变更日志
版本 20.0.0 (2026-03-28)
- 提交 187f6功能Overhaul of the URL structure of the whole service. We change from a query string-based approach to a REST-like URL structure.
版本 19.33.5 (2026-03-12)
- 提交 d4ca2优化Much more efficient handling of all supported languages.
版本 19.33.4 (2026-03-11)
- 提交 07d0a优化The titles and breadcrumbs of Knowledge Base entries are optimized for smaller views.
版本 19.33.3 (2026-03-10)
版本 19.33.2 (2026-03-09)
- 提交 0bf47优化The views for exploits and exploits prices also contain ransomware details.
- 提交 4ea48优化In the menu The exploit prices view was moved from Theat to Risk.
版本 19.33.1 (2026-03-08)
- 提交 89bec优化We send the HTTP response header
Content-Signalto define if and how AI-based processing of pages is allowed.
版本 19.33.0 (2026-03-02)
版本 19.32.2 (2026-02-25)
- 提交 d51e7优化Charts about different CVSS scoring show the amount of scored vulnerability items in the chart title.
版本 19.32.1 (2026-02-23)
- 提交 4919b优化Vulnerability history views indicate commits by submitters in the remark column.
版本 19.32.0 (2026-02-22)
- 提交 9a3dd功能All KEV views do indicate whether there is a ransomware to be known for specific vulnerability entries.
- 提交 22b69优化All HTTP redirects on the web service are faster due to general code optimization.
版本 19.31.0 (2026-02-21)
- 提交 cd758功能The web searches add CWE as a new column in the search results to provide better accessibility to relevant data.
版本 19.30.0 (2026-02-16)
- 提交 aff18功能
版本 19.29.4 (2026-02-15)
- 提交 f6956优化Improved country identification of actors and activities for Cyber Threat Intelligence analysis.
版本 19.29.3 (2026-02-13)
- 提交 e3dfa修复错误Fixed a very rare issue where CVSSv3 meta scores were not rounded properly.
版本 19.29.2 (2026-02-12)
- 提交 bcfa9优化Upgrade of server hardware to improve performance.
- 提交 bcfa9优化Upgrade of all software components to the latest version tree.
- 提交 25d73优化Improved handling of user sessions for better performance and increased security.
版本 19.29.1 (2026-02-11)
- 提交 d7ed0优化Faster compilation of statistica data.
版本 19.29.0 (2026-02-10)
- 提交 77f5d功能客户请求Introduction of the support for CVSSv3 data by CISA as an ADP in different views (e.g. CVSSv3 overview, edit form).
- In API 3.86 introduction of the ADP CISA CVSSv3 vector and score which is accessible via
vulnerability_cvss3_adpcisa_*. - 提交 e03e8优化CTI overviews show additional statistical data about CTI monitoring.
版本 19.28.0 (2026-02-09)
- 提交 5a9b8功能
版本 19.27.3 (2026-02-08)
- 提交 5d194优化Faster daily compilation of our extended CPE dictonary.
版本 19.27.2 (2026-02-06)
- 提交 b09d3修复错误Fixed an issue where existing users were not able to login if their username contained a string which is blacklisted for user registration. Thanks to the user pengroot for reporting this issue.
版本 19.27.1 (2026-02-04)
- 提交 6a8bd优化Improved the username validator to prevent disallowed usernames during registration.
版本 19.27.0 (2026-02-02)
- 提交 cb05c功能
版本 19.26.3 (2026-01-30)
- 提交 bddb1优化Fixed a rare issue where vendor and product links were not aligned regarding case sensitivity.
版本 19.26.2 (2026-01-28)
- 提交 e80fb优化The recurring generation of the stats page is more efficient and informs concurrent users about the generation process.
版本 19.26.1 (2026-01-27)
- 提交 15d2c优化Improved product web site association for vulnerability entries.
版本 19.26.0 (2026-01-26)
- 提交 69e6d功能
版本 19.25.3 (2026-01-25)
- 提交 5d608优化Improvement of country activity analysis accuracy shown in CTI charts.
版本 19.25.2 (2026-01-24)
- 提交 90808优化Performance optimizazion of views containing CTI maps.
版本 19.25.1 (2026-01-23)
- 提交 11bc9优化Performance optimization for all text generation elements. Especially views with multiple descriptions profit from this.
版本 19.25.0 (2026-01-19)
- 提交 f7d62功能
版本 19.24.1 (2026-01-13)
- 提交 64d9c优化The lookup of CWE identifiers shows the full name of items in diff views and commit items of vulnerability entries.
版本 19.24.0 (2026-01-12)
- 提交 64c79功能
版本 19.23.0 (2026-01-05)
- 提交 4c461功能
版本 19.22.2 (2026-01-04)
版本 19.22.1 (2026-01-03)
- 提交 b5b92修复错误Under certain circumstances the CVSSv4 bscores and btscores were not calculated correctly for 3rd party sources.
版本 19.22.0 (2025-12-29)
- 提交 f8723功能
版本 19.21.0 (2025-12-22)
- 提交 15c9d功能
版本 19.20.4 (2025-12-20)
- 提交 2887c优化Submitting a new vulnerability will validate the source URL and reject invalid links.
版本 19.20.3 (2025-12-19)
- 提交 14e46修复错误The Previous and Next buttons of Vulnerability Relate Views link to the corresponding main entry instead to an identified match.
版本 19.20.2 (2025-12-18)
- 提交 ecb5d优化Improvement of PURL-based searches to get much better results.
版本 19.20.1 (2025-12-17)
- 提交 b998e优化The CTI view for vulnerability entries lists associated sources to make further analysis easier.
版本 19.20.0 (2025-12-15)
- 提交 86367功能
版本 19.19.2 (2025-12-10)
- 提交 e3c8e优化Links to CPE entries of NIST NVD do not accept wilcards for version fields anymore. A workaround makes it possible to guarantee a reliable lookup again.
版本 19.19.1 (2025-12-09)
版本 19.19.0 (2025-12-08)
- 提交 af904功能
版本 19.18.3 (2025-12-05)
- 提交 ba595优化Editing a vulnerability entry will allow to set the field
software_notaffectedlistas well.
版本 19.18.2 (2025-12-04)
- 提交 1b98e修复错误客户请求The CSRF token handling during settings updates was not working properly.
版本 19.18.1 (2025-12-02)
- 提交 bbeef优化DB structure improvement of Monoblock to improve performance of vulnerability data queries.
版本 19.18.0 (2025-12-01)
- 提交 1e02f功能
版本 19.17.3 (2025-11-30)
- 提交 1f8bc优化The Live View of Commits does now provide time details based on minutes to guarantee better accuracy.
版本 19.17.2 (2025-11-28)
- 提交 ecc57优化Calculation of broad CTI analysis queries is much faster without losing any accuracy of results.
版本 19.17.1 (2025-11-25)
- 提交 92921优化Optimized resource handling of high-performance queries.
版本 19.17.0 (2025-11-24)
- 提交 e350e功能
版本 19.16.2 (2025-11-23)
- 提交 a2e0c修复错误Fixed an issue where vulnerability titles contained fragments of foreign languages.
版本 19.16.1 (2025-11-18)
- 提交 89c9e优化The language view shows how many languages are supported.
版本 19.16.0 (2025-11-17)
- 提交 43466功能
版本 19.15.2 (2025-11-13)
- 提交 8a017优化If a user enables section counts in titles, then empty search results will shown the indicator as well.
版本 19.15.1 (2025-11-12)
- 提交 d1c54优化Updated the CPE links in vulnerability entries to provide better accessibility to the NIST database.
版本 19.15.0 (2025-11-10)
- 提交 ee129功能
版本 19.14.1 (2025-11-05)
- In API 3.85 fixed a race condition regarding API credit calculation which happened when an earlier API request had an extended execution time.
版本 19.14.0 (2025-11-03)
- 提交 ccd7b功能
版本 19.13.2 (2025-10-31)
- 提交 0a1d7修复错误Fixed an issue where embedded YouTube videos were not loaded properly.
版本 19.13.1 (2025-10-30)
- 提交 4f637优化Performance improvement of yearly updates views.
版本 19.13.0 (2025-10-27)
- 提交 8bc95功能
版本 19.12.1 (2025-10-25)
- 提交 42841优化Using intelligent processing order to optimize performance of simple search queries. This improves execution speed of most queries for approx. 30%.
版本 19.12.0 (2025-10-20)
- 提交 02c54功能
版本 19.11.0 (2025-10-13)
- 提交 29acd功能
版本 19.10.0 (2025-10-06)
- 提交 55d22功能
版本 19.9.4 (2025-10-03)
版本 19.9.3 (2025-10-02)
- 提交 0f974优化CTI activity scores in overview lists announce upcoming data collection few very fresh vulnerability entries.
版本 19.9.2 (2025-10-01)
- The API endpoint provides better detection and verbose details if there is a problem with the API key (e.g. wrong format, too short).
版本 19.9.1 (2025-09-30)
- 提交 165bc优化Performance optimization of all vulnerability views that contain live CTI activity score data.
版本 19.9.0 (2025-09-29)
- 提交 22498功能
版本 19.8.2 (2025-09-25)
- 提交 72bb1优化Upgraded web server pool to improve performance.
版本 19.8.1 (2025-09-24)
- 提交 78515优化Improved identification of similar vulnerability entries.
版本 19.8.0 (2025-09-22)
- 提交 c061b功能
版本 19.7.1 (2025-09-17)
- 提交 df6ec优化Performance optimization of excessive request handling.
版本 19.7.0 (2025-09-15)
- 提交 b5296功能
版本 19.6.0 (2025-09-08)
- 提交 20594功能
版本 19.5.3 (2025-09-07)
- 提交 45a22优化Improved the handling of version range declarations in different languages (e.g. "up to" and "prior").
版本 19.5.2 (2025-09-03)
- 提交 3c3a1优化Improved case-sensitivity handling of multi-language menu items.
版本 19.5.1 (2025-09-02)
- 提交 211a8优化If a vulnerability entry does not list products with the field
software_affectedlistbut the fieldsource_certbund_productscontains useful information, then the vulnerability entry will list those as affected products.
