able to provide derivative Google Hacking strings shown in the field
exploit_googlehack. - Коммит abeb0ОптимизацияAdditional data analysis is also able to provide derivative Google Hacking strings in vulnerability summaries, descriptions, and detail listings.
Версия 15.5.0 (23.09.2022)
- Коммит 7fe8bФункциональностьЗапрос клиентаWe have introduced a Google Hacking Database containing exclusive dorks.
Версия 15.4.1 (20.09.2022)
- Коммит c9710ОптимизацияImproved the declaration of impacts within description and summaries of vulnerabilities.
Версия 15.4.0 (19.09.2022)
- Коммит fdc84ФункциональностьЗапрос клиентаThe custom CTI analysis allows filter by countries to improve geopolitical analysis capabilities.
Версия 15.3.11 (18.09.2022)
- Коммит 43a2cОптимизацияPerformance optimization of statistical data of user contributions.
Версия 15.3.10 (15.09.2022)
- Коммит 8028cОптимизацияBetter memory handling of the service to improve responsiveness of queries and views.
Версия 15.3.9 (14.09.2022)
- Коммит 0e2c2ОптимизацияImprovement of countermeasure handling of vulnerabilities to save space, gain better performance, and faster processing of entries.
Версия 15.3.8 (11.09.2022)
- Коммит b4aecИсправление ошибокFixed an issue where empty CWE data was shown in vulnerability entries. This was just an interface error on the web frontend.
Версия 15.3.7 (08.09.2022)
- Коммит e5ba5Исправление ошибокЗапрос клиентаFixed an issue with the RSS feeds where certain special characters in the title element lead to XML validation errors. Reported by Calvin Mende.
Версия 15.3.6 (07.09.2022)
- Коммит 3c399Исправление ошибокЗапрос клиентаFixed an issue where certain product names generated an invalid XML CPE dictionary. Reported by user RobinDefenced
Версия 15.3.5 (06.09.2022)
- Коммит 144c0Исправление ошибокИзменение APIЗапрос клиентаFixed an issue where certain search requests via web and API were not executed at all. Reported by user showmax
Версия 15.3.4 (05.09.2022)
- Коммит 61068ОптимизацияAnother performance improvement of search queries. Lookups for functions and arguments are now multiple times faster as well.
Версия 15.3.3 (02.09.2022)
- Коммит 6ae56ОптимизацияЗапрос клиентаPerformance improvement of search queries. Especially queries for URLs are now multiple times faster.
Версия 15.3.2 (30.08.2022)
- Коммит 0acc3ОптимизацияBetter performance and accuracy of parsing of vulnerability data during moderation process.
Версия 15.3.1 (29.08.2022)
- Коммит 7d293ОптимизацияBetter teasing of Cyber Threat Intelligence information for free users.
Версия 15.3.0 (27.08.2022)
- Коммит 13bc6ФункциональностьЗапрос клиентаVulnerability entries show multiple CWE if available. In this case they are listed in descending order of accuracy.
Версия 15.2.3 (19.08.2022)
- Коммит 87315ОптимизацияVulnerability entries flagged as false-positive are shown with this tag in lists (e.g. overview, search).
Версия 15.2.2 (17.08.2022)
- Коммит 4bf82ОптимизацияAnother improvement of entropy of the CSRF token generation for critical forms.
Версия 15.2.1 (14.08.2022)
- Коммит 6d5faОптимизацияИзменение APIIn API 3.46 he virtual fields
advisory_reportconfidence,exploit_exploitability,countermeasure_remediationlevelprovide better data accurary to improve data quality.
Версия 15.2.0 (11.08.2022)
- Коммит c5cd8ФункциональностьИзменение APIЗапрос клиентаIn API 3.45 the Vulnerability API is able to show additional CTI information by enabling
cti=1within requests. This is possible for free accounts, commercial accounts and enterprise accounts with the CTI option enabled. The real-time availability of the data introduces some increased round trip times for such queries.
Версия 15.1.2 (09.08.2022)
- Коммит 0d06aОптимизацияBetter matching of natural search when it comes to short words which causes less false-negatives.
Версия 15.1.1 (12.07.2022)
- Коммит b168aОптимизацияFixed an issue where vulnerabilities with product versions ending with
.xwildcards were handled inapprorpiately.
Версия 15.1.0 (08.07.2022)
- Коммит 5134eФункциональностьЗапрос клиентаCertain views contain a column listing the latest EPSS (Exploit Prediction Scoring System) values for vulnerabilities.
Версия 15.0.0 (05.07.2022)
- Коммит c13baФункциональностьИзменение APIЗапрос клиента
Версия 14.27.1 (29.06.2022)
- Коммит 093a3ОптимизацияListing of important identifiers of vulnerabilities were optimized to provide better searchability.
Версия 14.27.0 (24.06.2022)
- Коммит ab1f7ФункциональностьEnglish vulnerability descriptions explain the vulnerability classes according to the CWE definitions.
Версия 14.26.6 (23.06.2022)
- Коммит 0761dОптимизацияImproved the support for less popular CWE classes to provide better identification capabilities of exotic vulnerabilities.
Версия 14.26.5 (16.06.2022)
- Коммит 4a400ОптимизацияFaster synchronization of EPSS (Exploit Prediction Scoring System) data to increase confidence of predictions.
Версия 14.26.4 (11.06.2022)
- Коммит e54dfОптимизацияImproved version listing for releases using letters in version numbering (e.g. OpenSSL).
Версия 14.26.3 (10.06.2022)
- Коммит 986a8ОптимизацияBetter accuracy of product requests in the Monoblock.
Версия 14.26.2 (07.06.2022)
- Коммит 7045aОптимизацияOptimized the purchase and upgrade experience for users with better guidance and accessibility.
Версия 14.26.1 (02.06.2022)
- Коммит af297ОптимизацияEmails sent for custom mail alerts do now contain the CVE of matching entries to provide better overview and accessibility.
Версия 14.26.0 (01.06.2022)
- Коммит 6b2ffФункциональностьЗапрос клиентаIntroduction of the Exploit Prediction Scoring System which is able to predict chances of successful exploitation of vulnerabilities. Official EPSS data is kept in sync and shown in the vulnerability details.
- Коммит 51aabФункциональностьИзменение APIЗапрос клиентаIn API 2.32/3.43 introduced the fields
exploit_epss_scoreandexploit_epss_percentilewhich provide live data of EPSS (Exploit Prediction Scoring System) to predict chances of successful exploitation.
Версия 14.25.10 (31.05.2022)
- Коммит 6436aИсправление ошибокFixed an issue where certain links were not correctly used in the vulnerability summaries for authenticated users. Reported by Andrea Hauser
Версия 14.25.9 (25.05.2022)
- Коммит 57b2aОптимизацияЗапрос клиентаBetter integration of search possibilities in the site header on mobile phones.
Версия 14.25.8 (23.05.2022)
- Коммит 01046Исправление ошибокИзменение APIЗапрос клиентаIn API 3.41 accessing the field
software_cpe23is possible again. Other major releases of the API were not affected. Reported by Stefan Sander.
Версия 14.25.7 (15.05.2022)
- Коммит ed7b9Исправление ошибокSending certain host requests introduced the possibility for unexpected redirects. Reported by Pankaj lakshkar
Версия 14.25.6 (12.05.2022)
- Коммит b8eb9ОптимизацияImproved search intelligence to match CWE and CVE faster and with more accuracy.
Версия 14.25.5 (11.05.2022)
- Коммит 84bd4ОптимизацияAll CTI activities are available in a dedicated section. Existing links redirect to the new location.
Версия 14.25.4 (10.05.2022)
- Коммит 0098aИсправление ошибокЗапрос клиентаFixed an error message which was shown under certain circumstances for recent entries.
Версия 14.25.3 (06.05.2022)
- Коммит e8a31ОптимизацияThe latest videos shown on the frontpage are updated faster to provide access to the latest entries.
- Коммит dfe4eИсправление ошибокИзменение APIЗапрос клиентаIn API 1.14/2.31/3.41 fixed an issue where requests with
entry_timestamp_createdid include entries that matchedentry_timestamp_changeinstead. Reported by user peeradon.no
Версия 14.25.2 (04.05.2022)
- Коммит 52eb6ОптимизацияThe personal view of My Alert shows matching entries ranging back 90 days.
Версия 14.25.1 (03.05.2022)
- Коммит 87e2dОптимизацияBetter performance for creating the RSS feed of updated entries.
Версия 14.25.0 (02.05.2022)
- Коммит 6b388ФункциональностьAvailability of a dedicated RSS feed for changelog entries to monitor changes easily.
Версия 14.24.1 (29.04.2022)
- Коммит c0290ОптимизацияAligned icons and sidemenu in the CNA section to provide better accessibility.
Версия 14.24.0 (27.04.2022)
- Коммит 91fceФункциональностьИзменение APIЗапрос клиентаIn API 3.40 using the parameter
format=csvmakes it possible to output vulnerability data as CSV. Not all request types are supported, not all fields are included, and API header information is not part of the output.
Версия 14.23.1 (25.04.2022)
- Коммит c49ecОптимизацияImproved the actor and compaign association of the CTI module. Interlinking data is better and provides results with increased accuracy.
- Коммит 30e2cОптимизацияCTI indicators shown are either verified or predictive and shown with the associated tag.
Версия 14.23.0 (24.04.2022)
- Коммит 71333ФункциональностьThe country overview shows additional details like covered languages, TTP, IOA, and activities.
Версия 14.22.0 (21.04.2022)
- Коммит c3eaeФункциональностьThe user menu contains additional items to quickly access your user profile, activity settings, and alerting capabilities.
- Коммит 3cc50ОптимизацияAligned the text color of lists in databoxes to the overall style.
Версия 14.21.2 (20.04.2022)
- Коммит 1ca57ОптимизацияЗапрос клиентаAlerts sent via email use asterisks to prevent Microsoft Outlook from deleting newlines.
- Коммит 1ca57ОптимизацияAlerts sent via email refer to entries with the new format VDB-1234 instead of the old format ID 1234.
- Коммит 00701ОптимизацияSwitched symbols used in the community activity stream from emoji to a dedicated font to provide better reliability on different platforms.
Версия 14.21.1 (19.04.2022)
- Коммит 90187ОптимизацияCertain elements on the frontpage use additional icons to visualize data sources.
Версия 14.21.0 (16.04.2022)
- Коммит 0063cФункциональностьИзменение APIIn API 3.39 enabled auto-complete feature for
software_typeeven if the field is not yet defined in the monoblock.
Версия 14.20.9 (14.04.2022)
- Коммит 38c8fИсправление ошибокSending multiple information mails if a duplicate signup happens is prevented. Reported by Rupali Jain
Версия 14.20.8 (13.04.2022)
- Коммит 13b46Исправление ошибокFixed a rare bug affecting certain product views that prevented the list from loading. Reported by user mael
Версия 14.20.7 (11.04.2022)
- Коммит 766deОптимизацияPerformance optimization of certain filtered views used by the CNA team.
- Коммит 45617Исправление ошибокЗапрос клиентаThe autocomplete feature for versioning of certain products was not able to finalize the output. Reported by user lywand
Версия 14.20.6 (09.04.2022)
- Коммит 99f6cОптимизацияLayout of current utilization data provides better readability.
Версия 14.20.5 (08.04.2022)
- Коммит 14036ОптимизацияЗапрос клиентаRegistration does allow mail addresses with rather long top-level-domains.
Версия 14.20.4 (01.04.2022)
- Коммит 8e9e6ОптимизацияThe overview of monitored actors displays the number of collected IOC (Indicators of Compromise), TTP (Tactics, Techniques, Procedures), IOA (Indicators of Attack), campaigns and external references.