版本 19.5.0 (2025-08-31)
- 提交 b4b63功能
版本 19.4.3 (2025-08-29)
- 提交 8b506优化User profiles provide a tooltip for the accepted vulnerability entry of a submit to see the title of the entry.
版本 19.4.2 (2025-08-28)
- 提交 42d76优化Performance improvement of application request blocking of very aggressive clients.
版本 19.4.1 (2025-08-27)
- 提交 525a3优化Introduction of a new network request limiter to block very aggressive clients.
版本 19.4.0 (2025-08-26)
- 提交 74b07功能Introduction of a new application request limiter to block very aggressive clients (e.g. scraping and flooding).
- 提交 20f37优化Performance improvement of bursting request handling by the web platform.
版本 19.3.0 (2025-08-25)
- 提交 938d0功能
版本 19.2.0 (2025-08-20)
- In API 3.84 the introduction of the request types
vendorlookupandproductlookupto provide a possibility for better product matching.
版本 19.1.0 (2025-08-19)
- 提交 8d677功能
- 提交 8a7c1优化View optimization of the language selection on smaller screens.
版本 19.0.0 (2025-08-18)
- 提交 3d859功能Total overhaul of the language handling system to improve texts, descriptions, and details of the service. This will introduce the possibility to add new supported languages.
版本 18.35.3 (2025-08-17)
- 提交 23052优化Better HTML compression for authenticated users to provide faster, smaller, and more efficient content delivery.
- 提交 db90c优化Improved duplicate detection and handling for vulnerability submits.
版本 18.35.2 (2025-08-10)
- 提交 83d65优化Vulnerability titles on narrow views are optimized to discard irrelevant data points.
- 提交 b4a46优化Users are only listed as committers of vulnerability entries and CVE entries if their commits were approved. Unmoderated and rejected commits are not used.
版本 18.35.1 (2025-08-09)
- 提交 6c88c优化Data in the CTI view per vulnerability entry is streamlined and provides better loading times.
版本 18.35.0 (2025-08-08)
- 提交 c9346功能客户请求Vulnerability entries and RSS vulnerability feeds enhance information regarding local and remote exploitability by physical possibilities.
- In API 2.46/3.83 introduction of the fields
exploit_physical,exploit_local, andexploit_remotewhich indicate theoretical exploit capabilities. - 提交 c32fc优化Information about local and remote exploitability provide better accuracy.
版本 18.34.0 (2025-08-07)
- 提交 2e23f功能Simple search and advanced search provide improved lookups for CERT Bund WID identifiers.
版本 18.33.0 (2025-08-06)
- 提交 d3b3d功能客户请求Simple search and advanced search provide improved lookups for EUVD identifiers.
版本 18.32.5 (2025-07-21)
- 提交 f6b40优化Changing credit card information for existing customers announces the requirement for a login to finalize the action.
版本 18.32.4 (2025-07-18)
- 提交 d5250优化IP address classification better reflects IP address structures and age.
版本 18.32.3 (2025-07-17)
- 提交 bb891优化Cyber threat intelligence views show count indicators for interest and vulnerabilities.
- 提交 04b9c优化客户请求Search queries and filters are able to better handle special variants of characters like accents and Umlaute. This guarantees a better search experience with less risk for false-negatives.
版本 18.32.2 (2025-07-16)
- 提交 cbc9a优化The sub-menu of IP address views links to recent IP adresses instead of recent actors.
版本 18.32.1 (2025-07-15)
- 提交 6da2f优化Database structures, dependencies, and index handling was drastically optimized, which improves the performance of many complex queries.
版本 18.32.0 (2025-07-14)
- In API 3.82 introduction of the fields
source_certbund_wid,source_certbund_published,source_certbund_title,source_certbund_products,source_certbund_classification,source_certbund_basescore,source_certbund_tempscore,source_certbund_nopatch.
版本 18.31.7 (2025-07-13)
- 提交 6eaa5优化Vulnerability entries in other languages provide better translation for certain items.
版本 18.31.6 (2025-07-11)
- 提交 7004b优化View optimization of mail alert messages. CVSSv3 was renamed to CVSS and details at the bottom do not deploy an alignment anymore.
版本 18.31.5 (2025-07-10)
- 提交 620fb优化客户请求Statistical data for views with old entries were blurried for free users. This limitation is now disabled to provide better possibilities to review the coverage and quality of our data.
版本 18.31.4 (2025-07-04)
- 提交 f5e98优化In the submit view long descriptions are broken to provide better data accessibility.
版本 18.31.3 (2025-06-30)
- 提交 7a489优化In the submit moderation overview long descriptions are broken to provide better accessibility for moderators.
版本 18.31.2 (2025-06-28)
- 提交 1745b优化Slightly better loading times for the Live Updates View due to optimized query handling.
版本 18.31.1 (2025-06-26)
- 提交 c485a修复错误Fixed an issue where CVSSv4 scores by third parties with a value of 0.0 were not shown correctly.
版本 18.31.0 (2025-06-19)
- 提交 b25df功能Indicator in the site footer shows which data pool is used to serve the user.
版本 18.30.1 (2025-06-15)
- 提交 40bd7优化Performance improvement of al My Alert views.
版本 18.30.0 (2025-06-14)
- 提交 22b80功能客户请求Complete overhaul of the My Alert overview to provide more data and better accessibility. This includes total, maximum, and average CVSS scores per alert.
- 提交 01b86功能客户请求My Alert summaries can be shown per month to provide better accessibility to earlier alerts.
版本 18.29.1 (2025-06-10)
- 提交 da6c0修复错误Fixed an issue where in vulnerability overviews field data for CVSSv2 was wrongfully accessed via cache if the server was under heavy load.
- 提交 da6c0修复错误Fixed an issue where in vulnerability overviews field data for CVSSv2 was wrongfully shown even though commits for it were rejected.
版本 18.29.0 (2025-05-07)
- 提交 b9127功能Opening a support ticket creates a unique ticket number to make tracking easier.
版本 18.28.3 (2025-06-06)
- 提交 17e13优化CVE entries maintained by us as a CVE Numbering Authority (CNA) do also include temporal attributes for all the available CVSS vectors.
版本 18.28.2 (2025-06-04)
- 提交 f2375优化KEV views do not display the exploitability status anymore, because this is always Attacked anyway.
版本 18.28.1 (2025-06-02)
- 提交 be29e优化Performance optimization to handle load and access peaks much better.
版本 18.28.0 (2025-06-01)
- In API 1.20/2.45/3.81 introduction of the value A (Attacked) for the field
exploit_exploitability. - 提交 6f71b功能Overview lists of vulnerabilities which display exploitability information do now support the value Attacked to indicate entries which are known for real-word exploiting.
版本 18.27.0 (2025-05-19)
- In API 3.80 introduction of a new CTI API query type
iplist_datewhich allows to fetch a list of IP addresses added on a specific date.
版本 18.26.1 (2025-05-14)
- 提交 17f96优化Layout of email notification for password changes optimized.
版本 18.26.0 (2025-05-13)
- In API 3.79 introduction of the field
source_euvd_idto reflect identifiers of the European Union Vulnerability Database.
版本 18.25.3 (2025-05-08)
- 提交 8f54a优化客户请求Permabans of weak comments was too aggressive and affected users which did not violate any expectations. This issue was reported by user portal.
版本 18.25.2 (2025-05-04)
- 提交 a5f89优化Improvement of category and confidence tagging of Indicators of Compromise (IOC).
版本 18.25.1 (2025-04-27)
- 提交 613ef优化Improvement of automated spam detection for comment posting of vulnerability entries. Malicious users are automatically temporarily or permanently banned from postig if they violate the terms.
版本 18.25.0 (2025-04-26)
- In API 3.78 introduction of the fields
source_cnvd_id,source_cnvd_submit,source_cnvd_open,source_cnvd_severity, andsource_cnvd_title.
版本 18.24.1 (2025-04-25)
- 提交 9d0ff优化客户请求The creation of version ranges of affected vulnerabilities does provide a more accurate upper bound value. This improves accuracy of version lists and CPE lists alike.
版本 18.24.0 (2025-04-23)
- In API 3.77 introduction of the virtual fields
source_gcve_cveandsource_gcve_vuldbto highlight our activity as GCVE Numbering Authority (GNA) for the Global CVE Allocation System (GCVE).
版本 18.23.1 (2025-04-22)
- 提交 5e790优化List of comments for vulnerability entries show the title of the entry as the tool tip of the VDB identifier.
- 提交 5e790优化List of comments for vulnerability entries show the associated CVE in a dedicated column to provide better accessibility.
版本 18.23.0 (2025-04-20)
- 提交 e6859功能客户请求Dedicated dashboard for Global CVE Allocation System (GCVE) available with most recent entries and their associated mappings.
- 提交 b752b功能客户请求The export section does provide free access to Global CVE Allocation System (GCVE) reference maps.
版本 18.22.3 (2025-04-19)
- 提交 3a614优化Hiding unavailble fields of commit details which are not moderated yet.
版本 18.22.2 (2025-04-18)
- 提交 5a426优化Vulnerability entries contain the GCVE identifier of CVE (range 0) and VulDB (range 100) if available.
版本 18.22.1 (2025-04-17)
- 提交 64514优化客户请求Improvement of the accuracy of the virtual field
exploit_exploitabilitywhich will assess multiple other fields to determine the most reasonable value.
版本 18.22.0 (2025-04-16)
- 提交 e0f77功能VulDB has officially become a GCVE Numbering Authority (GNA) for the Global CVE Allocation System (GCVE). Our namespace is
100and GCVE identifiers are derived from our VDB identifiers. GCVE identifiers are shown in the header and the source section of vulnerability entries.
版本 18.21.6 (2025-04-03)
- 提交 e3929优化CVSS score handling of new commits in vulnerability entries is more robust.
版本 18.21.5 (2025-03-31)
- 提交 af45c修复错误The average amount of vulnerability entry updates was not calculated correctly for the statistical overview.