Версия 14.20.3 (29.03.2022)
- Коммит 45456ОптимизацияNew overview of actors shows the amount of available indicators and used sources. The list is also sortable for better viewing.
Версия 14.20.2 (28.03.2022)
- Коммит fdbebОптимизацияUpdate of icons used in menus and on other parts of the service.
Версия 14.20.1 (26.03.2022)
- Коммит 30ff5ОптимизацияЗапрос клиентаSubmissions of new vulnerabilities will automatically handle a CVE assignment and inform the submitter about the CNA decision (assigned, denied or pending).
- Коммит 30ff5ОптимизацияSubmissions of new vulnerabilities will request an external advisory url for further validation of the issue.
Версия 14.20.0 (21.03.2022)
- Коммит 14dd6ФункциональностьAn overview of all RSS feeds with all available languages is listed.
Версия 14.19.0 (20.03.2022)
- Коммит d86a3ФункциональностьAvailability of all RSS feeds in all available languages. This is true for of recent, updates, Twitter, and customer streams.
- Коммит 85b71ФункциональностьRSS feeds always show the CVE or another important identifier in the title for better searching capabilities.
- Коммит 95b49ОптимизацияThe
languageelement of RSS feeds reflects the used content language.
Версия 14.18.4 (19.03.2022)
- Коммит 6bc0cОптимизацияOptimized performance by using specific features and configuration settings in PHP8.
- Коммит 3ce86Исправление ошибокИзменение APIFixed a race condition where consecutive API requests might not have been added to the personal API history properly.
Версия 14.18.3 (15.03.2022)
- Коммит c2804ОптимизацияScrollbars of elements provide better styling to improve user experience, especially on smaller screens.
Версия 14.18.2 (14.03.2022)
- Коммит 0893aОптимизацияImproved intelligent matching of vendor and product definitions in simple searches.
Версия 14.18.1 (10.03.2022)
- Коммит 25badОптимизацияImproved layout of the changelog items to provide better visibility.
- Коммит ed2beОптимизацияTimelines in vulnerability entries do always link to countermeasures if patch or upgrade URLs are known.
- Коммит 91b01Исправление ошибокSome links to countermeasures were clickable but still threw a 404 even though the requested resources were available. Reported by user mael
Версия 14.18.0 (09.03.2022)
- Коммит 72d69ФункциональностьItems listed in legends of charts are clickable to allow quick drilldowns.
- Коммит a7e66Исправление ошибокCertain pie charts did not reflect the correct number of known matches.
Версия 14.17.5 (07.03.2022)
- Коммит c162cОптимизацияA better layout helps vulnerability moderators to identify priority entries in the submission queue.
Версия 14.17.4 (01.03.2022)
- Коммит 23a47Исправление ошибокIn certain views the generation of timeline graphs was not possible if the advisory_date of an entry has been changed to another year.
Версия 14.17.3 (28.02.2022)
- Коммит 01eaeИсправление ошибокFixed an issue where empty CVSSv3 scores were shown with a value of 0.0.
Версия 14.17.2 (27.02.2022)
- Коммит c8b23ОптимизацияPerformance optimization of list views which contain CVSSv3 Meta Scores.
- Коммит 48019Исправление ошибокUnder certain circumstances an existing remediation level based on the field
countermeasure_remediationlevelwas not shown correctly.
Версия 14.17.1 (25.02.2022)
- Коммит 4882dОптимизацияIcon text in the submenu allows hyphenation to optimize the view on narrow screens.
- Коммит 60d49ОптимизацияCharts for timespans are optimized to zoom into the timeframe whenever possible and useful.
Версия 14.17.0 (23.02.2022)
- Коммит f8d99ФункциональностьThe applicable copyright license is shown in the footer of the page.
Версия 14.16.1 (22.02.2022)
- Коммит c6483ОптимизацияTable listings with narrow columns provide better spacing to fit the content.
Версия 14.16.0 (21.02.2022)
- Коммит 93389ФункциональностьЗапрос клиентаThe CTI views do allow for drilldown of IP addresses as IoC (Indicator of Compromise).
- Коммит 9e1e2Исправление ошибокЗапрос клиентаListing of version numbers ranging back to 0.x might have contained version 0.0. This is usually wrong and got fixed. Thanks to Cheek Yang of xFusion Digital Technologies for making us aware of this issue.
Версия 14.15.1 (20.02.2022)
- Коммит 24c78ОптимизацияCertain CTI views which have complex hostnames as IoC (Indicator of Compromise) allow much faster analysis.
Версия 14.15.0 (18.02.2022)
- Коммит 4da51ФункциональностьЗапрос клиентаCustom CTI analysis contains IOC (Indicator of Compromise), TTP (Tactics, Techniques, Procedures) and IOA (Indicator of Attack) as well.
Версия 14.14.0 (17.02.2022)
- Коммит 52552ФункциональностьЗапрос клиентаThe CTI view for countries lists popular TTP (Tactics, Techniques, Procedures) and IOA (Indicator of Attack) as well.
Версия 14.13.4 (09.02.2022)
- Коммит 291bfОптимизацияSearch requests for CVE identifiers detects mismatching dashes (e.g. en and em) and corrects them automatically.
Версия 14.13.3 (08.02.2022)
- Коммит f7d1bОптимизацияPerformance optimization of data analysis of APT actors.
- Коммит 7c6d0ОптимизацияImprovement of CTI actor report generator for GitHub repository.
Версия 14.13.2 (31.01.2022)
- Коммит b0bffОптимизацияActivity charts provide data with better accuracy.
- Коммит b0bffОптимизацияActivity charts have a better performance during generation.
Версия 14.13.1 (30.01.2022)
- Коммит f1aa5ОптимизацияPerformance optimization of APT actor association charts during generation.
Версия 14.13.0 (28.01.2022)
- Коммит 6defcФункциональностьИзменение APIIn API 2.30/3.38 multiple fields to reflect our capabilities as a CNA to assign and disclose CVE entries are introduced:
cna_responsible,cna_contact_date,cna_response_date,cna_response_summary,cna_decision_date,cna_decision_summary,cna_eol, andcna_nocve.
Версия 14.12.1 (27.01.2022)
- Коммит 37a7cОптимизацияИзменение APIIn API 1.13/2.29/3.37 provoking
405 Unknown request typeerrors again is only possible after a few minutes. This prevents flooding the API access log and prevents misconfigured clients from exhausting the API credits quickly.
Версия 14.12.0 (24.01.2022)
- Коммит 78570ФункциональностьAPT actor analysis view adds associated campaign details for IOC.
- Коммит 78570ФункциональностьAPT actor analysis view adds associated CWE details for TTP.
- Коммит 26292ОптимизацияGeneral performance optimization for all APT actor analysis views.
- Коммит 1e67cОптимизацияData shown in APT actor analysis view for non-authenticated users is based on real-time data.
Версия 14.11.8 (21.01.2022)
- Коммит b1aa4ОптимизацияImprovement of URL validation during moderation to prevent incorrect values.
Версия 14.11.7 (15.01.2022)
- Коммит 9fa88ОптимизацияImproved security of SPF and DMARC. Recommendations were submitted by Nikhil Rane.
- Коммит 9fa88ОптимизацияImproved security and usability of signup procedure and passwort recovery procedure. Recommendations were submitted by Nikhil Rane.
Версия 14.11.6 (14.01.2022)
- Коммит 68c68ОптимизацияLayout optimization of certain forms using additional information or CAPTCHA elements.
Версия 14.11.5 (13.01.2022)
- Коммит ac2a6ОптимизацияPerformance tweaks of certain views.
Версия 14.11.4 (12.01.2022)
- Коммит 28f48ОптимизацияHighly improved performance of APT actor analysis. Especially such with many known indicators of compromise.
Версия 14.11.3 (11.01.2022)
- Коммит b59d0ОптимизацияPerformance and memory optimization of certain queries which do not need CTI data to be shown.
Версия 14.11.2 (07.01.2022)
- Коммит 9ade9ОптимизацияMulti-threading has been optimized to decrease resource consumption and to increase performance.
- Коммит 509bbОптимизацияExternal links in the table of contents of the Knowledge Base open a new window.
Версия 14.11.1 (05.01.2022)
- Коммит 545a1ОптимизацияBetter performance for quick APT actor identification on the front page.
Версия 14.11.0 (04.01.2022)
- Коммит bfdcdФункциональностьЗапрос клиентаIt is possible to do a CTI analysis of dedicated entries to show activities, interest distribution, active actors, and indicators of compromise. This feature requires an additional CTI license.
Версия 14.10.2 (28.12.2021)
- Коммит f43ddИсправление ошибокUsers hiding their profile were not able to show their own profile. This has been fixed.
Версия 14.10.1 (24.12.2021)
- Коммит 8b772ОптимизацияЗапрос клиентаScrollbars on Mozilla browsers are styled or even hidden whenever useful to provide a better user experience on smaller screens.
Версия 14.10.0 (23.12.2021)
- Коммит ac413ФункциональностьThe new status page shows the status, load and utilization of service components.
Версия 14.9.0 (22.12.2021)
- Коммит a0614ФункциональностьVulDB has been officially approved by the CVE program as a CVE Numbering Authority (CNA). We are authorized to handle new vulnerability submissions, assign unique CVEs and disclose them. Users may flag new vulnerability submissions to get a CVE. More information in our official press release.
- Коммит e8c35ОптимизацияCyber threat intelligence activity scores on the front page are shown as bars to indicate heat faster.
Версия 14.8.1 (18.12.2021)
- Коммит 158dbОптимизацияImproved the order of the user menu on the Arabic edition of the site.
Версия 14.8.0 (17.12.2021)
- Коммит bb5aeФункциональностьЗапрос клиентаLanguage support for Russian (ru). This includes basic parts of the web site and vulnerability details.
Версия 14.7.0 (14.12.2021)
- Коммит c958eФункциональностьOur bug bounty is fully compliant with draft-foudil-securitytxt-12. You will find the current file at /.well-known/security.txt
- Коммит d754bОптимизацияAdditional intelligence of the search engine tries to determine potential product definitions. This increases accuracy of search requests.
Версия 14.6.0 (12.12.2021)
- Коммит f4d42ФункциональностьViews with custom RSS feeds show an icon at the breacrumb navigation.
Версия 14.5.0 (11.12.2021)
- Коммит 5e850ФункциональностьEntires in the Knowledge Base are linked to the table of contents to provide better accessibility of information.
- Коммит d184fОптимизацияSlightly improved confirmation email messages for moderated submissions.
Версия 14.4.1 (10.12.2021)
- Коммит 5213bОптимизацияCommit details show more information and link to additional resources.
- Коммит 03ef5ОптимизацияPerformance optimization of the front page which loads the vulnerability of the day much faster.
Версия 14.4.0 (09.12.2021)
- Коммит 53394ФункциональностьЗапрос клиентаAll documentation files are moved into the new Knowledge Base. Old links to the documentation remain valid.
- Коммит e75bdОптимизацияOptimized padding of breadcrumb items provides better usability.
Версия 14.3.1 (08.12.2021)
- Коммит 9f087ОптимизацияNew multi-threading handling of expensive database queries increases the performance of many requests and views.
Версия 14.3.0 (07.12.2021)
- Коммит 0328bФункциональностьAdded a breadcrumb navigation item to access higher level sections easier.
- Коммит 20adeФункциональностьRelease versions in the changelog might be accessed via ID.
- Коммит ebad6Исправление ошибокThe user data in the side menu are shown properly even if there are very long strings used.
Версия 14.2.0 (06.12.2021)
- Коммит 3deaeФункциональностьCVSSv3 pie chart lists do also include CNA data to improve comparison of different sources.
- Коммит 06fc8ОптимизацияCommits listed in the changelog have type badges for better identification.
Версия 14.1.3 (05.12.2021)
- Коммит 6ba63ОптимизацияDatabox with vulnerability of the day uses better search box for increased accessibility.
Версия 14.1.2 (04.12.2021)
- Коммит ab33bОптимизацияResponsive app elements behave better on smaller rectangular screens.
- Коммит 07841Исправление ошибокAll risk views show data properly under any circumstances for authenticated users.
Версия 14.1.1 (03.12.2021)
- Коммит e5209ОптимизацияЗапрос клиентаThe layout for printing views is optimized for better user experience.
- Коммит d0822ОптимизацияThe language path for Japanese is changed from /jp/ to /ja/ to respect ISO 639-1 language two-letter conventions. Old links remain active and redirect to the new URL structure.
- Коммит fa317ОптимизацияThe user menu layout has been optimized for better readability. Especially VulDB moderators and administrators get easier access to relevant data.
Версия 14.1.0 (02.12.2021)
- Коммит e68e7ФункциональностьSome chart types, especially pie charts and doughnut charts, show an additional legend to provide better visibility of data.
- Коммит 2fa71ОптимизацияЗапрос клиентаThe responsiveness of the user menu on the side behaves better on smaller screens.
- Коммит ee455ОптимизацияExternal URLs to MITRE CVE link to the new cve.org domain.
Версия 14.0.1 (01.12.2021)
- Коммит 786ddОптимизацияMinor optimizations of layout elements of new app layout.
- Коммит 61570ОптимизацияЗапрос клиентаThe settings page informs users about the character limit for custom alert filters. Purchasing additional licenses is required to extend this limit.
Версия 14.0.0 (30.11.2021)
- Коммит bb919ФункциональностьЗапрос клиентаRelaunch of the service with a new layout and extended app capabilities.
Версия 13.41.1 (11.11.2021)
- Коммит a667cОптимизацияVulnerability entries without user comments show the requested languages, even if English was the only language selected.
- Коммит 1ff69ОптимизацияLayout of the login recommendation to comment on vulnerability entries was optimized.
Версия 13.41.0 (10.11.2021)
- Коммит 0c2aeФункциональностьЗапрос клиентаCommercial customers using credit card as payment method are able to show their last invoices online. Invoices and receipts can be downloaded from our partner Stripe. All documents are hosted externally. VulDB does not store credit card details, invoices nor receipts.
Версия 13.40.1 (09.11.2021)
- Коммит dbc8aИсправление ошибокИзменение APIIn API 2.28/3.36 the field
vulnerability_bugbounty_priceis only shown if there is a bug bounty price defined. - Коммит 5fe48ОптимизацияPerformance improvement (CPU and memory consumption) of long list views.
Версия 13.40.0 (08.11.2021)
- Коммит 505beФункциональностьИзменение APIЗапрос клиентаin API 2.27/3.35 it is now possible to use URL encoding in advanced search queries to make them much easier to handle.
Версия 13.39.1 (06.11.2021)
- Коммит 1c057Исправление ошибокЗапрос клиентаUnder rare circumstances a timeframe request did contain entries outside the defined timeframe. Additional validation has been introduced to prevent this effect. Reported by user guliang
Версия 13.39.0 (03.11.2021)
- Коммит 02e0bФункциональностьЗапрос клиентаLanguage support for Portuguese (pt). This includes basic parts of the web site and vulnerability details.
Версия 13.38.0 (01.11.2021)
- Коммит 49840ФункциональностьЗапрос клиентаEnterprise customers are able to create a custom dashboard with individual charts and lists to maintain their professional vulnerability management.
Версия 13.37.0 (29.10.2021)
- Коммит ecf36ФункциональностьExternal links in vulnerability entries known to be not working anymore are flagged as 404 Not Found.
- Коммит 00f47ОптимизацияIn the commit view the column Moderated is renamed to Accepted to indicate the moment a change was approved.
Версия 13.36.2 (27.10.2021)
- Коммит 6ba60ОптимизацияMost recent entries on the frontpage are listed faster and with more details right after the creation of a new entry.
Версия 13.36.1 (26.10.2021)
- Коммит fe47aОптимизацияЗапрос клиентаOverview pages with an huge number of entries are not limited anymore.
Версия 13.36.0 (25.10.2021)
- Коммит 9d96dФункциональностьЗапрос клиентаThe section exploits shows entries only if an exploit is available for download.
- Коммит 7b0b6ФункциональностьЗапрос клиентаThe exploit prices areseparated from the generic exploit section.
Версия 13.35.1 (19.10.2021)
- Коммит fab04ОптимизацияOptimization of summaries and descriptions in certain languages to better consider the expected vulnerability class of an entry.
Версия 13.35.0 (09.10.2021)
- Коммит e2c39ФункциональностьИзменение APIЗапрос клиентаThe search feature on the web site and the API supports the purl format used to identify a mostly universal package URL. It is predictive and supports extended structures like the advanced search and searching for CPE strings.
Версия 13.34.0 (15.09.2021)
- Коммит 153c8ФункциональностьИзменение APIIn API 2.26/3.34 information about bug bounty organization
vulnerability_bugbounty_organization, pricevulnerability_bugbounty_price, and payout datevulnerability_bugbounty_payoutdatewere introduced.
Версия 13.33.1 (13.09.2021)
- Коммит 4280aОптимизация
Версия 13.33.0 (10.09.2021)
- Коммит 951ceФункциональностьИзменение APIЗапрос клиентаIntroduction of the CNA CVSSv3 vector and score. The new fields are accessible via
vulnerability_cvss3_cna_*. They are available on the web site and the latest API 3.33.
Версия 13.32.4 (07.09.2021)
- Коммит 759f3ОптимизацияBetter handling of long strings of commit values shown in commit histories.
Версия 13.32.3 (06.09.2021)
- Коммит 3c9baОптимизацияRanges between versions and up to versions are shown with even higher level of accuracy. This includes titles and summaries as well.
Версия 13.32.2 (02.09.2021)
- Коммит d29bbОптимизацияImprovement of reliability and performance handling of internal submit queue processing.
Версия 13.32.1 (31.08.2021)
- Коммит 7ad33ОптимизацияHardware upgrade for better memory and processing handling.
Версия 13.32.0 (27.08.2021)
- Коммит 90877ФункциональностьЗапрос клиентаActor analysis lists determined TTP (Tactics, Techniques, Procedures)
- Коммит 90877ФункциональностьЗапрос клиентаActor analysis lists determined IOA (Indicator of Attack)
Версия 13.31.0 (26.08.2021)
- Коммит af5a0ФункциональностьOverview of APT actors highlights new actors and added indicators of compromise
Версия 13.30.1 (25.08.2021)
- Коммит a0f19ОптимизацияBetter matching for CPE searches if the official CPE dictionary is not applied properly.
Версия 13.30.0 (24.08.2021)
- Коммит 758aeФункциональностьCTI Analysis provides a wide variety of statistical data regarding actors and activities.
Версия 13.29.3 (23.08.2021)
- Коммит 2d4faОптимизацияVulnerability comments in a specific language are only shown if the site is loaded in that language.
Версия 13.29.2 (22.08.2021)
- Коммит 12bbeОптимизацияFinalized data migration to provide much better performance.
- Коммит 363e0Оптимизация
Версия 13.29.1 (21.08.2021)
- Коммит b2396ОптимизацияEliminated all links to SecurityFocus vulnerability database as they discontinued the service. Thank you for all your contributions to the cyber security industry!
- Коммит adec0ОптимизацияRe-ordered the listing of external resourced within the reference tables.
- Коммит 9b464ОптимизацияNew color scheme for yearly comparison of CVSS base and temp vectors.
Версия 13.29.0 (19.08.2021)
- Коммит c2a84ФункциональностьCyber threat intelligence activity index for software types on the frontpage use machine learning to predict activity index of the future.
- Коммит 52c88ОптимизацияRanges between versions and up to versions are shown with higher level of accuracy. This includes titles and summaries as well.
Версия 13.28.11 (18.08.2021)
- Коммит 2f6c2ОптимизацияAnnouncement banner is shown only if necessary to provide the maximum of space.
- Коммит abbeaОптимизацияTime-only statements are now always shown depending on the selected request language.
Версия 13.28.10 (17.08.2021)
- Коммит 8ae38ОптимизацияVulnerability entries hide header tooltip icons as soon as the screen is too small to read them.
Версия 13.28.9 (16.08.2021)
- Коммит 51f56ОптимизацияFaster calculation and loading of Threat Intelligence activity index chart on the frontpage.
Версия 13.28.8 (15.08.2021)
- Коммит 2b166ОптимизацияBetter performance thanks to optimized database index for several different tables.
Версия 13.28.7 (08.08.2021)
- Коммит 0fc46Исправление ошибокFixed a rare bug on the frontpage where very recent entries are not shown with all available technical details in the title.
Версия 13.28.6 (07.08.2021)
- Коммит b4035ОптимизацияCorrected the right-to-left writing of HTML titles in the Arabic language version of the service.
Версия 13.28.5 (05.08.2021)
- Коммит 98081ОптимизацияOptimized the capabilities of searching with CPE strings. Such searches are now much faster and more accurate.
Версия 13.28.4 (04.08.2021)
- Коммит b697eОптимизацияЗапрос клиентаAligned the listing of
entry_changelogto show the field name ofvulnerabilitycenter_lastupdatedatecorrectly. This issue was reported by Fergus Nelson. - Коммит 006fcИсправление ошибокЗапрос клиентаUnder certain circumstances the calculation of exploit prices was not happening. This has been fixed. This bug was reported by Fergus Nelson.
Версия 13.28.3 (02.08.2021)
- Коммит 9864dОптимизацияExternal redirects first tested for malicious code are using HTTP status code 301 Moved Permanently instead of 302 Found.
Версия 13.28.2 (28.07.2021)
- Коммит 8a3acОптимизацияBetter layouting of the payment site for all languages.
Версия 13.28.1 (27.07.2021)
- Коммит 293f1Исправление ошибок
Версия 13.28.0 (26.07.2021)
- Коммит 5f4e7ФункциональностьЗапрос клиентаLanguage support for Arabic (ar). This includes basic parts of the web site and vulnerability details. Right-to-left is implemented whenever required.
Версия 13.27.4 (24.07.2021)
- Коммит 7430fОптимизацияCurrent CTI scores in overviews are loaded and shown much faster which improves speed of site generation.
- Коммит 7430fИсправление ошибокCurrent CTI scores are shown in overviews in any case even if the servers are under heavy load.
- Коммит 7430fИсправление ошибокCurrent CTI scores in overviews show the correct timestamp of the last update for the most recent entries in the tooltip of the field.
Версия 13.27.3 (17.07.2021)
- Коммит 6861bОптимизацияBetter import and validation handling for APT actor IoC moderation to improve processing and quality.
Версия 13.27.2 (16.07.2021)
- Коммит 363b6ОптимизацияClarification of titles of privilege escalation vulnerabilities. Remote issues that require some form of authentication are shown as Privilege Escalation without mentioning of Remote. Only remote issues without authentication are shown as true Remote Privilege Escalation.
- Коммит 61142Исправление ошибокИзменение APIЗапрос клиентаFixed a rare bug in API 1.11/2.24/3.31 that created an associative array for
software_versionif the list of versions numbers contained the value0. Thanks to Fergus Nelson for reporting this issue.