版本 18.21.4 (2025-03-30)
- 提交 c690a优化Improvement of performance by cleaning up unused code. Especially legacy code that was used for megablock handling.
版本 18.21.3 (2025-03-29)
- 提交 96bb8优化Improvement of the view of commit details to provide better data accessibility.
版本 18.21.2 (2025-03-28)
- 提交 a2393修复错误Mail alerts were sent with the wrong language which has been reverted to being sent always in English.
版本 18.21.1 (2025-03-27)
- 提交 750af优化Better weighting of CTI activity scores for older vulnerability entries.
版本 18.21.0 (2025-03-25)
- 提交 a743b功能Improvement of CTI activity signal handling to better extract highly important entries and to demote older vulnerabilities.
版本 18.20.4 (2025-03-20)
- 提交 35505修复错误Fixed an issue in certain CTI views were the amount of references and samples was not displayed correctly.
版本 18.20.3 (2025-03-19)
- 提交 5e5ca优化Improvement of translation of the web service to provide a better wording and reflect cultural context in details.
版本 18.20.2 (2025-03-12)
- 提交 8b65d优化Improved accessibility of submit moderation to increase performance and quality.
版本 18.20.1 (2025-03-11)
- 提交 98de0优化Performance improvements of chart views which do not include timeseries data.
版本 18.20.0 (2025-03-10)
- 提交 4a434功能Additional predictive view for Known Exploited Vulnerabilities which includes issues which might get added to the catalogue in the future.
版本 18.19.1 (2025-03-09)
- 提交 72ac9优化Optimization of the monoblock database engine to increase performance for certain special queries.
版本 18.19.0 (2025-03-05)
- 提交 8ef0d功能客户请求We provide a very accessible view for all recent entries declared as Known Exploited Vulnerabilities by CISA.
版本 18.18.1 (2025-03-02)
- 提交 adeb6修复错误Fixed an issue where certain CVSSv4 CNA vector values were not stored properly during update processes. This affected updates happening between 2025-02-24 and 2025-03-01. They will be corrected in a later update run.
版本 18.18.0 (2025-02-28)
- 提交 391ce功能The form to submit new vulnerabilities informs users about delays due to many open items waiting to be processed in the queue already.
版本 18.17.3 (2025-02-27)
- Fixed an issue where the renewal for an API key did not show a login prompt if an unauthenticated user accessing the feature.
版本 18.17.2 (2025-02-24)
- 提交 7b151修复错误Fixed an issue where vulnerability entries without a CVSSv4 impact were not shown correctly in overview lists and detail views.
版本 18.17.1 (2025-02-20)
- 提交 61977修复错误Fixed an issue where votes for threads of vulnerability comments were not possible on certain instances.
版本 18.17.0 (2025-02-18)
- 提交 f2efe功能客户请求We provide a statistical overview of all CWE that are used in our vulnerability database entries.
版本 18.16.3 (2025-02-17)
- 提交 9b5d0优化Performance and stability optimization of vulnerability database queries.
版本 18.16.2 (2025-02-16)
- 提交 d4857优化Vulnerability submissions with weak or wrong disclosure links get much less community points.
版本 18.16.1 (2025-02-02)
- 提交 861aa优化Cleaning obsolete code of features like threat intelligence, vulnerability edit handling, worldmap display, and blocklist maintenance.
版本 18.16.0 (2025-01-29)
- 提交 c9cdb功能List of users with top activities shows number of points per year on average as well.
版本 18.15.2 (2025-01-20)
- 提交 10aff修复错误Fixed an issue where complex searches regarding affected versions were not returning all associated results correctly.
版本 18.15.1 (2025-01-19)
- 提交 369b1优化Improved handling of version data of Linux Kernel vulnerability entries.
版本 18.15.0 (2025-01-16)
- 提交 91aef功能It is possible to review commits live as well to see ongoing and upcoming changes to vulnerability entries.
版本 18.14.9 (2025-01-15)
- 提交 c4721修复错误Fixed a rare issue where certain extended search queries were not able to collect the necessary vulnerability information.
版本 18.14.8 (2025-01-13)
- In API 2.44/3.76 the ETag header of API responses is compressed to provide better performance.
版本 18.14.7 (2025-01-05)
- 提交 f402c优化Public vulnerability submits automatically hide real-world IP addresses to prevent any form of privacy leakage.
版本 18.14.6 (2024-12-29)
- 提交 d5923修复错误Vulnerability entries with open edits were not properly rendered in user profiles.
版本 18.14.5 (2024-12-26)
- 提交 a077d优化Embargoed vulnerability submits are hidden on smaller screens to provide better visibility for important submits.
版本 18.14.4 (2024-12-23)
- 提交 9a559优化Editing a vulnerability entry will show a small tutorial to help new users enriching existing entries.
版本 18.14.3 (2024-12-22)
- 提交 60777优化Better value analysis of vulnerability submissions to establish temporary and permanent bans of malicious activities.
版本 18.14.2 (2024-12-21)
版本 18.14.1 (2024-12-20)
- 提交 fa758优化Better value analysis of vulnerability commits to establish temporary or permanent bans of malicious activities.
版本 18.14.0 (2024-12-19)
- In API 3.75 the CTI API support the new query type
sectorwhich shows recent activities targeting specific sectors.
版本 18.13.0 (2024-12-16)
- In API 3.74 most CTI queries may include targeted software types and sectors.
版本 18.12.6 (2024-12-12)
- In API 3.73 requesting CTI queries listing associated countries are now sorted in descending order of activity detection.
版本 18.12.5 (2024-12-06)
版本 18.12.4 (2024-12-05)
- In API 3.72 fixed an issue where VulDB CVSSv4 scores with a value of 0.0 were not shown properly. This affected just a few vulnerability entries. Thanks to Ryan Egbert for reporting this issue.
- In API 3.72 fixed an issue where external CVSSv4 sources did not always contain
vulnerability_cvss4_cna_bvectorandvulnerability_cvss4_cna_btvectorfields. Thanks to Ryan Egbert for reporting this issue.
版本 18.12.3 (2024-11-30)
版本 18.12.2 (2024-11-28)
- Optimization of personal views for access history, search history, and API history.
版本 18.12.1 (2024-11-25)
- 提交 0bb99优化Improved generation of CSRF tokens to increase complexity of successful CSRF attacks.
版本 18.12.0 (2024-11-21)
- 提交 573a5功能Introduction of a new advanced search with additional artificial intelligence capabilities. Queries are much faster and provide better accuracy.
版本 18.11.0 (2024-11-19)
- 提交 17636功能Introduction of a new simple search with additional artificial intelligence capabilities. Queries are much faster and provide better accuracy.
版本 18.10.1 (2024-11-13)
- 提交 30cde修复错误Fixed an issue where under certain circumstances a listing of affected version numbers was not ordered properly.
版本 18.10.0 (2024-11-08)
- 提交 b7453功能客户请求Providing a new overview of CTI identifiers and warnings to help to determine emerging threats quickly.
版本 18.9.7 (2024-11-06)
- 提交 2c281优化Better duplicate action detection and processing warning during vulnerability moderation.
版本 18.9.6 (2024-11-05)
- 提交 f5ab6优化Vulnerability entries with merged CPE data originating from NVD respect the different splitting methodologies to prevent data overloading between affected products.
版本 18.9.5 (2024-11-04)
- 提交 e6800优化Vulnerability relate views show associated CVE identifiers for better analysis capabilities.
- 提交 f1d3f优化Performance optimization of see also data of vulnerability entries.
版本 18.9.4 (2024-11-03)
- 提交 3227d优化Repositioning of expiring password information hint in the user menu.
- 提交 f3710优化Performance optimization of complex vulnerability views.
- 提交 f3710优化Performance optimization of CTI actor views.
版本 18.9.3 (2024-11-02)
- 提交 f135f优化Performance optimization of vulnerability live views.
- 提交 f135f优化Performance optimization of file integrity checks.
版本 18.9.2 (2024-11-01)
- 提交 ed9c3优化Improved speed of collecting and displaying CTI data in vulnerability entries (requires a CTI license).
版本 18.9.1 (2024-10-29)
- In API 3.71 improves the generation of Vulnerability API CTI values enabled with
cti=1drastically.
版本 18.9.0 (2024-10-28)
- In API 3.70 introduces the Vulnerability API CTI fields
cti_activity_ipaddr,cti_ioa_file,cti_ioa_library,cti_ioa_argument,cti_ioa_inputvalue,cti_ioa_pattern,cti_ioa_networkport,cti_ttp_attck,cti_ttp_cwe, andcti_ttp_capec.
版本 18.8.3 (2024-10-26)
- 提交 c0ee8优化Vulnerability diff views now display up to 5 changes of an entry to provide better analysis possibilities.
版本 18.8.2 (2024-10-25)
- 提交 5de35优化Vulnerability diff views always show up to the last 4 changes of an entry, no matter if it was the initial creation or succeeding updates.
版本 18.8.1 (2024-10-24)
- 提交 fad87优化Improved wording for the temporary authentication of embargoed submits.
- 提交 20ee8修复错误Fixed an issue where CVSSv2 and CVSSv3 temp scores were updated properly but the underlying vectors were updated delayed. This affected VulDB vectors only.
- Fixed a very rare issue where the JSON format of the API did not list versions properly. Thanks to the user bors2908 for reporting this issue.
版本 18.8.0 (2024-10-23)
- Users are able to rotate their personal API key. This will revoke the existing API key which will then require to deploy the new API key on all clients (e.g. Splunk).
版本 18.7.1 (2024-10-22)
- 提交 60c2a修复错误客户请求Fixed a bug where some emails were sent with wrong end-of-line characters.
版本 18.7.0 (2024-10-18)
- 提交 4be6a功能客户请求The Cyber Threat Intelligence platform does not provide details about IP addresses. A CTI license is required to get full access.
版本 18.6.8 (2024-10-17)
- 提交 05b00优化The statistical view shows additional details about cyber threat intelligence (actor monitoring and exploit identification).