Версия 13.27.1 (15.07.2021)
- Коммит 6e469Исправление ошибокFixed a bug in the web entry view that undefined CVSSv2 vectors were shown with the value X instead of ND.
- Коммит 6e469Исправление ошибокИзменение APIFixed a bug in API 1.10/2.23/3.30 that undefined CVSSv2 vectors were shown with the value X instead of ND.
- Коммит 6e469Исправление ошибокFixed a bug in overviews to show tooltips for different CVSS sources of CVSSv3 Meta Temp Scores.
Версия 13.27.0 (14.07.2021)
- Коммит cc0e3ФункциональностьЗапрос клиентаCyber threat intelligence events display emerging, current, and upcoming activities by actors.
- Коммит dacc3Исправление ошибокFixed a bug that temp scores of CVSS vectors are not properly stored during initial entry create. This did not affect updated entries.
Версия 13.26.4 (07.07.2021)
- Коммит 84a8bОптимизацияNew layout for changelog for better readability.
- Коммит ae57eОптимизацияEvery commit shown in the changelog contains the commit ID for better reference.
- Коммит 2e4f6ОптимизацияCommits in changelog provide permalink for easier access.
Версия 13.26.3 (30.06.2021)
- Коммит ea669ОптимизацияReinstated linking to CVEdetails.com as they resumed adding and updating new CVEs.
Версия 13.26.2 (25.06.2021)
- Коммит 28728ОптимизацияИзменение APIЗапрос клиентаThe
Content-Typeof all API responses is changed toapplication/json; charset=utf-8. This is not a change in the API itself which is why the version number of the API endpoints is not incremented.
Версия 13.26.1 (24.06.2021)
- Коммит 0d89bОптимизацияИзменение APIЗапрос клиентаThe official vulnerability API endpoint is located at
/?apiand will redirect faulty URLs and GET parameters. Microsoft Power Apps did not respect this URL structure and changed the query string to a parameter tuple with an empty value. Our API endpoint redirected to the correct URL but Power Apps is not capable of following such HTTP redirects. This issue got fixed as Power Apps is now allowed to access the API endpoint even though the request URL format is not entirely correct.
Версия 13.26.0 (18.06.2021)
- Коммит e9063ФункциональностьИзменение APIЗапрос клиентаIn API 2.22/3.29 the field
vulnerability_attckwas made available. It contains the identifier of the associated MITRE ATT&CK technique.
Версия 13.25.3 (16.06.2021)
- Коммит 0494bОптимизацияPerformance optimization during stress (e.g. many users, DDoS attacks).
- Коммит 9660eОптимизацияChanged the algorithm to generate the category values
localandremotein the RSS feeds. Also added the valuepartialforlocalif the attack vector is physical.
Версия 13.25.2 (15.06.2021)
- Коммит 55449ОптимизацияDedicated approval and handling of permissions to use extended CTI features.
- Коммит 00931ОптимизацияThe user profile shows details about the purchased CTI license.
- Коммит 0552fОптимизацияBetter performance of generation of user menu for authenticated users.
Версия 13.25.1 (14.06.2021)
- Коммит fd133ОптимизацияMore accurate timing information about new IoC (Indicator of Compromise) assigned to an APT actor.
Версия 13.25.0 (11.06.2021)
- Коммит ed936Функциональность
Версия 13.24.1 (09.06.2021)
- Коммит 0d01fОптимизацияOptimized abuse detection of search queries for authenticated users.
Версия 13.24.0 (08.06.2021)
- Коммит efc17ФункциональностьCurrent APT actor activities are shown on the community activity stream on the frontpage.
Версия 13.23.0 (07.06.2021)
- Коммит 94a1eФункциональностьDedicated access to CTI features in the item threat of the main menu.
- Коммит fc8b2ФункциональностьЗапрос клиентаAccess to APT actor information to show activities, interest distribution, indicators of compromise, and external references. The analysis is based on unique activity data ranging back to 2016.
- Коммит fc8b2ФункциональностьAccess to country-specific information to show activities and interest distribution.
Версия 13.22.1 (04.06.2021)
- Коммит 03370ОптимизацияTimelines indicating activities show the so called activity index instead of the generic entries label.
- Коммит 03359ОптимизацияBar charts showing exploit prives use exploit instead of the generic entries label.
Версия 13.22.0 (31.05.2021)
- Коммит 7dc24ФункциональностьЗапрос клиентаViews with threat intelligence focus show APT actors identified during CTI activity analysis.
- Коммит 5ada2ФункциональностьTitles of charts link to drilldown sites whenever possible.
Версия 13.21.0 (26.05.2021)
- Коммит edf52ФункциональностьЗапрос клиентаLanguage support for Japanese (jp). This includes basic parts of the web site and vulnerability details.
Версия 13.20.4 (18.05.2021)
- Коммит 02cd6ОптимизацияThe event of web code improvement shown in the community stream links to the changelog.
- Коммит e9923ОптимизацияИзменение APIIn API 1.9/2.21/3.28 requests by the official Splunk app with a license of less than 10 API credits will throw an
403 Splunk app license expirederror to prevent stressing the service with expired Splunk installations.
Версия 13.20.3 (12.05.2021)
- Коммит b4953ОптимизацияStreamlined entry identifier wording on community activity stream on the frontpage.
Версия 13.20.2 (04.05.2021)
- Коммит 8d247ОптимизацияThe changelog does contain the version number of the service.
- Коммит 5421dОптимизацияAll major releases are shown in the changelog with a star.
Версия 13.20.1 (02.05.2021)
- Коммит b0e75ОптимизацияCommunity activities shown on the frontpage do refer to entries with their corresponding VDB ID to increase readability.
Версия 13.20.0 (29.04.2021)
- Коммит 0d72fФункциональностьFrontpage does now show the latest changelog entries of the current day.
- Коммит d6b22ОптимизацияЗапрос клиентаVulnerability entries do now always contain links to available upgrades and patches in the Countermeasure section.
Версия 13.19.3 (28.04.2021)
- Коммит 6df70ОптимизацияPerformance optimization of the Threat Intelligence chart on the frontpage.
- Коммит d1eb6Исправление ошибокЗапрос клиентаFixed an issue where count and overview of user commits were not updated. Reported by user misc
Версия 13.19.2 (26.04.2021)
- Коммит a9542ОптимизацияHardware upgrade for better memory and processing handling.
- Коммит 8dd8cОптимизацияИзменение APIIn API 3.27 the values of numeric request types is verified and if not acceptable, a
400 Bad requesterror message is shown.
Версия 13.19.1 (24.04.2021)
- Коммит 3855bОптимизацияOptimized load balancing, limiter, and DDoS mitigation to provide more stability for legitimate users.
Версия 13.19.0 (22.04.2021)
- Коммит a85dcФункциональностьЗапрос клиентаSubmitted items are reviewed by an automated pre-parser to define a priority for processing by the moderation team. This increases priority for most important items and therefore improves processing speed.
Версия 13.18.0 (20.04.2021)
- Коммит 612a5ФункциональностьЗапрос клиентаLanguage support for Chinese simplified (zh-Hans). This includes basic parts of the web site and vulnerability details.
Версия 13.17.1 (16.04.2021)
- Коммит b93edОптимизацияCode optimization of CTI map generation for faster processing with less memory requirements.
Версия 13.17.0 (15.04.2021)
- Коммит 1ffb5ФункциональностьЗапрос клиентаDescription of CTI trigger possibilities and threshold handling to create events and reports.
- Коммит 881a3ОптимизацияFooter does now refer to your specific copyright and license depending whether there is a commercial, enterprise, or reseller license established.
Версия 13.16.0 (12.04.2021)
- Коммит f7832ФункциональностьЗапрос клиентаSome users mistake their mail address as legitimate username to login. In this case a warning message informs the user about the mistake.
Версия 13.15.3 (08.04.2021)
- Коммит 265e0ОптимизацияPerformance optimization for CTI country analysis (closed beta invite only at the moment). Time range analysis is now incremental which makes report generation much faster (especially for larger ranges).
Версия 13.15.2 (31.03.2021)
- Коммит 05005ОптимизацияAll listings in the personal profile do contain timestamps to make identification of single items much easier.
- Коммит cddb4ОптимизацияCompleted some of the missing translations for French, Italian, Spanish, Polish, and Swedish.
- Коммит 6dc4aОптимизацияImproved the handling of time format regarding country-specific definitions. The language en will show A.M. and P.M. only if the browser is also set to en-us. Otherwise the 24 hour format is used. If the language is set to fr and the browser announces fr-fr there will be the French format 12h34. The 24 hour format is also used as default for all languages without a specific definition.
Версия 13.15.1 (30.03.2021)
- Коммит d71beИсправление ошибокFixed a bug where some long product names, product listings and titles did not show the product name in its entirety.
- Коммит 44ee5ОптимизацияИзменение APIIn API 3.26 fixed an issue where queries for
advisory_date_start,entry_timestamp_create_start,entry_timestamp_change_start, andentry_timestamp_all_startdid not work properly if the request value had a trailing whitespace.
Версия 13.15.0 (29.03.2021)
- Коммит 15c50ФункциональностьИзменение APIThe personal API history does show the execution time for a request to help optimize queries. The column is shown as seconds and sortable.
- Коммит c4d04ФункциональностьЗапрос клиентаAdded planned features in a roadmap to announce upcoming functionality. The items shown are just suggestions and might change regarding implementation and deployment.
Версия 13.14.3 (28.03.2021)
- Коммит 1ec36ОптимизацияЗапрос клиентаBetter description of update handling, especially prioritization of new data for existing entries and update requests by customers.
- Коммит ae8c3ОптимизацияOptimized the description of different commit moderation approaches. The actions for handling spam and profanity are explained in detail.
Версия 13.14.2 (26.03.2021)
- Коммит 206dfИсправление ошибокИзменение APIIn API 2.20/3.25 the list of multiple items in
software_affectedlistandsoftware_notaffectedlistdo trim trailing whitespaces correctly.
Версия 13.14.1 (25.03.2021)
- Коммит a8cdfОптимизацияAdded a new community rank Guru which requires 5000 points to be reached. Therefore, Grand Master is not the highest rank anymore.
Версия 13.14.0 (24.03.2021)
- Коммит 434e3ФункциональностьИзменение APIЗапрос клиентаIntroduced API 3.24 with the new request type
entry_timestamp_all_startwhich combines new items fromentry_timestamp_create_startand updated items fromentry_timestamp_change_startin a single stream.
Версия 13.13.1 (20.03.2021)
- Коммит 26de8ОптимизацияOptimized speed and memory consumption of queries based on LIKE statements in search queries.
Версия 13.13.0 (17.03.2021)
- Коммит 1daf9ФункциональностьЗапрос клиентаDocumentation of the different levels used in the field exploit_exploitability shown on multiple listings on the web site.
Версия 13.12.0 (10.03.2021)
- Коммит 699d0ФункциональностьЗапрос клиентаMade internal changelog public to provide full transparency for our customers. Entries earlier than 2020 just show milestones and not detailed changes.
- Коммит 43dfeФункциональностьAdded link to changelog under support in main menu and in the footer of the page.
- Коммит c0ba0ОптимизацияUpdated internal quality guidance for CVSS fields during creation of new entries based on official Microsoft disclosures.
Версия 13.11.3 (08.03.2021)
- Коммит 1faf6ОптимизацияUpdated internal quality requirements for
advisory_person_nameandadvisory_person_nicknamefields to prevent inaccurate information during daily update procedure.