版本 18.6.7 (2024-10-14)
- 提交 18e76优化Improvement of vulnerability titles containing complex file name structures.
版本 18.6.6 (2024-10-13)
- 提交 950f4修复错误Fixed an issue where certain products were flagged as end of life even though that was not true.
版本 18.6.5 (2024-10-12)
- 提交 08e5a修复错误Fixed an issue where CVSSv4 vectors of sources without CVSS-BT data were transponding these fields from the VulDB vector data which could lead to sometimes confusing assignments.
版本 18.6.4 (2024-10-11)
- In API 1.19/2.43/3.69 the CSV output format contains additional CVSS scoring fields.
版本 18.6.3 (2024-10-09)
- 提交 5ffed优化Within vulnerability diff views all data fields based on unix timestamps show human-readable dates as well.
版本 18.6.2 (2024-09-27)
- 提交 a7c8a优化Prioritizing Nessus Plugin ID in vulnerability entry headers.
版本 18.6.1 (2024-09-23)
- 提交 419a8修复错误Under certain circumstances the calculation of community points was not correct which lead to a decrease in collected points. Thanks to the user guru for reporting this issue.
版本 18.6.0 (2024-09-22)
- 提交 45d0d功能Linked certain CTI views to the according knowledge base entries (e.g. actors, countries, events).
版本 18.5.0 (2024-09-21)
- 提交 c23e4优化Added a symbol to all views that require moderation or administrative permissions.
- Added CNA and API details to the CVE sync view which requires CNA or vulnerability moderation permissions.
版本 18.4.13 (2024-09-20)
- 提交 5030c优化Highlighted and tagged all main menu items that require moderation or administrative permissions.
- 提交 dbbf5优化Improved the view and capabilities of the manual vulnerability import feature available to vulnerability moderators.
版本 18.4.12 (2024-09-19)
- 提交 7d964优化Enhanced the wording for vulnerability coordination emails to reflect possibilities for quotes in CVE summaries better.
版本 18.4.11 (2024-09-17)
- 提交 456c0优化Better evening out anomalies during CTI activity score detection to provide more accurate results.
版本 18.4.10 (2024-09-16)
- 提交 5a06c优化Listings of vulnerability submits show the granted community points to honor better submission entries.
- 提交 854a0优化Vulnerability submit entries show assigned points for non-authenticated users as well.
版本 18.4.9 (2024-09-15)
- 提交 1efee优化Re-caclulation of all points for vulnerability submits to penalize weak submission entries more (e.g. missing product details, very short descriptions).
版本 18.4.8 (2024-09-14)
- 提交 052f0优化Listing members of the vulnerability moderation team in the vulnerability moderation view.
- 提交 89d2b优化Improved action forms in the vulnerability moderation view.
版本 18.4.7 (2024-09-13)
- 提交 df251优化Automated expiration of moderation rights for admin users.
版本 18.4.6 (2024-09-12)
- 提交 af51e优化Listing members of the actor moderation team in the actor import view.
版本 18.4.5 (2024-09-09)
- 提交 cf860优化Better performance to import new Indicators of Compromise (IOC) for malicious actors.
版本 18.4.4 (2024-09-04)
- 提交 6c28e优化History views of vulnerability entries show the username instead of the user in the chart legend.
- 提交 6c28e优化History views of vulnerability entries show shortened field names in the chart legend.
- 提交 6c28e优化History views of vulnerability entries list commits and approvals with 0 confidence as well in the charts.
版本 18.4.3 (2024-09-03)
- 提交 400a0修复错误Fixed an issue where vulnerability entries sometimes mention a fix timeline even though there is no fix available.
版本 18.4.2 (2024-08-31)
- 提交 2a249优化Improved display of long submit titles on small displays like smart phones.
版本 18.4.1 (2024-08-28)
- 提交 ca544优化Optimized database connection handling to improve performance and decrease ressource occupancy on the servers.
版本 18.4.0 (2024-08-27)
- 提交 7a8cb功能Linking to the RSS feed of the changelog in the HTML header for easier accessibility.
版本 18.3.2 (2024-08-26)
- 提交 59faf优化Improved the handling of vulnerability titles if many names are listed as affected vendor.
版本 18.3.1 (2024-08-25)
- 提交 1909d优化The assignment of points for submits is more strict but takes details into consideration (e.g. technical details in descriptions).
版本 18.3.0 (2024-08-24)
- 提交 0d864功能Public user profiles show details about their community engagement with posts and comments.
- 提交 3e979优化The view for personal posts history is improved and contains additional details.
版本 18.2.0 (2024-08-23)
- 提交 6c1a6功能Public user profiles show details about their community engagement like recent submits and commits.
版本 18.1.7 (2024-08-22)
- 提交 2e090优化The view for personal search history is improved and contains additional details.
- 提交 44262修复错误Fixed an issue were large vulnerability lists were sometimes not showing special characters properly due to an encoding problem.
版本 18.1.6 (2024-08-21)
- 提交 49395优化Vulnerability titles with unusual vulnerability classes explain those whenever possible and do not just show "unknown vulnerability" anymore.
- 提交 8db81优化The view for personal submits is improved and contains additional stats and more details.
- 提交 d167f修复错误Fixed a very rare issue where internal moderators were not able to debug search queries properly.
版本 18.1.5 (2024-08-20)
- 提交 971a6修复错误Under certain circumstances the CPE string for products with dedicated patch levels was not shown correctly.
版本 18.1.4 (2024-08-17)
- 提交 39bc4优化Editing a vulnerability entry will warn if a deprecated CWE value is selected.
版本 18.1.3 (2024-08-11)
- 提交 15e3f优化Views with user avatars are loaded much faster thanks to multiple query optimization techniques.
- 提交 e1f4f优化Color of duplicate submissions set to a darker orange tone to highlight that they are not very useful.
版本 18.1.2 (2024-08-10)
- 提交 80e03修复错误Fixed an issue where the recent chart on the front page was not updated properly when the service was under heavy load.
版本 18.1.1 (2024-08-09)
- 提交 b7371优化Optimized the exploit 0day price calculation which was sometimes too low.
- 提交 1ad05优化Submit overviews will show users even on smaller screens.
- 提交 f6871优化The personal avatar is shown in the side menu as well (instead of the old user icon).
版本 18.1.0 (2024-08-08)
- 提交 91a5f功能客户请求Community users are able to create their individual avatars in their profile settings.
- 提交 91a5f功能Community user avatars are shown in lists, submits, commits, and posts.
版本 18.0.0 (2024-08-07)
- 提交 6b586功能客户请求All community user submits are now public and accessible to provide full transparency.
- 提交 b9313功能A new live view shows the most recent community user submits.
版本 17.29.0 (2024-08-06)
- 提交 4f9b9功能It is easier possible to change the password of existing accounts without using the password reset process.
- 提交 091b3功能All password changes are reported to the associated mail address.
版本 17.28.10 (2024-08-02)
- 提交 49614优化客户请求Optimized queries and performance for personal My-Views (Recent, Updates, and Alerts).
版本 17.28.9 (2024-08-01)
- 提交 a64d7优化Short vulnerability titles do also show affected file names even if large quantities of GET parameters are necessary.
版本 17.28.8 (2024-07-28)
- 提交 697de优化Editing vulnerability entries loads forms and dependencies much faster.
版本 17.28.7 (2024-07-27)
- 提交 a07e4优化The overview ob submits hides blurried items on small screens to provide better accessibility.
版本 17.28.6 (2024-07-24)
- 提交 8bc47优化CTI views of vulnerabilities are able to link the correct actor or campaign based on associated vulnerability names.
版本 17.28.5 (2024-07-23)
- 提交 a3456优化Vulnerability history views do not have links to new data anymore if the data value is empty (e.g. an existing data point was deleted).
版本 17.28.4 (2024-07-20)
- 提交 a7ec5优化Statistical overviews of vulnerability submits done by users is introducing color codes to make them more readable.
版本 17.28.3 (2024-07-18)
- 提交 0aeaa优化Indicators for CERT vulnerabilities are more prominent and link directly to the according advisory.
- 提交 e4a9d优化Diff views for vulnerabilities now indicate the creation of an entry and the dedicated updatesets.
- Fixed an issue where under certain circumstances paying customers with additional free API credits were shown negative values for available API credits in their user profile.
版本 17.28.2 (2024-07-17)
- 提交 df755优化Improved CVE range search to prevent long queries.
- 提交 f3eb9优化Reordered sources in vulnerability entries to better reflect availability and popularity.
版本 17.28.1 (2024-07-16)
- 提交 0b780优化Vulnerability history views highlight rollbacks and reverts to distinguish them from regular rejects.
版本 17.28.0 (2024-07-04)
- In API 2.42/3.68 introduced the fields
source_cnnvd_id,source_cnnvd_name,source_cnnvd_hazardlevel,source_cnnvd_create,source_cnnvd_publish, andsource_cnnvd_update.
版本 17.27.0 (2024-07-03)
- 提交 e5f8e功能Certain views like Live Recent show a column with the responsible CNA.
版本 17.26.1 (2024-06-30)
- 提交 6f955优化Source monitoring parsing optimized for new CVSSv4 vectors provided by external parties (e.g. CVE, CISA).
版本 17.26.0 (2024-06-29)
- 提交 5ccf0功能Vulnerability views for history and diff show the count of established commits.
版本 17.25.4 (2024-06-25)
- 提交 45ee7优化Vulnerability diff views are able to show 4 instead of just 3 generations of updated collections.
- 提交 45ee7优化Vulnerability history views provide optimized field names for better layouting and clarity.
版本 17.25.3 (2024-06-22)
- 提交 92046优化Performance optimization of the vulnerability database tables to make them smaller and faster to work with.
版本 17.25.2 (2024-06-19)
- 提交 b1b1a优化Improved the structure of notification emails if a login of a new device was detected.
版本 17.25.1 (2024-06-18)
- In API 3.67 fixed a bug which affected IP address based CTI queries with partially missing indicators.
版本 17.25.0 (2024-06-16)
- In API 2.41/3.66 introduced the fields
source_0daytoday_id,source_0daytoday_date, andsource_0daytoday_title.
版本 17.24.0 (2024-06-14)
- In API 2.40/3.65 introduced the fields
source_milw0rm_idandsource_milw0rm_unavailablefor historical purposes.
版本 17.23.0 (2024-06-11)
- 提交 672d2功能The reliability level of IOCs degrades over time and is better shown with the confidence indicator.
版本 17.22.0 (2024-06-09)
- 提交 f4433功能Vulnerability lists and vulnerability entries mentioning zero-day.cz do properly link to the source entry.
版本 17.21.0 (2024-06-08)
- 提交 2ecd8功能Vulnerability list overviews with EPSS scores show a tooltip with the associated EPSS percentile value.
- 提交 2ecd8功能Vulnerability list overviews with revoked CVE identifiers show a tooltip with the reasoning.
版本 17.20.1 (2024-06-06)
- The detail view for personal API access history items is optimized to provide a better overview.
版本 17.20.0 (2024-06-03)
版本 17.19.3 (2024-06-01)
- 提交 99084优化Performance optimization of database queries for vulnerability entries.
版本 17.19.2 (2024-05-28)
- 提交 a51a7优化Optimized the language menu view to make it better readable.
版本 17.19.1 (2024-05-27)
- 提交 cdf1b优化Commit histories of vulnerability entries flag not accepted commits and reverted commits differently.
版本 17.19.0 (2024-05-26)
- 提交 ddbe8功能The most important articles in the Knowledge Base are tagged to make access for new users easier.
版本 17.18.2 (2024-05-18)
- 提交 ff750优化Behavior of vulnerability submits is shown in all user profiles of community member that have made at least one vulnerability submission.
版本 17.18.1 (2024-05-15)
- 提交 8644a优化Layout optimization of the relate table view for vulnerability entries.
版本 17.18.0 (2024-05-14)
- 提交 5c336功能Introduction of the relate view for vulnerability entries which shows associated vulnerabilities based on affected elements.
版本 17.17.4 (2024-05-13)
- 提交 debd2优化Vulnerability entries show other associated and similar entries much better.
版本 17.17.3 (2024-05-12)
- 提交 6e778优化Updating all references to align with the new structure of the upcoming CNA Rules 4.0.
版本 17.17.2 (2024-05-10)
- 提交 66367优化Completing version data for known products based on historical data is improved regarding quality and performance.
版本 17.17.1 (2024-05-08)
- 提交 8d986优化Performance improvement of historical version analysis provides a better user experience when accessing vulnerability enrtries.
版本 17.17.0 (2024-05-07)
- 提交 c8039功能Vulnerability entries contain the cache identifier to better associate activities to user groups.
版本 17.16.2 (2024-05-05)
- 提交 f65a0优化Vulnerability submission entries link better to the associated vulnerability entry.
- 提交 f65a0优化Vulnerability submissions link to the current process step as explained in the Knowledge Base.
版本 17.16.1 (2024-04-29)
- 提交 6c2e6优化客户请求The CPE list is automcompleted based on historical data if a countermeasure version is known but affected versions are unknown.
版本 17.16.0 (2024-04-27)
- 提交 79b0d功能Approved vulnerability submits are also published within a new RSS feed to make analysis of new vulnerability entries much easier.
版本 17.15.1 (2024-04-25)
- 提交 05482修复错误Fixed an issue where under some rare circumstances some vulnerability entries did not show the CPE strings.
版本 17.15.0 (2024-04-24)
- 提交 08a14功能Vulnerability entries list associated CAPEC identifierts.
版本 17.14.0 (2024-04-23)
- In API 3.63 CTI responses may contain the field
capecwhich lists all associated CAPEC items.
版本 17.13.0 (2024-04-22)
- 提交 b56ac功能CTI views containing TTP (Tactics, Techniques, Procedures) information do also list associated CAPEC (Common Attack Pattern Enumeration and Classification) data.
版本 17.12.0 (2024-04-19)
- 提交 94d29功能客户请求All fields about the CISA Known Exploited Vulnerabilities Catalog (KEV) were upgraded from virtual fields to monoblock fields. As of today changes will be reflected in updates as well.
版本 17.11.1 (2024-04-17)
- 提交 b9de6优化Within vulnerability detail views the link for CPE strings is optimized to provide better search results on NVD.
版本 17.11.0 (2024-04-14)
- 提交 37e20功能Some CTI list views show the EPSS percentile value to better assess exploiting risks for vulnerabilities.
- 提交 079a3优化All list views containing date or time values support tooltips which show how long ago an event happened.
版本 17.10.0 (2024-04-13)
- 提交 13074功能All vulnerability list views associated with our work as a CVE Numbering Authority show the associated user submission to improve and simplify research capabilities.
- 提交 12479优化In some vulnerability list views the columns EPSS and CTI were swapped to show CTI values as last data point.
版本 17.9.1 (2024-04-12)
- 提交 52022修复错误客户请求Fixed a rare issue where lists of versions were not created properly.
版本 17.9.0 (2024-04-09)
- 提交 e278e功能If a user made some vulnerability submissions these are shon in the personal user profile.
版本 17.8.1 (2024-04-08)
- 提交 2dcc5优化Improved the vulnerability submission quality analaysis system to provide fair blacklisting due to weak submissions.
版本 17.8.0 (2024-04-03)
- In API 3.62 introduced additional detail fields for CISA Known Exploited Vulnerabilities Catalog data with the structure
exploit_kev_*.
版本 17.7.1 (2024-04-02)
- 提交 e3042优化客户请求Availability of CPE for vulnerabilities is drastically improved as they are compiled based on historical data and different sources as well.
版本 17.7.0 (2024-04-01)
- 提交 f0176功能客户请求Vulnerability entries contain updated information by the CISA Known Exploited Vulnerabilities Catalog (KEV).
- In API 1.18/2.38/3.61 fixed an issue where under certain circumstances the field
software_versiondid not contain the available items.
版本 17.6.4 (2024-03-31)
- 提交 6c8e5优化Performance improvement of updates of the internal EPSS data storage.
版本 17.6.3 (2024-03-30)
- 提交 ae76c优化Improvement of automated blocking of malicious users.
版本 17.6.2 (2024-03-29)
- 提交 c8646优化Improved performance of generation and display of commit detail views.
版本 17.6.1 (2024-03-28)
- 提交 223de优化Disabled delayed caching for certain views to provide better data in real-time.
版本 17.6.0 (2024-03-26)
- 提交 1003a功能客户请求It is possible to see all successfully processed vulnerability submissions. This raw data helps to get a better understanding of the structure of a security issue.
- 提交 b415c功能Vulnerability entries that are based on a submission by a VulDB community user list the associated submissions.
版本 17.5.1 (2024-03-25)
- Improved CTI actors associated with a vulnerability entry is delivered via Vulnerability API which provides increased data quality.
版本 17.5.0 (2024-03-23)
- 提交 55fec功能Page titles contain an info button which links to the knowledge base article which is associated with a page view.
版本 17.4.0 (2024-03-21)
- API 3.60 introduced additional detail fields for CVSS data:
_basevectorand_tempvectorfor all,_baseseverityand_tempseverityfor CVSSv2 and CVSSv3,_bseverityand_btseverityfor CVSSv4.
版本 17.3.1 (2024-03-20)
- 提交 0cf6e修复错误Under certain circumstances yearly statistics for CVSSv4 entries were not updating properly.
版本 17.3.0 (2024-03-19)
- In API 3.59 added support for CVSSv4 with the fields family
vulnerability_cvss4_vuldb_*.
版本 17.2.0 (2024-03-18)
- 提交 b7147功能CVSSv4 scores in vulnerability entries are clickable to learn more about the generation of such scores.
- 提交 b7147功能CVSSv4 scores do also show the reliability level of the scoring assignment like we already do for CVSSv3 scores.
版本 17.1.0 (2024-03-17)
- 提交 026ac功能客户请求Dedicated view for CVSSv4 scores is available. All entries in our database do support CVSS-B and CVSS-BT scores.
版本 17.0.0 (2024-03-16)
- 提交 357ce功能客户请求Vulnerability entries display CVSSv4 scores (CVSS-B as Base and CVSS-BT as Temp). The main CVSS scores remain based on CVSSv3 until CVSSv4 is well-accepted in the industry.
版本 16.30.6 (2024-02-23)
- 提交 49ba9优化CTI data shown for vulnerability entries provides better identification of predictive and verified indicators.
版本 16.30.5 (2024-02-19)
- Strong performance improvement of CTI data requests within the Vulnerability API and the CTI API in general.
版本 16.30.4 (2024-02-18)
- 提交 f694c优化Vulnerability entries that show CTI data will list countries with their proper name.
- 提交 20626优化Performance improvement if CTI data is shown in vulnerability entries.
版本 16.30.3 (2024-02-17)
- 提交 d0970优化Comments of vulnerability entries awaiting moderation or being rejected show more details for the posting user.
版本 16.30.2 (2024-02-16)
- 提交 e616d优化Community points for posts are added during the approval process.
版本 16.30.1 (2024-02-13)
- 提交 686da优化CVE fields during the editing of a vulnerability are protected if VulDB is the official CNA for that assignment.
版本 16.30.0 (2024-02-07)
- 提交 9f123功能A list of the top active community members is available. Users that enabled their privacy settings are shown as anonymous members.
- 提交 482f4功能A longer list of the most recent users is available. Users that enabled their privacy settings are shown as anonymous members.
版本 16.29.4 (2024-02-06)
- 提交 14d6e优化Slight changes of community user level calculations.
- 提交 f7cca优化Introduction of two new community user levels Senior Expert and Superguru.
- 提交 d63d6优化During the setup procedure new users are asked to set their new username and password to prevent any confusion.
- 提交 2242f修复错误The button to submit new vulnerabilities was not shown for unauthenticated users.
版本 16.29.3 (2024-02-05)
- 提交 778ff优化客户请求The calculation of user community points is much faster to provide better updates of values.