Версия 13.11.2 (04.03.2021)
- Коммит ecf32ОптимизацияOptimized limiter to prohibit crawling of view elements by non-commercial users.
- Коммит fa612ОптимизацияLimiter uses better geolocation data to prevent malicious users from changing IP addresses to slow down detection of abuse.
Версия 13.11.1 (03.03.2021)
- Коммит 09cefИсправление ошибокFixed a rare German translation issue in a specific sentence of some vulnerability summaries.
Версия 13.11.0 (01.03.2021)
- Коммит 17052ФункциональностьPrepared language database for upcoming translations.
- Коммит b3dfcОптимизацияOptimized language database for better performance.
Версия 13.10.0 (28.02.2021)
- Коммит 021d4ФункциональностьCTI Analysis (closed-beta only) supports search strings for technology-specific research.
Версия 13.9.0 (22.02.2021)
- Коммит e7965ФункциональностьAdded user element under search in main menu.
- Коммит 7ed21ОптимизацияOptimized internal CTI event analysis module.
Версия 13.8.0 (04.02.2021)
- Коммит 5626bФункциональностьAdded load balancing features to handle performance peaks much better.
- Коммит 2efadФункциональностьEnabled priority module to provide high-availability for enterprise customers.
Версия 13.7.1 (03.02.2021)
- Коммит 167acОптимизацияOptimized normalize module to improve quality assurance of vulnerability data management.
Версия 13.7.0 (01.02.2021)
- Коммит 14106ФункциональностьInitiated preparation for port of web services to PHP8. First polyfill functions tested.
Версия 13.6.1 (17.01.2021)
- Коммит bdc13Исправление ошибокFixed a bug where some new user submissions were shown as rejected even though they were still not processsed yet. This issue was reported by user misc.
Версия 13.6.0 (16.01.2021)
- Коммит 960f5ФункциональностьStart of internal testing for CTI attribution module to identify APT group activities as such. Used by CTI team to create CTI alerts and infos for paying customers.
Версия 13.5.4 (09.01.2021)
- Коммит d53a8ОптимизацияИзменение APIЗапрос клиентаChanged
entry_timestamp_deltabehavior from7200to120to keep commit grouping much smaller. Entries updated within a short period of time will pushed into the update stream to provide the most actual data to API users.
Версия 13.5.3 (04.01.2021)
- Коммит 96326ОптимизацияPerformance improvement of search engine. Early dissection will speed up some specific search requests.
- Коммит 96326ОптимизацияPerformance improvement of monoblock engine. Compilation of entries is a bit faster under certain circumstances.
Версия 13.5.2 (23.12.2020)
- Коммит db3d5ОптимизацияUnordered lists in regular content to not a a maximum heigh and auto scrollbars anymore.
Версия 13.5.1 (15.12.2020)
- Коммит c227fОптимизацияPerformance optimization of monoblock data processing.
Версия 13.5.0 (09.12.2020)
- Коммит 93707ФункциональностьAdded a stylesheet to display "time ago" for stream items.
Версия 13.4.0 (08.12.2020)
- Коммит dcd32ФункциональностьИзменение APIIn API 3.23 added request type
cursorinitto determine ideal initial cursor position for ongoing vulnerability stream (e.g. Splunk).
Версия 13.3.0 (04.12.2020)
- Коммит 3abdfФункциональностьIntroduced information regarding ATT&CK. The fields are currently auto-generated and not part of the monoblock.
- Коммит dbcd2ФункциональностьИзменение APIIn API 2.19/3.22 added field
source_cve_cnawhich contains a string of the CVE Numbering Authority that assigned the CVE. - Коммит 118c6Исправление ошибокCorrected a display bug for tooltips of CVSS fields on certain overview pages.
Версия 13.2.1 (03.12.2020)
- Коммит 6c403ОптимизацияOptimized signup flood protection to prevent malicious users from auto-generating community accounts.
Версия 13.2.0 (26.11.2020)
- Коммит 0cd93ФункциональностьAdded new import feature for vulnerability moderators to handle custom entries and large batches of submissions.
- Коммит a4571ФункциональностьThe differences in a diff view are highlighted by color to provide better visibility.
Версия 13.1.2 (13.11.2020)
- Коммит 7983dОптимизацияPerformance optimization of monoblock data processing.
Версия 13.1.1 (06.11.2020)
- Коммит c87a7ОптимизацияMigration to new hardware.
Версия 13.1.0 (02.11.2020)
- Коммит f6cc6ФункциональностьPaying customers do now see a summary on top of every vulnerability entry to identify the most important aspects of the vulnerability.
Версия 13.0.1 (16.10.2020)
- Коммит 68339ОптимизацияOptimized some indexes within the database to improve performance.
Версия 13.0.0 (09.10.2020)
- Коммит 8b201ФункциональностьIntroduced new monoblock structure to provide more possibilities like commits, commit histories, etc.
Версия 12.26.1 (26.09.2020)
- Коммит b11f4ОптимизацияBetter, faster, and more accurate calculation of CTI interest scores.
Версия 12.26.0 (10.09.2020)
- Коммит b015cФункциональностьThe live symbol is pulsating.
- Коммит 2d270ОптимизацияThe CSS code for the custom worldmap is deleted to stramline the CSS file.
Версия 12.25.1 (10.08.2020)
- Коммит b3264ОптимизацияOptimization of browser rendering speed by adding
font-display: swapto the CSS style sheet.
Версия 12.25.0 (16.05.2020)
- Коммит f6e38ФункциональностьAdded an optimization banner to inform users about upcoming changes and features.
Версия 12.24.0 (13.05.2020)
- Коммит 58be3ФункциональностьNew horizontal table style to make some upcoming views better readable.
Версия 12.23.5 (01.05.2020)
- Коммит e655cОптимизацияUpgrading to an extended server cluster for better performance.
Версия 12.23.4 (17.04.2020)
- Коммит ee0ccИсправление ошибокИзменение APIIn API 3.21 the field
entry_timestamp_changeis now always present even if the entry was just created and never updated yet. In this case it will contain the same value likeentry_timestamp_create. User of the official VulDB Splunk App are advised to update to the latest release.
Версия 12.23.3 (04.03.2020)
- Коммит 328c8ОптимизацияCVEdetails.com stopped updating their database. We keep linking old CVEs to their sites but do not do so for newer entries.
Версия 12.23.2 (10.01.2020)
- Коммит ce27fОптимизацияAdded validation styles for numbers, dates, emails, and urls for forms. These detect missing or wrong data before submitting a form.
Версия 12.23.1 (19.11.2019)
- Коммит 7d12fОптимизацияDecreased the font-size of labes from 90% to 75% for better readability.
- Коммит c8999ОптимизацияImproved style and layout of tooltips for better readability.
Версия 12.23.0 (15.11.2019)
- Коммит 5c4b5ФункциональностьLoad new pages with extended loading time show progress bar spinner at top of the site.
Версия 12.22.0 (09.11.2019)
- Коммит c4f43ФункциональностьAdded logos of vendors/products in entries if available.
- Коммит 46f6eОптимизацияStramlined CSS style sheet regarding mini buttons.
Версия 12.21.0 (08.11.2019)
- Коммит 4f1afФункциональностьAdded tooltips for easier access to more information.
- Коммит 63433ОптимизацияAdded fade effect for mini buttons for a better user experience.
Версия 12.20.1 (06.11.2019)
- Коммит 01634ОптимизацияStramlined box elements and columns.
Версия 12.20.0 (31.10.2019)
- Коммит 032a9ФункциональностьИзменение APIЗапрос клиентаIn API 3.20 added field
vulnerability_namewhich contains a string or array a popular names of the vulnerability (e.g. Shellshock, Poodle).
Версия 12.19.0 (13.09.2019)
- Коммит eaf94ФункциональностьИзменение APIЗапрос клиентаIn API 3.19 added field family
entry_details_*which containentry_details_affected,entry_details_vulnerability,entry_details_impact,entry_details_exploit,entry_details_countermeasures, andentry_details_sources.
Версия 12.18.0 (31.08.2019)
- Коммит 34a45ФункциональностьИзменение APIIn API 3.18 added field
entry_replacesto display duplicates which have been replaced by this entry.
Версия 12.17.0 (26.08.2019)
- Коммит 3974bФункциональностьИзменение APIIn API 3.17 added fields
vulnerability_cvss3_basevector_vuldbandvulnerability_cvss3_tempvector_vuldbto display full VulDB CVSSv3 vectors easily.
Версия 12.16.0 (22.08.2019)
- Коммит 3ef93ФункциональностьAdded experimental world map to highlight CTI activities.
- Коммит 5054eОптимизацияImproved the layout of checkboxes on web forms.
Версия 12.15.0 (06.07.2019)
- Коммит e5808ФункциональностьЗапрос клиентаVulDB administrators are able to provide DB dumps for faster onboarding of enterprise customers.
Версия 12.14.0 (01.07.2019)
- Коммит 2fcc6ФункциональностьЗапрос клиентаIntroduction of software type categories available in the field
software_type.
Версия 12.13.3 (04.06.2019)
- Коммит dd112Исправление ошибокИзменение APIIn API 3.16 fixed value of field
advisory_identifier, disabled safeguard mechanism to prevent inconsistency in result count.
Версия 12.13.2 (01.06.2019)
- Коммит 26f6bОптимизацияUpdated the Data Privacy Notice to clarifying wording and added details about payment processing.
Версия 12.13.1 (27.05.2019)
- Коммит 6e92eОптимизацияAdded loading bar on top of the page to indicate the loading of large pages.
Версия 12.13.0 (24.05.2019)
- Коммит bcb85ФункциональностьSubmitting forms locks input fields and shows progress indicator.
Версия 12.12.0 (17.05.2019)
- Коммит c9222ФункциональностьИзменение API
Версия 12.11.0 (08.05.2019)
- Коммит 0fb91ФункциональностьИзменение APIIn API 3.14 requesting dedicated CVSS fields supports the official response format (e.g.
vulnerability_cvss3_vuldb_basescore) and the legacy format (e.g.vulnerability_cvss3_basescore_vuldb). The legacy format will be dropped in a future major release of the API.
Версия 12.10.1 (24.04.2019)
- Коммит 1dc8aОптимизацияImproved the layout of the search menu item for better accessibility.
- Коммит bb0d0ОптимизацияThe status boxes of live views are now pulsating if there is currently some activity.
Версия 12.10.0 (17.04.2019)
- Коммит d1042ФункциональностьИзменение APIЗапрос клиентаIn API 1.8/2.18/3.13 added field
software_cpe23which introduces full CPE 2.3 support whereassoftware_cpeis still providing CPE 2.2 data.
Версия 12.9.0 (15.04.2019)
- Коммит 3bfedФункциональностьAdded a detailed clendar view for years an months.
- Коммит faa07ОптимизацияStreamlined the row behavior.
Версия 12.8.2 (10.04.2019)
- Коммит 35519ОптимизацияHovering a clickable symbol in an overview will now be indicated by the cursor as pointer.
- Коммит cdf7bОптимизацияImproved the layout of buttons inside text boxes (e.g. searches).
Версия 12.8.1 (01.04.2019)
- Коммит 27ca6ОптимизацияCentered the purchase table for better accessibility.
Версия 12.8.0 (29.03.2019)
- Коммит 54a22ФункциональностьЗапрос клиентаAdded the possibility to purchase new licenses online.
Версия 12.7.0 (21.03.2019)
- Коммит e4bb6ФункциональностьAdded the possibility to search within the main menu.
Версия 12.6.0 (15.03.2019)
- Коммит d3ac7ФункциональностьЗапрос клиентаAdded multiple levels to the main menu to provide better accessibility to the variety of features.