版本 16.29.2 (2024-02-03)
- 提交 90afb优化客户请求If a vulnerability submission gets accepted, the submitter will receive an email which does now contain the request to keep and maintain the attached sources to help others verify and investigate the issue.
版本 16.29.1 (2024-01-27)
- 提交 daaee优化A new vulnerability submit which gets merged into an existing entry as a duplicate will not give community points to the submitter.
版本 16.29.0 (2024-01-26)
- In API 3.58 the CTI responses for actors and IP addresses contain the object
cvewhich lists all associated CVE identifiers.
版本 16.28.4 (2024-01-25)
- 提交 90a4f优化Changed the live view for recent updates to address specific needs to review changes better.
版本 16.28.3 (2024-01-24)
- 提交 dbc60优化Vulnerability entries show researchers as human-readable listings delimited by commas.
版本 16.28.2 (2024-01-19)
- 提交 87dca优化CTI views with actor names are now considering special characters properly to support multi-language representation of source data.
版本 16.28.1 (2024-01-18)
- 提交 afc60优化Improved handling of an increased amount of service requests to provide a better user experience.
版本 16.28.0 (2024-01-17)
- 提交 a7d0e功能客户请求The CTI export endpoint for IP addresses lists most recent entries for the last 24 hours by default. By adding a date in the form of
YYYYmmddit is possible to request items for a specific day. - 提交 7f645优化Better identification of vulnerabilities with duplicate CVE assignments.
版本 16.27.2 (2024-01-16)
- 提交 d65c0优化客户请求Improved version handling of vulnerable products that use release candidates (e.g. Linux Kernel).
版本 16.27.1 (2024-01-15)
- 提交 af91b优化客户请求Improved version handling of vulnerable products that use characters as their minor version identifiers (e.g. OpenSSL).
版本 16.27.0 (2024-01-12)
- 提交 124a4功能CVEs that we reserve and publish as a CNA distinguish between identifier (finder), submitter (reporter), and commiter (analyst).
版本 16.26.0 (2023-12-26)
- 提交 c138a功能Vulnerability commits that were rejected or reverted show an indicator within the commit history for better identification.
版本 16.25.1 (2023-12-08)
- 提交 a86ac优化Performance improvement of internal HTTP processing to handle requests more efficient and to deliver results faster.
版本 16.25.0 (2023-11-18)
- 提交 346c5功能Vulnerability entries link to the software licenses of the affected products.
版本 16.24.7 (2023-11-17)
- 提交 1c1fa优化Identification of software licenses of affected products is much faster.
版本 16.24.6 (2023-11-09)
- 提交 fdcd0优化The user menu shows more items to provide better accessibility.
版本 16.24.5 (2023-11-06)
- 提交 47d40优化Upgrade of the database engine to provide better performance and ressource management.
版本 16.24.4 (2023-10-30)
版本 16.24.3 (2023-10-27)
- 提交 a64b7优化Better performance for CTI administrators using the backend to moderate indicators of compromise.
版本 16.24.2 (2023-10-26)
- 提交 5be54优化Better and more efficient matching of version numbers in basic search requests.
版本 16.24.1 (2023-10-21)
- 提交 d0fa5优化The CTI actor views prefer more recent indicator of compromise to be shown if there is a limit enforced.
版本 16.24.0 (2023-10-14)
- 提交 1c51a功能客户请求Users with old passwords are warned that their passwords are going to expire. They are encouraged to define a new password.
- 提交 d843d功能Old passwords expire and require a password reset via email to enforce a high level of security.
版本 16.23.2 (2023-10-12)
- 提交 c03c5优化Better handling of special characters in vulnerability titles to provide improved readability.
版本 16.23.1 (2023-10-11)
- 提交 3257f优化Improved layout of recent CTI views for new IP addresses and actors.
版本 16.23.0 (2023-10-04)
- 提交 c7f4e功能Vulnerability entries show a dedicated list of affected version numbers as well.
版本 16.22.10 (2023-09-23)
- 提交 e7d66优化Better and faster processing of mail alerts to keep users up-to-date about their affected products.
版本 16.22.9 (2023-09-20)
- 提交 2b9d4优化Improvement of flooding and denial of service protection to guarantee an even more reliable service.
版本 16.22.8 (2023-09-17)
- 提交 a91bf优化The fields
software_website_vendorandsoftware_website_productare now auto-completed much better to provide improved data quality for less popular entries.
版本 16.22.7 (2023-09-15)
版本 16.22.6 (2023-08-31)
- 提交 311c6修复错误客户请求Fixed an issue where exported CPE lists (JSON) were shown as objects instead of arrays. Reported by Dave Thornley.
版本 16.22.5 (2023-08-29)
- 提交 914ca优化Improved handling of malicious requests to guarantee availability and responsiveness for our customers.
版本 16.22.4 (2023-08-09)
- 提交 1e7dc修复错误Sums and average data of yearly views were not calculated correctly if there was a month with zero data.
版本 16.22.3 (2023-08-03)
- 提交 b7490优化Vulnerability data storage of
source_nessus_typeis much more efficient which increases performance as well.
版本 16.22.2 (2023-08-02)
- 提交 65890优化Better handling of obsolete links to discontinued vulnerability sources.
版本 16.22.1 (2023-08-01)
- 提交 4423b优化Vulnerability data storage of
source_vulnerabilitycenter_severityis much more efficient which increases performance as well.
版本 16.22.0 (2023-07-31)
- 提交 09088功能客户请求Changes to the personal filter are now considered critical and as such they will inform the user about the edit via email.
版本 16.21.7 (2023-07-30)
- 提交 d6b1e优化Vulnerability data storage of
source_nessus_riskandsource_secunia_riskis much more efficient which increases performance as well.
版本 16.21.6 (2023-07-29)
- 提交 3a72b修复错误A display bug showed merged vulnerability submissions as rejected instead of merged into the existing entry. Thanks to Calvin Star for making us aware of this issue.
版本 16.21.5 (2023-07-26)
- 提交 b552b修复错误In CTI views the list of references was not revealed entirely even if the user had a proper license.
版本 16.21.4 (2023-07-24)
- 提交 520d2优化Better listing of sources associated with CTI actor activity analysis.
版本 16.21.3 (2023-07-19)
- 提交 707b0优化Better IP address association for verified IOC (Indicators of Compromise). This increases the accuracy of CTI analysis of vulnerability entries.
版本 16.21.2 (2023-07-17)
- 提交 71759优化The submission form for new vulnerabilities allows URLs for exploits as well.
版本 16.21.1 (2023-07-16)
- 提交 ab061优化Vulnerability exports do contain duplicate CVEs that got assigned.
版本 16.21.0 (2023-07-05)
- 提交 0c32c功能Sometimes CNAs assign duplicate CVEs for the same vulnerability. We do now show such duplicates to help to better understand connections between CVE entries.
版本 16.20.3 (2023-06-27)
- 提交 6ee4c优化Better identification of vulnerability entries which affect products that are end-of-life. Version-specific association is now possible.
版本 16.20.2 (2023-06-26)
- 提交 bb031优化Improvement of CTI analysis for vulnerabilities that spike within short timeframes (hours and days). The data is loaded, analyzed, and presented much faster.
版本 16.21.2 (2023-07-17)
- 提交 39c9a优化Optimization of monoblock capabilities to handle vulnerability data.
版本 16.20.0 (2023-06-13)
- 提交 e7287功能There is also a list of most recent IP addresses added as IOCs available for paying users.
版本 16.19.0 (2023-06-10)
- 提交 e6e0d功能A list of the most recent actor IOCs is available for paying users.
版本 16.18.1 (2023-06-03)
- 提交 e3b45优化Detection of commit collisions during editing of vulnerability data. Entries will be locked until an edit has been finalized.
版本 16.18.0 (2023-05-26)
- 提交 b9b95功能Actor analysis adds links to malware samples to support in-depth analysis.
版本 16.17.2 (2023-05-23)
- 提交 b7248优化Improved use of vulnerability names for better data matching on the web service.
版本 16.17.1 (2023-05-17)
- 提交 6f54e优化Upgraded database servers to improve performance during peak times.
版本 16.17.0 (2023-05-13)
- In API 2.37/3.57 introduction of the field
source_cve_duplicateto indicate whether a duplicate CVE has been assigned to an entry.
版本 16.16.4 (2023-05-11)
- 提交 0fa94修复错误Fixed a minor view issue with Indicator of Compromise (IOC) tables that list IP ranges.
版本 16.16.3 (2023-05-10)
- 提交 8f483修复错误Fixed an issue where sync of researcher data with the CVE stream did not happen properly under certain circumstances.
版本 16.16.2 (2023-05-05)
- 提交 ba5c5优化Improvement of timeseries handling which contain CTI activity scores and exploit today prices.
版本 16.16.1 (2023-05-03)
- 提交 bf769优化Improved intelligent matching of vendor and product definitions in all search queries, especially in multi-line fields.
版本 16.16.0 (2023-04-29)
- 提交 eaaf4功能Due to our intensive involvement as a CNA (CVE Numbering Authority) we have extended the main menu to access CVE details that are maintained by us very quickly.
版本 16.15.1 (2023-04-22)
- 提交 e45ea优化The discussion possibility for vulnerabilities mentions that they are intended for public exchange and not fort support queries. Use the contact form instead to approach our support team.
版本 16.15.0 (2023-04-21)
- 提交 f33df功能The CTI views for actors and IP addresses show the date of the first identification of Indicators of Compromise.
版本 16.14.1 (2023-04-18)
- 提交 f5a6c优化Improvement of the field
advisory_typeto indicate where a vulnerability disclosure is originating from. - Fixed an issue where under certain circumstances the field
advisory_typewas not shown in an API response.
版本 16.14.0 (2023-04-17)
- 提交 a040a功能Added the setting to enable count information for certain views in the site title. This helps to determine how many items are listed on a page.
- 提交 2ef13修复错误Fixed an issue in the overview of personal posts which did not show the name of a vulnerability entry properly.
版本 16.13.2 (2023-04-16)
- 提交 9a6a2优化Changed the HTML title of vulnerability entries to use a colon instead of a pipe symbol as delimiter. Please update your parsers if you are relying on this data structure.