- Коммит 35f3eФункциональностьAdded the possibility for buttons within textboxes (e.g. searches).
Версия 12.5.0 (08.03.2019)
- Коммит 1ae53ФункциональностьVulnerability entries do now show the exploit prices with a graphical element.
- Коммит 74f44ОптимизацияImproved the display of symbols in overviews.
Версия 12.4.0 (04.03.2019)
- Коммит 55a0eФункциональностьИзменение APIIn API 1.7/2.17/3.12 added fields
entry_locked_statusandentry_locked_reasonto inform about entries undergoing update and review processes (they might change soon).
Версия 12.3.0 (01.03.2019)
- Коммит 81d15ФункциональностьIntroduction of the C3BM Index (CVSSv3 Base Meta Index) based on CVSS data of multiple sources.
Версия 12.2.0 (28.02.2019)
- Коммит 231a4ФункциональностьLarge tables might be shown with a striped layout to improve readability.
- Коммит 16d23ОптимизацияImproved the layout of buttons in the user submenu.
Версия 12.1.0 (25.02.2019)
- Коммит 9c6deФункциональностьЗапрос клиентаSymbols in overviews are clickable to provide a drilldown feature. This is true for CVSS, exploit prices, exploitability, and countermeasures.
- Коммит 92aacОптимизацияHeader text is now a graphical element.
Версия 12.0.4 (23.02.2019)
- Коммит 82de5ОптимизацияSlightly changed the colorization of remedation and exploitability levels.
Версия 12.0.3 (22.02.2019)
- Коммит 55aa5ОптимизацияChanged the pointer behavior of certain table headers from grab to regular pointer.
Версия 12.0.2 (21.02.2019)
- Коммит 81d16ОптимизацияStreamlined user menu buttons.
- Коммит 81d16ОптимизацияStreamlined exploitability fields.
Версия 12.0.1 (20.02.2019)
- Коммит 2d300ОптимизацияИзменение APIIn API 1.6/2.16/3.11 improved speed, reliability and accuracy of
updatesqueries. - Коммит d6d17ОптимизацияImproved the width behavior of user menu buttons.
- Коммит a25daОптимизацияLinks in overviews are clickable within the whole cell and not just on the text itself.
Версия 12.0.0 (18.02.2019)
- Коммит b9184ФункциональностьЗапрос клиентаNew overviews introduced with a lot of information items.
- Коммит 65679ФункциональностьAdded support for dynamic behavior for long tables with more than six columns.
- Коммит 4c719ОптимизацияStreamlined the behavior of content and article.
- Коммит 4c719ОптимизацияStreamlined the behavior of tables.
- Коммит 4c719ОптимизацияStreamlined the behavior of buttons.
Версия 11.27.0 (15.02.2019)
- Коммит c278eФункциональностьAdded the posibility to fade-in some elements for a better user experience.
- Коммит 07fdcОптимизацияImproved the width behavior of user menu buttons.
Версия 11.26.0 (08.02.2019)
- Коммит 7324eФункциональностьAdded buzzboxes to show statistical data about the project.
- Коммит 3b784ОптимизацияOptimized the margin behavior of columns.
Версия 11.25.0 (06.02.2019)
- Коммит 250b0ФункциональностьИзменение APIЗапрос клиентаIn API 3.10 added request parameter
offsetto set a starting point for results (pagination).
Версия 11.24.1 (01.02.2019)
- Коммит 5d94fОптимизацияReached the 10.000th community user. Congratulations!
Версия 11.24.0 (18.01.2019)
- Коммит c5ee2ФункциональностьИзменение APIIn API 3.9 added field
software_type.
Версия 11.23.0 (11.01.2019)
- Коммит dfb03ФункциональностьИзменение APIЗапрос клиента
Версия 11.22.1 (08.01.2019)
- Коммит 608e1Исправление ошибокИзменение APIIn API 1.5/2.15/3.7 field
software_componentis not returning multiple fields anymore to prevent parsing errors.
Версия 11.22.0 (01.01.2019)
- Коммит 772cfФункциональность
Версия 11.21.0 (13.12.2018)
- Коммит 1deb7ФункциональностьИзменение APIЗапрос клиентаIn API 1.4/2.14/3.6 requesting details without unlocked archive access will warn in field
entry_warningabout limitation.
Версия 11.20.0 (28.10.2018)
- Коммит d4c8eФункциональностьLarge quantities of statistical views are created by Cronjobs to improve performance.
Версия 11.19.0 (01.10.2018)
- Коммит 3b088ФункциональностьЗапрос клиентаLaunch of Video Tutorial Series on YouTube to introduce new users to the capabilities of the service.
Версия 11.18.1 (20.09.2018)
- Коммит c4d5cОптимизацияChanged the cursor behavior for votes from copy to default.
- Коммит c4d5cОптимизацияChanged the cursor behavior of ribbons to default.
Версия 11.18.0 (18.09.2018)
- Коммит afb23ФункциональностьAdded custom ribbons to popup with interesting details if needed.
- Коммит 8ee7cОптимизацияImproved the behavior of items which have a fade-in effect.
Версия 11.17.0 (01.09.2018)
- Коммит 8dfe7ФункциональностьЗапрос клиентаRelease of official Splunk App which is available on Splunkbase for free. Commercial or enterprise license is recommended.
Версия 11.16.0 (31.08.2018)
- Коммит c00a7ФункциональностьЗапрос клиентаIntroduction of CPE lists in entry views to indicate the affected products.
Версия 11.15.0 (06.08.2018)
- Коммит 9e978ФункциональностьИзменение APIIn API 3.5 support for the queries
advisory_date_start,entry_timestamp_create_start,entry_timestamp_change_start. - Коммит 576a2ОптимизацияЗапрос клиентаDisabled the gradients in symbols.
Версия 11.14.4 (04.08.2018)
- Коммит 48a03ОптимизацияFixed an issue with the visibility of long date symbols.
Версия 11.14.3 (03.08.2018)
- Коммит 7d763ОптимизацияImprovement of gradient in symbols.
- Коммит 856afОптимизацияAdding support for other font families in symbols.
Версия 11.14.2 (02.08.2018)
- Коммит b0000ОптимизацияIntroduction of gradients in symbols.
Версия 11.14.1 (01.08.2018)
- Коммит 7ef2dОптимизацияIntroduction of antialiasing of fonts for better readability on high-resolution displays.
Версия 11.14.0 (31.07.2018)
- Коммит dc2aeФункциональностьAdded support for stream symbols shown on overviews.
Версия 11.13.1 (22.07.2018)
- Коммит b675bОптимизацияImproved the layout of mini buttons.
Версия 11.13.0 (12.07.2018)
- Коммит b1af8ФункциональностьЗапрос клиентаAdded dynamic layouts for tables to hide certain columns under specific conditions. This improves the mobile view a lot.
Версия 11.12.1 (10.07.2018)
- Коммит d5a10ОптимизацияOptimized the margin of header elements.
Версия 11.12.0 (06.07.2018)
- Коммит bc316ФункциональностьIntroduction of the user menu for authenticated users. This menu shows additional details and provides access to more features.
Версия 11.11.3 (05.07.2018)
- Коммит be3b7ОптимизацияA new table wrapper optimizes how tables are shown on different screen sizes.
Версия 11.11.2 (04.07.2018)
- Коммит c4570ОптимизацияStreamlining of cvss lists.
Версия 11.11.1 (29.06.2018)
- Коммит 7409eОптимизацияStreamlining of mini button for unlock announcements.
Версия 11.11.0 (28.06.2018)
- Коммит b09c3ФункциональностьIntroduction of column views, as used in the documentation section of the service.
Версия 11.10.1 (12.06.2018)
- Коммит 76199Исправление ошибокИзменение APIЗапрос клиентаIn API 2.13/3.4 fixed enforcement of
querylimitfordetails=0queries. This issue was reported by user portal.
Версия 11.10.0 (11.06.2018)
- Коммит 361d1ФункциональностьИзменение API
Версия 11.9.4 (10.06.2018)
- Коммит 2ed12ОптимизацияStreamlining of mini buttons.
Версия 11.9.3 (08.06.2018)
- Коммит 88f01ОптимизацияMini buttons do now animate on hover.
Версия 11.9.2 (06.06.2018)
- Коммит 216dfИсправление ошибокИзменение APIЗапрос клиентаIn API 1.3/2.12/3.2 fixed wrong values in
response_remaining(calculation was correct, value shown was wrong). This issue was reported by user portal.
Версия 11.9.1 (04.06.2018)
- Коммит 6d6d9Исправление ошибокИзменение API
Версия 11.9.0 (18.05.2018)
- Коммит ab9a7ФункциональностьИзменение APIЗапрос клиента
Версия 11.8.0 (15.05.2018)
- Коммит 38be8ФункциональностьИзменение API
- Коммит 38be8ФункциональностьИзменение APIIn API 2.10 added
vulnerability_risk(also shown in non-detail responses).
Версия 11.7.1 (14.05.2018)
- Коммит 1d0c8ОптимизацияИзменение APIЗапрос клиентаIn API 2.9 added detailed error messages regarding API key problems (
missing,wrong,unknown,valid). - Коммит 1d0c8ОптимизацияИзменение APIIn API 2.9 enterprise customers have performance priority over free users.
Версия 11.7.0 (08.05.2018)
- Коммит a20dbФункциональностьИзменение APIIn API 2.8 the field
entry_titledoes not show CVE anymore. - Коммит a20dbФункциональностьИзменение APIIn API 2.8 added fields
vulnerability_timeline,countermeasure_reactiondays,countermeasure_0daydays,countermeasure_exposuredays, andcountermeasure_exploitdelaydays.
Версия 11.6.0 (07.05.2018)
- Коммит 7e839ФункциональностьИзменение APIЗапрос клиентаIn API 2.7 added support for request type
topsoftware.
Версия 11.5.0 (01.05.2018)
- Коммит c968eФункциональностьMade Data Privacy Notice available to comply with european GDRP requirements.
Версия 11.4.0 (01.04.2018)
- Коммит 3bdb9ФункциональностьRelease of Alexa Skill to make vulnerability management possible with the AI by Amazon. More information.
Версия 11.3.0 (22.03.2018)
- Коммит b90e6ФункциональностьЗапрос клиентаWorking on a proof-of-concept to use Alexa as a gateway to work with vulnerability data.
Версия 11.2.3 (17.02.2018)
- Коммит f3590ОптимизацияIntroduction of a container element to have more flexibility with layout positioning on the web frontend.
Версия 11.2.2 (01.02.2018)
- Коммит 51a81ОптимизацияIntroduction of a sub-title on the site title to better describe the service.
Версия 11.2.1 (29.01.2018)
- Коммит 2638bОптимизацияOfficial approval of VulDB by Norton Site Checker. The service is rated as safe.
Версия 11.2.0 (22.01.2018)
- Коммит 49bb7ФункциональностьИзменение APIUpgrade to API 2.0. Response contains three elements (request, response, result) instead just the results.
Версия 11.1.1 (23.09.2017)
- Коммит aebb3ОптимизацияImprovement of the container margins to have a better layout.
Версия 11.1.0 (16.09.2017)
- Коммит 05eb4ФункциональностьPartnership with Titanium Team of scipag to establish Cyber Threat Intelligence services (CTI). More information.
Версия 11.0.1 (02.06.2017)
- Коммит 45634ОптимизацияOptimization of automated exploit price calculation to gain more accuracy.
Версия 11.0.0 (01.06.2017)
- Коммит a862dФункциональностьIntroduction of dynamic graphs shown in different views.
Версия 10.12.2 (19.05.2017)
- Коммит a7bd0ОптимизацияOptimization of the official Twitter feed.
Версия 10.12.1 (16.05.2017)
- Коммит 93c6eИсправление ошибокFixed a display issue on the frontpage. Under certain circumstances new items were not shown as bold.
Версия 10.12.0 (28.04.2017)
- Коммит 7a1d8ФункциональностьAdded dynamic charts in the results overview of web searches.
Версия 10.11.0 (21.04.2017)
- Коммит e7f52ФункциональностьAdded dynamic charts of all kind of overview pages.
Версия 10.10.0 (10.04.2017)
- Коммит 97ed5ФункциональностьCreated an About page which explains the history of our vulnerability service.
Версия 10.9.0 (01.04.2017)
- Коммит 3d204ФункциональностьAdded the 100.000th entry to the database. Check the stats for more details. Congratulations!
Версия 10.8.0 (22.03.2017)
- Коммит 1f1f6ФункциональностьЗапрос клиентаVulnerability entries flagged as false-positive do now highlight this fact on their pages (title and introduction).
Версия 10.7.0 (21.03.2017)
- Коммит 2eb19ФункциональностьIntroduced data for OVAL and IAVM. Completed all existing entries with appropriate data.
Версия 10.6.0 (23.02.2017)
- Коммит f7af4ФункциональностьЗапрос клиентаSupporting CVSS scores from multiple sources (VulDB, vendor, researcher, NVD).
Версия 10.5.1 (13.02.2017)
- Коммит 915e2ОптимизацияOptimized the indexing of the database to improve search performance.
Версия 10.5.0 (01.02.2017)
- Коммит a1e82ФункциональностьPublic availability of community edition. Create your account for free.
Версия 10.4.1 (20.01.2017)
- Коммит ed89aОптимизацияOptimized performance by using specific features and configuration settings in PHP7.
Версия 10.4.0 (18.01.2017)
- Коммит 2eb99ФункциональностьAdded an advanced search on the web site to improve specific search capabilities.
Версия 10.3.0 (01.01.2017)
- Коммит 766b4ФункциональностьStart open beta of community edition.
Версия 10.2.0 (20.12.2016)
- Коммит afa9dФункциональностьIntroduced Bug of the Day on the front page. One of the more serious or interesting issues of the recent days is shown every day.
Версия 10.1.1 (19.12.2016)
- Коммит e0724ОптимизацияRedesign of the frontpage with a slick layout and better data accessibility.
Версия 10.1.0 (16.12.2016)
- Коммит 17b00ФункциональностьImplemented a module to detect loss of data integrity on the service.
Версия 10.0.0 (01.12.2016)
- Коммит 88cceФункциональностьИзменение APIЗапрос клиентаIntroduction of public API to provide vulnerability for automated processing.
Версия 9.19.1 (08.11.2016)
- Коммит 1bf65ОптимизацияOptimization of database table structures to gain more flexibility and performance.
Версия 9.19.0 (07.11.2016)
- Коммит 41c1aФункциональностьImplementation of Content Security Policy (CSP) to improve web security of the service.
Версия 9.18.0 (02.11.2016)
- Коммит 2c835ФункциональностьIt is now possible to upvote comments for vulnerability entries. Upvoted comments are shown on top of the list.
Версия 9.17.0 (01.11.2016)
- Коммит 01762ФункциональностьStart closed beta of community edition.
Версия 9.16.0 (26.10.2016)
- Коммит 464dcФункциональностьEditing a section of a vulnerability will automatically jump to the correct section of the edit form.
Версия 9.15.0 (25.10.2016)
- Коммит cbba3ФункциональностьExisting vulnerability entries can now be edited immediately by members of the moderation team.
Версия 9.14.0 (14.10.2016)
- Коммит 83203ФункциональностьEnhanced the existing cache module to allow caching of database queries and results.
Версия 9.13.0 (11.10.2016)
- Коммит 786cbФункциональностьEvery user account has now a profile.
- Коммит 7868eФункциональностьRegistered users are able to tweak their own configuration of the service.
Версия 9.12.0 (10.10.2016)
- Коммит b9c2dФункциональностьRegistered users are able to see history of vulnerability entries they have been viewing earlier.
Версия 9.11.0 (07.10.2016)
- Коммит 7da47ФункциональностьRegistered users are able to gain community points with activities to get a higher ranking on the site.
Версия 9.10.0 (06.10.2016)
- Коммит f618bФункциональностьUsers are able to submit new entries which will be queued and processed by the vulnerability moderation team.
Версия 9.9.0 (05.10.2016)
- Коммит da14aФункциональностьUsers accessing resources which require an authentication receive a proper error message.
Версия 9.8.0 (04.10.2016)
- Коммит 2f00fФункциональностьUsers are able to reset their password via email (password recovery).
Версия 9.7.0 (03.10.2016)
- Коммит 5a1b1ФункциональностьЗапрос клиентаLogins with a new device or from an unknown source will inform the account holder about the potentially suspicious login. New devices are stored and shown in the personal device management overview.
Версия 9.6.0 (24.06.2016)
- Коммит 688a5ФункциональностьAdded a limiter to prevent malicious users from scraping our data without authorization.
Версия 9.5.0 (22.06.2016)
- Коммит c4477ФункциональностьЗапрос клиентаAdded full support for CVSSv3.
Версия 9.4.0 (01.10.2016)
- Коммит 0aa68ФункциональностьIntroduction of exploit price calculations to provide a better tool to prioritize exposed vulnerabilies.
Версия 9.3.1 (05.07.2016)
- Коммит 4aa37ОптимизацияPerformance optimization for all web views.
Версия 9.3.0 (30.06.2016)
- Коммит 4aecfФункциональностьSome statistical data is now stored in a centralized table which allows them to be shown on multiple places without new calculations every time.
Версия 9.2.0 (02.05.2016)
- Коммит 3fee0ФункциональностьSupport for data fields of Tenable Nessus.
Версия 9.1.1 (29.04.2016)
- Коммит 756eaОптимизацияOptimize redirects of RSS feed requests.
Версия 9.1.0 (27.04.2016)
- Коммит 8ab5bФункциональностьSome data points are now shown in bubbles.
- Коммит 939cfОптимизацияIntroduced a new site footer.
Версия 9.0.0 (14.04.2016)
- Коммит b3559ОптимизацияComplete rewrite of the search engine to provide better matches and optimized performance.
Версия 8.1.2 (06.04.2016)
- Коммит 3ce21ОптимизацияOptimization of HTML code to make pages smaller and faster to download and render.
Версия 8.1.1 (04.04.2016)
- Коммит 3b609Исправление ошибокFixed a bug or slow indexes which improved the performance of vulnerability display a lot.
Версия 8.1.0 (01.04.2016)
- Коммит 7bc0aФункциональностьIntroduction of new summaries and descriptions with more data enrichment.
- Коммит 56864ОптимизацияPerformance optimization.
Версия 8.0.0 (14.03.2016)
- Коммит 5e4e5ФункциональностьIntroducing Chart.js to generate dynamic charts.
Версия 7.1.3 (11.03.2016)
- Коммит a0b92ОптимизацияEstablish VulDB as independent service to gain more flexibility.
Версия 7.1.2 (23.02.2016)
- Коммит 76b37ОптимизацияMigration to new hardware.
Версия 7.1.1 (17.02.2016)
- Коммит 07bfbОптимизацияRenaming the Twitter handle from scipvulbot to "vuldb"https://twitter.com/vuldb.
Версия 7.1.0 (19.01.2016)
- Коммит 55bf1ФункциональностьEnhancing statistical overview to provide previews and forecasts based in historical data.
- Коммит 72424ФункциональностьCreating new text for different pages and sub-pages.
Версия 7.0.5 (01.12.2015)
- Коммит ea951ОптимизацияЗапрос клиентаAdding caching modules to improve site performance. Caching is possible per site and file.
Версия 7.0.4 (20.11.2015)
- Коммит 58defОптимизацияЗапрос клиентаIncreasing update frequency of existing entries.
Версия 7.0.3 (19.08.2015)
- Коммит 2ddb7Исправление ошибокCorrected the listing of multiple authors of a vulnerability.
Версия 7.0.2 (07.08.2015)
- Коммит 3b6e7ОптимизацияMore performance optimization of database queries.
Версия 7.0.1 (03.08.2015)
- Коммит b1554ОптимизацияPerformance optimization of database queries.
Версия 7.0.0 (10.07.2015)
- Коммит 243a7ФункциональностьRedesign of modular frontpage with the introduction of Top 5 lists.
Версия 6.31.0 (07.07.2015)
- Коммит 44e99ФункциональностьAdding Qualys data to vulnerability entries.
- Коммит fe3d0ФункциональностьAdding SecurityCenter data to vulnerability entries.
Версия 6.30.0 (09.03.2015)
- Коммит e19c1ФункциональностьIntroduction of new queue for vulnerability processing by mod team.
Версия 6.29.3 (25.02.2015)
- Коммит 8695fОптимизацияOptimization of all X-Force data import and display.
Версия 6.29.2 (03.02.2015)
- Коммит 3453eОптимизацияOptimizaton of summaries and descriptions of vulnerability entries.
Версия 6.29.1 (08.01.2015)
- Коммит 7ac76ОптимизацияOptimization of version descriptions of vulnerability entries.
Версия 6.29.0 (24.06.2014)
- Коммит 0b232ФункциональностьЗапрос клиентаApproaching backlog of old entries before 2003 with vulnerabilities ranging back to 1988. More information.
Версия 6.28.0 (26.05.2014)
- Коммит 0f72aФункциональностьIntroduction of the "see also" hint which lists entries with are connected or similar.
Версия 6.27.0 (17.04.2014)
- Коммит 35f6fФункциональностьAdding a field to declare the date of the introduction of a vulnerability.
Версия 6.26.1 (27.03.2014)
- Коммит 3efc3ОптимизацияOptimization of queuing of new vulnerabilities to better prioritize processing.
Версия 6.26.0 (20.03.2014)
- Коммит 7caf2ФункциональностьЗапрос клиентаAdded language support for Polish.
Версия 6.25.12 (14.03.2014)
- Коммит bc799ОптимизацияDatabase index optimization.
Версия 6.25.11 (07.03.2014)
- Коммит d0ddaОптимизацияOptimizing collision detection during the processing of new entries.
Версия 6.25.10 (10.02.2014)
- Коммит ce076ОптимизацияOptimizing summaries regarding sources of vulnerability entries.
Версия 6.25.9 (29.01.2014)
- Коммит 03d37ОптимизацияAdded helper for vulnerability moderation team to determine arguments of attacks faster and more reliable.
Версия 6.25.8 (28.01.2014)
- Коммит 53a64ОптимизацияOptimizing summaries regarding code samples.
Версия 6.25.7 (23.01.2014)
- Коммит 61b0dОптимизацияOptimizing helper for vulnerability moderation team to complete new and existing entries with additional data. This increases data quality drastically.
Версия 6.25.6 (14.01.2014)
- Коммит a17f4Исправление ошибокFixed a bug where sometimes summaries and descriptions did contain spaces twice instead of once. This was just a problem in the HTML source code and not on the rendered web site.
Версия 6.25.5 (09.01.2014)
- Коммит 1cd31ОптимизацияAdded helper for vulnerability moderation team to determine keywords which shall be used within the title of a vulnerability entry.
Версия 6.25.4 (19.12.2013)
- Коммит 12a4fОптимизацияOptimizing the autocomplete feature to update new entries with historical data.