版本 16.13.1 (2023-04-15)
- 提交 22190优化Performance optimization for all views that list our entries as a CVE Numbering Authority.
- 提交 853b1优化Access to all entries that are maintained by us as the responsible CVE Numbering Authority are accessible without any restrictions for all users.
版本 16.13.0 (2023-04-09)
- 提交 792c6功能Access to our activities as a CVE Numbering Authority possible by year. This has become mandatory due to the enormous amount of CVEs that we are handling.
- 提交 a1d8b优化Recent CNA entries do now redirect to the current year.
版本 16.12.1 (2023-04-02)
- 提交 2085f优化Improved the speed and accuracy of the display of recent vulnerabilities on the front page.
版本 16.12.0 (2023-04-01)
- In API 3.56 sources that are not available anymore are shown with the
unavailabletag which contains the reason. This helps to determine defunct companies and dead links. - 提交 b5b18功能Vulnerability entries indicate broken external links to help determine defunct companies and dead links.
版本 16.11.1 (2023-03-31)
- 提交 fd85c修复错误Fixed an issue where reverse lookups of CPE strings was not matching properly.
版本 16.11.0 (2023-03-23)
- In API 2.36/3.55 introduction of the field
source_cve_duplicateofto indicate CVE assignments which are potential duplicates of existing CVE assignments.
版本 16.10.3 (2023-03-17)
- 提交 05831优化Optimized the speed to update community points earned by users for submissions of new vulnerability entries.
版本 16.10.2 (2023-03-16)
- 提交 7b3a5优化Improved accuracy of indicators for vulnerability entries of managed serviced that cannot get a CVE according to current CAN rules.
版本 16.10.1 (2023-03-13)
- 提交 ab8a8优化客户请求Handling of CPE values of vulnerabilities was optimized to provide better accuracy of data.
版本 16.10.0 (2023-03-11)
- 提交 c639d功能客户请求Comments of vulnerability entries will show official replies by our community team to help visitors to understand details and inner workings of our processes.
- 提交 13ff7功能Hovering over the time indicator of comments will show the exact time of the submission.
版本 16.9.3 (2023-03-09)
版本 16.9.2 (2023-02-19)
- 提交 72d23优化References lists use the general naming convention for VulDB entries as well.
版本 16.9.1 (2023-02-16)
- 提交 636cc优化Much better performance of the service by optimizing the partitioning of data. Especially if there are many tasks handled at the same time.
版本 16.9.0 (2023-02-15)
- 提交 dc811功能Switches VulDB CVSSv3 scores from 3.0 to 3.1 to adopt latest version of the industry standard.
版本 16.8.0 (2023-02-13)
- In API 3.54 the field
software_managedserviceis introduced to indicate products that are managed services and therefore not maintained by users.
版本 16.7.0 (2023-02-11)
- In API 1.17/2.35/3.53 the field
software_rollingreleaseis introduced to indicate whether the product is not using version numbering but establishing a rolling release instead. - The changelog does now flag changes to the API as such. This helps customers to identify changes that might require their attention regarding automated processing of data.
版本 16.6.12 (2023-02-03)
- Invalid URL requests to the API are not always redirected to prevent inefficient usage of the API.
版本 16.6.11 (2023-01-28)
- Fixed an issue in the API where request for
entry_timstampe_changefor older entries did not return the desired amount of items.
版本 16.6.10 (2023-01-23)
版本 16.6.9 (2023-01-22)
- 提交 05f5c优化Improvement of the Google Hacking view which provides a wide variety of Google Dorks.
- 提交 32026优化Faster and smarter processing of cache data which improves the overall performance of the service drastically.
版本 16.6.8 (2023-01-21)
- 提交 830d3优化Invalid URL requests to the service are usually redirected, to point the user to the correct URL. This is now approached more consistantly.
版本 16.6.7 (2023-01-20)
- 提交 e6e23优化Performance optimization to increase responsibility for a wide variety of views.
版本 16.6.6 (2023-01-12)
- 提交 6c542优化Improvement of search by purl statements. Better matching of products and versions possible.
版本 16.6.5 (2023-01-11)
版本 16.6.4 (2023-01-10)
- 提交 c8bc3修复错误Fixed an issue where emails confirming the moderation of a vulnerability submission mention the wrong submission ID in the mail subject.
版本 16.6.3 (2023-01-09)
- 提交 9b662优化Better handling of user sessions, especially if there is a lot of activities on the service.
版本 16.6.2 (2023-01-07)
- 提交 5e9a7优化Introduction of a simple way for moderators to postpone processing of queued vulnerability items.
- 提交 cfb9a优化Much better performance for moderators to import new vulnerabilities.
版本 16.6.1 (2023-01-04)
- 提交 cd64f优化Improvement of priority indicators for vulnerability queue handling by moderators.
版本 16.6.0 (2023-01-03)
- 提交 02196功能New queue handling of identifier vulnerabilities to improve quality and speed of processing by moderators.
版本 16.5.4 (2023-01-02)
- 提交 9a5e1优化Extended display of multiline quotes of vulnerabilities for software, advisories, vulnerabilities, exploits, and countermeasures.
版本 16.5.3 (2022-12-21)
- 提交 89dfe修复错误In very rare cases the derivative identification of vulnerability classes was not working.
版本 16.5.2 (2022-12-18)
- 提交 6924d优化
版本 16.5.1 (2022-12-17)
- 提交 a0204优化All update views show duplicates and false-positives accordingly.
版本 16.5.0 (2022-12-16)
版本 16.4.6 (2022-12-12)
- 提交 1b860优化
版本 16.4.5 (2022-12-10)
- More performance improvement of the API for timeranges like
advisory_date_start,entry_timestamp_create_start,entry_timestamp_change_start, andentry_timestamp_all_start.
版本 16.4.4 (2022-12-08)
- In API 3.52 performance optimization of certain queries requesting timeranges like
advisory_date_start,entry_timestamp_create_start,entry_timestamp_change_start, andentry_timestamp_all_start.
版本 16.4.3 (2022-12-07)
- 提交 dba58优化Improved handling of duplicate vulnerability entries. These are processed much faster, flagged as duplicates or even hidden under certain circumstances.
版本 16.4.2 (2022-12-05)
- 提交 67c94优化Performance optimization due to intelligent caching of cyber threat intelligence views like countries, sectors, and actors.
版本 16.4.1 (2022-12-04)
- 提交 8dc47优化Access to cyber threat intelligence information which is not unlocked yet will show a proper amount of demo data to help to understand features, coverage, and possibilities.
版本 16.4.0 (2022-12-03)
- 提交 12800功能客户请求The Cyber Threat Intelligence platform does now provide a new view. The sector view helps to understand the emerging, current, and future threats for specific economic sectors.
版本 16.3.4 (2022-11-26)
- 提交 dae79优化Improved extended CPE dictionary generation. By dropping attributes that are not necessary the file generation becomes faster and the file becomes smaller.
版本 16.3.3 (2022-11-25)
- 提交 726b4优化Hardware upgrade for better memory and processing handling.
版本 16.3.2 (2022-11-22)
- 提交 21d9b优化Improved coverage and flagging of software products known to be end-of-life.
版本 16.3.1 (2022-11-21)
- 提交 23f71优化Better handling of vulnerability entries flagges as false-positives or revoked data parts. Summaries reflect the status better and overviews tag them more prominent.
版本 16.3.0 (2022-11-18)
- 提交 085b7功能Additional links to the internal knowledge base and external sources available in vulnerability summaries and descriptions. This makes research a lot faster, easier, and more comfortable.
版本 16.2.0 (2022-11-08)
版本 16.1.1 (2022-11-07)
- 提交 21a87修复错误客户请求Fixed a bug where some searches for CPE strings were not working properly.
版本 16.1.0 (2022-10-31)
版本 16.0.3 (2022-10-20)
- 提交 698a4修复错误Fixed an issue on the front page where under certain circumstances the exploit price overview was not refreshed properly.
版本 16.0.2 (2022-10-19)
- 提交 df7bf修复错误Vulnerability entries without the definition of
software_versionbut with a definition ofcountermeasure_upgrade_versionwill show this information properly in the document title.
版本 16.0.1 (2022-10-18)
- 提交 f18ee优化Vulnerability entries list associated changesets with date and count of changes. This makes it easier to understand the lifecycle of an entry.
版本 16.0.0 (2022-10-15)
- 提交 30f76功能客户请求The vulnerability data team is taking advantage of the new source monitoring modules. An advanced artificial intelligence enumerates different sources to determine new vulnerabilities or additional details. If such are found, they are added to the submission queue and will be reviewed by the moderation team. This will increase coverage, processing speed, and data quality of vulnerability entries drastically.
版本 15.5.6 (2022-10-10)
- 提交 6ab11优化
版本 15.5.5 (2022-10-07)
- 提交 fb472优化Optimization of the user menu as shown on devices with smaller screens.
版本 15.5.4 (2022-10-06)
- 提交 78b19优化Sites showing search results with a new search form will set the focus on the form field for faster processing of new search queries.
版本 15.5.3 (2022-09-30)
- In API 3.48 fixed an issue for the
fieldparameter where only old notations ofvulnerability_cvss3_basevector_vuldbandvulnerability_cvss3_tempvector_vuldbinstead also ofvulnerability_cvss3_vuldb_basevectorandvulnerability_cvss3_vuldb_tempvectorwere supported. - In API 1.16/2.34/3.49 a more graceful handling of too many definitions in the
fieldsparameter got established. If there are too many fields defined, only the first ones will be used and the others silently ignored.
版本 15.5.2 (2022-09-28)
- 提交 aaebc优化Better handling of data uncertainty while generating stats and charts to improve result accuracy.
版本 15.5.1 (2022-09-25)
- In API 1.15/2.33/3.47 additional data analysis is able to provide derivative Google Hacking strings shown in the field
exploit_googlehack. - 提交 abeb0优化Additional data analysis is also able to provide derivative Google Hacking strings in vulnerability summaries, descriptions, and detail listings.