Версия 6.25.3 (06.11.2013)
- Коммит 1434cОптимизацияOptimizing the pre-parser to handle import of new vulnerability entries.
Версия 6.25.2 (22.10.2013)
- Коммит a52cfОптимизацияChanging the algorithm to calculate the current threat level.
Версия 6.25.1 (21.10.2013)
- Коммит 921d7ОптимизацияChanging the algorithm to calculate the risk rating of vulnerability entries.
Версия 6.25.0 (18.10.2013)
- Коммит b4283ФункциональностьAdding the support for OpenVAS data.
Версия 6.24.0 (17.10.2013)
- Коммит 01303ФункциональностьIntroducing the threat level to show an indicator for the current vulnerability landscape.
Версия 6.23.0 (03.10.2013)
- Коммит e8e8fФункциональностьAdding the possibility to add a custom word to the title to provide more details on first sight.
Версия 6.22.0 (01.10.2013)
- Коммит f8c1eФункциональностьEstablishing a background updater which handles entries which need to be updated without interfering with the manual work of the moderation team.
- Коммит 5abb3ОптимизацияEnhancement of the review procedure of CVE entries pushed by MITRE to improve processing and quality.
Версия 6.21.0 (13.09.2013)
- Коммит 9f09fФункциональностьCollaboration with vFeed to exchange and enrich vulnerability data. More information.
Версия 6.20.1 (12.09.2013)
- Коммит 088acОптимизацияCompleting all existing entries with Secunia data.
Версия 6.20.0 (11.09.2013)
- Коммит 2b409ФункциональностьIntroducing risk maps to provide easy comparability between risk ratings of different sources.
Версия 6.19.0 (10.09.2013)
- Коммит 8966cФункциональностьIntroducing support for Secunia data as a source.
- Коммит 8966cФункциональностьIntroducing support for IBM X-Force data as a source.
Версия 6.18.0 (23.08.2013)
- Коммит 3881dФункциональностьAdded the 10.000th entry about Google Chrome to the database. Check the stats for more details. Congratulations! More information.
Версия 6.17.0 (12.08.2013)
- Коммит d8b39ФункциональностьЗапрос клиента
Версия 6.16.0 (09.08.2013)
- Коммит 40986ФункциональностьAdding support for a wide variety of new data fields.
Версия 6.15.2 (05.07.2013)
- Коммит 4dffeОптимизацияEnhancement of the review procedure of Nessus entries.
Версия 6.15.1 (28.06.2013)
- Коммит 4b14bОптимизацияOptimizing the plausability checks during vulnerability moderation to prevent contradicting and wrong data.
Версия 6.15.0 (19.06.2013)
- Коммит 0b42cФункциональностьAdded support for CPE to better identification of products.
Версия 6.14.1 (11.06.2013)
- Коммит 0b61cОптимизацияUpdating large quantities of vulnerabilities is now improved thanks to incremental updates.
Версия 6.14.0 (03.06.2013)
- Коммит 207dbФункциональностьAdded support for screenshots per entries to illustrate attacks and countermeasures. More information.
- Коммит 207dbФункциональностьAdded support to embed external videos per entries to illustrate attacks and countermeasures. Videos can be hosted at YouTube and Vimeo. More information.
Версия 6.13.0 (31.05.2013)
- Коммит 22b2bФункциональностьAdded the capability to add quotes from advisories to enrich entries.
- Коммит 22b2bФункциональностьAdded the capability to add links to videos for a vulnerability.
Версия 6.12.0 (29.04.2013)
- Коммит 57d8eФункциональностьIntroduction of CVSS maps. More information.
Версия 6.11.0 (11.04.2013)
- Коммит 6a9d2ФункциональностьAdded the capability to list multiple different products in an affected list. This is done additionally to the main product that is affected by a vulnerability.
Версия 6.10.2 (04.04.2013)
- Коммит 239acОптимизацияEnhanced input validation mechanism during vulnerability management to prevent mistakes regarding vendor/product definitions.
Версия 6.10.1 (28.03.2013)
- Коммит 497c0ОптимизацияOptimization of logging and tracking of queued items processed by the moderation team.
Версия 6.10.0 (19.03.2013)
- Коммит c46f6ФункциональностьAdded input validation mechanisms during vulnerability management.
- Коммит bc987ОптимизацияOptimized input validation mechanisms during vulnerability management.
Версия 6.9.1 (09.01.2013)
- Коммит b0410Исправление ошибокFixed an issue in the database. This did only affect moderation of vulnerabilities and was not reflected on the user-side of the service.
Версия 6.9.0 (21.12.2012)
- Коммит 79a9bФункциональностьAdded a feature to normalize terms between different vulnerability entries.
Версия 6.8.1 (26.11.2012)
- Коммит d0a20ОптимизацияPrepared the support for Milw0rm data for entries with an ID up to 50000.
Версия 6.8.0 (31.10.2012)
- Коммит d83e7ФункциональностьЗапрос клиентаAdded language support for French. More information.
Версия 6.7.0 (15.10.2012)
- Коммит 5a191ФункциональностьЗапрос клиентаAdded language support for English. More information.
Версия 6.6.0 (01.10.2012)
- Коммит 61e91ФункциональностьЗапрос клиентаAdded language support for Spanish. More information.
- Коммит 58566Исправление ошибокFixed an upload problem of new entries into the database.
Версия 6.5.0 (24.09.2012)
- Коммит a75e7ФункциональностьЗапрос клиентаAdded language support for Swedish. More information.
Версия 6.4.0 (04.07.2012)
- Коммит a681eФункциональностьMigrating all available data from NASLDB.
Версия 6.3.0 (18.06.2012)
- Коммит 98ea9ФункциональностьЗапрос клиентаAdded language support for Italian. More information.
- Коммит 7b83dИсправление ошибокFixed a problem in the German module responsible to handle umlauts.
Версия 6.2.2 (05.06.2012)
- Коммит 895eaОптимизацияOptimizing the autocomplete feature to update new entries with historical data.
Версия 6.2.1 (10.04.2012)
- Коммит 3a3bbИсправление ошибокFixed a problem during the display of archive data.
Версия 6.2.0 (13.03.2012)
- Коммит e00e9ФункциональностьAdded support for better linking to external sources.
Версия 6.1.1 (09.03.2012)
- Коммит d36aeОптимизацияAdded new categories/keywords in the existing RSS feeds.
Версия 6.1.0 (08.03.2012)
- Коммит c17b6ФункциональностьAdded the calculation of the exposure time which measures the time of the disclosure and the mitigation possibilities of a vulnerability.
- Коммит 23aa8ОптимизацияReviewed all available data of OSVDB.
Версия 6.0.0 (06.03.2012)
- Коммит 934a4ОптимизацияOptimization of summaries and descriptions.
- Коммит 3484cФункциональностьAdded support to show images of vendors/products.
- Коммит 3484cФункциональностьAdded support for Google dorks to find issues very quickly.
Версия 5.2.2 (05.03.2012)
- Коммит 90cf5ОптимизацияPerformance optimization.
Версия 5.2.1 (02.03.2012)
- Коммит e27acОптимизацияPerformance optimization.
Версия 5.2.0 (15.02.2012)
- Коммит d6183ФункциональностьAdded web import feature for vulnerability moderators to handle new entries based on web resources.
Версия 5.1.0 (06.01.2012)
- Коммит 2e4edФункциональностьAdded single import feature for vulnerability moderators to handle single entries outside the regular queueing.
Версия 5.0.0 (22.02.2011)
- Коммит 04086ФункциональностьEstablishing new database backend with much more possibilities.
Версия 4.10.2 (01.12.2010)
- Коммит 8b4dfОптимизацияMove to more powerful hardware due to increase in access.
Версия 4.10.1 (30.07.2010)
- Коммит 787d2ОптимизацияBackporting all information for reference maps of existing entries.
Версия 4.10.0 (10.06.2010)
- Коммит 57677ФункциональностьAdding Alert Info on web site to inform visitors about latest critical issue.
- Коммит 80bfaФункциональностьDelivering ads for non-paying and unauthenticated users.
- Коммит acc6fОптимизацияOptimizing database structure for more flexibility and performance.
Версия 4.9.0 (08.03.2010)
- Коммит dbea0ФункциональностьIntroduction of Reference Maps for better linking of vulnerabilities and sources. More information.
Версия 4.8.1 (10.02.2010)
- Коммит e7405ОптимизацияMake more statistical data available with better flexibility.
Версия 4.8.0 (08.02.2010)
- Коммит 47351ФункциональностьAdding the alert info on top of the site to show the most recent vulnerability with the highest emergency rating.
Версия 4.7.2 (05.02.2020)
- Коммит 1a52bОптимизацияImprovement of VulDB alert system.
Версия 4.7.1 (02.02.2010)
- Коммит aa53eОптимизацияImproved summary details per entries. More information.
- Коммит bd3fdОптимизацияPerformance optimization for all RSS feeds. More information.
Версия 4.7.0 (11.01.2011)
- Коммит 90de3ФункциональностьЗапрос клиентаAdded VulDB Alert to inform customers about issues applicable for them.
Версия 4.6.0 (16.12.2009)
- Коммит 9b5dcФункциональностьPartnership with OSVDB to cross-link vulnerability entries. More information.
Версия 4.5.0 (27.10.2009)
- Коммит 3dd4eФункциональностьIntroduction of statistical overview. More information.
- Коммит 3dd4eФункциональностьIntroduction of product overview. More information.
Версия 4.4.0 (03.09.2009)
- Коммит 399e8ФункциональностьStart of the Twitter bot vuldb (formerly known as scipvulbot). More information.
Версия 4.3.0 (25.08.2009)
- Коммит 61ad7ФункциональностьCompleting existing entries with most actual data. This includes but is not limited to CVE, Secunia, SecurityTracker, vendor, and confirmation details. More information.
Версия 4.2.0 (20.08.2009)
- Коммит 411d3ФункциональностьAdding new data fields to enrich vulnerability entries.
Версия 4.1.0 (01.08.2009)
- Коммит d21a3ФункциональностьIntroduction of recurring update processes.
Версия 4.0.1 (26.06.2009)
- Коммит b47f5ОптимизацияOptimization of existing RSS feeds by adding summaries and categories. More information.
Версия 4.0.0 (23.06.2009)
- Коммит c26c1ОптимизацияComplete re-write of the site in PHP. More information.
Версия 3.5.0 (01.07.2006)
- Коммит 42fffФункциональностьEmergency-SMS notification service becomes available in Germany. More information.
Версия 3.4.0 (19.05.2004)
- Коммит a1c50ФункциональностьAdding a lot of new data fields to enrich vulnerability entries. More information.
Версия 3.3.0 (01.01.2004)
- Коммит a2ec5ФункциональностьIntroduction of Emergency-SMS notification service.
Версия 3.2.0 (19.12.2003)
- Коммит 37bc3ФункциональностьIntroduction of RSS feed. More information.
Версия 3.1.0 (18.11.2003)
- Коммит 8a989ФункциональностьInitial release of scip_Alerter for desktop notifications. More information.
Версия 3.0.0 (01.03.2003)
- Коммит d28caФункциональностьService is completely re-written in Perl and uses a dedicated backend for vulnerability moderation to gain more flexibility.
- Коммит 94f12ОптимизацияBugbase is re-branded as scip VulnDB and hosted on www.scip.ch.
Версия 2.0.0 (01.09.2002)
- Коммит 51e87ОптимизацияChanged from static web site to dynamic database (with the kind support of DukeCS).
Версия 1.0.0 (01.01.1997)
- Коммит 33e3bФункциональностьBugbase project launch by Marc Ruef.