版本 15.5.0 (2022-09-23)
- 提交 7fe8b功能客户请求We have introduced a Google Hacking Database containing exclusive dorks.
版本 15.4.1 (2022-09-20)
- 提交 c9710优化Improved the declaration of impacts within description and summaries of vulnerabilities.
版本 15.4.0 (2022-09-19)
- 提交 fdc84功能客户请求The custom CTI analysis allows filter by countries to improve geopolitical analysis capabilities.
版本 15.3.11 (2022-09-18)
- 提交 43a2c优化Performance optimization of statistical data of user contributions.
版本 15.3.10 (2022-09-15)
- 提交 8028c优化Better memory handling of the service to improve responsiveness of queries and views.
版本 15.3.9 (2022-09-14)
- 提交 0e2c2优化Improvement of countermeasure handling of vulnerabilities to save space, gain better performance, and faster processing of entries.
版本 15.3.8 (2022-09-11)
- 提交 b4aec修复错误Fixed an issue where empty CWE data was shown in vulnerability entries. This was just an interface error on the web frontend.
版本 15.3.7 (2022-09-08)
- 提交 e5ba5修复错误客户请求Fixed an issue with the RSS feeds where certain special characters in the title element lead to XML validation errors. Reported by Calvin Mende.
版本 15.3.6 (2022-09-07)
- 提交 3c399修复错误客户请求Fixed an issue where certain product names generated an invalid XML CPE dictionary. Reported by user RobinDefenced
版本 15.3.5 (2022-09-06)
- Fixed an issue where certain search requests via web and API were not executed at all. Reported by user showmax
版本 15.3.4 (2022-09-05)
- 提交 61068优化Another performance improvement of search queries. Lookups for functions and arguments are now multiple times faster as well.
版本 15.3.3 (2022-09-02)
- 提交 6ae56优化客户请求Performance improvement of search queries. Especially queries for URLs are now multiple times faster.
版本 15.3.2 (2022-08-30)
- 提交 0acc3优化Better performance and accuracy of parsing of vulnerability data during moderation process.
版本 15.3.1 (2022-08-29)
- 提交 7d293优化Better teasing of Cyber Threat Intelligence information for free users.
版本 15.3.0 (2022-08-27)
- 提交 13bc6功能客户请求Vulnerability entries show multiple CWE if available. In this case they are listed in descending order of accuracy.
版本 15.2.3 (2022-08-19)
- 提交 87315优化Vulnerability entries flagged as false-positive are shown with this tag in lists (e.g. overview, search).
版本 15.2.2 (2022-08-17)
- 提交 4bf82优化Another improvement of entropy of the CSRF token generation for critical forms.
版本 15.2.1 (2022-08-14)
- In API 3.46 he virtual fields
advisory_reportconfidence,exploit_exploitability,countermeasure_remediationlevelprovide better data accurary to improve data quality.
版本 15.2.0 (2022-08-11)
- In API 3.45 the Vulnerability API is able to show additional CTI information by enabling
cti=1within requests. This is possible for free accounts, commercial accounts and enterprise accounts with the CTI option enabled. The real-time availability of the data introduces some increased round trip times for such queries.
版本 15.1.2 (2022-08-09)
- 提交 0d06a优化Better matching of natural search when it comes to short words which causes less false-negatives.
版本 15.1.1 (2022-07-12)
- 提交 b168a优化Fixed an issue where vulnerabilities with product versions ending with
.xwildcards were handled inapprorpiately.
版本 15.1.0 (2022-07-08)
- 提交 5134e功能客户请求Certain views contain a column listing the latest EPSS (Exploit Prediction Scoring System) values for vulnerabilities.
版本 15.0.0 (2022-07-05)
版本 14.27.1 (2022-06-29)
- 提交 093a3优化Listing of important identifiers of vulnerabilities were optimized to provide better searchability.
版本 14.27.0 (2022-06-24)
- 提交 ab1f7功能English vulnerability descriptions explain the vulnerability classes according to the CWE definitions.
版本 14.26.6 (2022-06-23)
- 提交 0761d优化Improved the support for less popular CWE classes to provide better identification capabilities of exotic vulnerabilities.
版本 14.26.5 (2022-06-16)
- 提交 4a400优化Faster synchronization of EPSS (Exploit Prediction Scoring System) data to increase confidence of predictions.
版本 14.26.4 (2022-06-11)
- 提交 e54df优化Improved version listing for releases using letters in version numbering (e.g. OpenSSL).
版本 14.26.3 (2022-06-10)
- 提交 986a8优化Better accuracy of product requests in the Monoblock.
版本 14.26.2 (2022-06-07)
- 提交 7045a优化Optimized the purchase and upgrade experience for users with better guidance and accessibility.
版本 14.26.1 (2022-06-02)
- 提交 af297优化Emails sent for custom mail alerts do now contain the CVE of matching entries to provide better overview and accessibility.
版本 14.26.0 (2022-06-01)
- 提交 6b2ff功能客户请求Introduction of the Exploit Prediction Scoring System which is able to predict chances of successful exploitation of vulnerabilities. Official EPSS data is kept in sync and shown in the vulnerability details.
- In API 2.32/3.43 introduced the fields
exploit_epss_scoreandexploit_epss_percentilewhich provide live data of EPSS (Exploit Prediction Scoring System) to predict chances of successful exploitation.
版本 14.25.10 (2022-05-31)
- 提交 6436a修复错误Fixed an issue where certain links were not correctly used in the vulnerability summaries for authenticated users. Reported by Andrea Hauser
版本 14.25.9 (2022-05-25)
- 提交 57b2a优化客户请求Better integration of search possibilities in the site header on mobile phones.
版本 14.25.8 (2022-05-23)
- In API 3.41 accessing the field
software_cpe23is possible again. Other major releases of the API were not affected. Reported by Stefan Sander.
版本 14.25.7 (2022-05-15)
- 提交 ed7b9修复错误Sending certain host requests introduced the possibility for unexpected redirects. Reported by Pankaj lakshkar
版本 14.25.6 (2022-05-12)
- 提交 b8eb9优化Improved search intelligence to match CWE and CVE faster and with more accuracy.
版本 14.25.5 (2022-05-11)
- 提交 84bd4优化All CTI activities are available in a dedicated section. Existing links redirect to the new location.
版本 14.25.4 (2022-05-10)
- 提交 0098a修复错误客户请求Fixed an error message which was shown under certain circumstances for recent entries.
版本 14.25.3 (2022-05-06)
- 提交 e8a31优化The latest videos shown on the frontpage are updated faster to provide access to the latest entries.
- In API 1.14/2.31/3.41 fixed an issue where requests with
entry_timestamp_createdid include entries that matchedentry_timestamp_changeinstead. Reported by user peeradon.no
版本 14.25.2 (2022-05-04)
版本 14.25.1 (2022-05-03)
版本 14.25.0 (2022-05-02)
- 提交 6b388功能Availability of a dedicated RSS feed for changelog entries to monitor changes easily.
版本 14.24.1 (2022-04-29)
- 提交 c0290优化Aligned icons and sidemenu in the CNA section to provide better accessibility.
版本 14.24.0 (2022-04-27)
- In API 3.40 using the parameter
format=csvmakes it possible to output vulnerability data as CSV. Not all request types are supported, not all fields are included, and API header information is not part of the output.
版本 14.23.1 (2022-04-25)
- 提交 c49ec优化Improved the actor and compaign association of the CTI module. Interlinking data is better and provides results with increased accuracy.
- 提交 30e2c优化CTI indicators shown are either verified or predictive and shown with the associated tag.
版本 14.23.0 (2022-04-24)
- 提交 71333功能The country overview shows additional details like covered languages, TTP, IOA, and activities.
版本 14.22.0 (2022-04-21)
- 提交 c3eae功能The user menu contains additional items to quickly access your user profile, activity settings, and alerting capabilities.
- 提交 3cc50优化Aligned the text color of lists in databoxes to the overall style.
版本 14.21.2 (2022-04-20)
- 提交 1ca57优化客户请求Alerts sent via email use asterisks to prevent Microsoft Outlook from deleting newlines.
- 提交 1ca57优化Alerts sent via email refer to entries with the new format VDB-1234 instead of the old format ID 1234.
- 提交 00701优化Switched symbols used in the community activity stream from emoji to a dedicated font to provide better reliability on different platforms.
版本 14.21.1 (2022-04-19)
- 提交 90187优化Certain elements on the frontpage use additional icons to visualize data sources.
版本 14.21.0 (2022-04-16)
- In API 3.39 enabled auto-complete feature for
software_typeeven if the field is not yet defined in the monoblock.
版本 14.20.9 (2022-04-14)
- 提交 38c8f修复错误Sending multiple information mails if a duplicate signup happens is prevented. Reported by Rupali Jain
版本 14.20.8 (2022-04-13)
- 提交 13b46修复错误Fixed a rare bug affecting certain product views that prevented the list from loading. Reported by user mael
版本 14.20.7 (2022-04-11)
- 提交 766de优化Performance optimization of certain filtered views used by the CNA team.
- 提交 45617修复错误客户请求The autocomplete feature for versioning of certain products was not able to finalize the output. Reported by user lywand
版本 14.20.6 (2022-04-09)
- 提交 99f6c优化Layout of current utilization data provides better readability.
版本 14.20.5 (2022-04-08)
- 提交 14036优化客户请求Registration does allow mail addresses with rather long top-level-domains.
版本 14.20.4 (2022-04-01)
- 提交 8e9e6优化The overview of monitored actors displays the number of collected IOC (Indicators of Compromise), TTP (Tactics, Techniques, Procedures), IOA (Indicators of Attack), campaigns and external references.
版本 14.20.3 (2022-03-29)
- 提交 45456优化New overview of actors shows the amount of available indicators and used sources. The list is also sortable for better viewing.
版本 14.20.2 (2022-03-28)
- 提交 fdbeb优化Update of icons used in menus and on other parts of the service.
版本 14.20.1 (2022-03-26)
- 提交 30ff5优化客户请求Submissions of new vulnerabilities will automatically handle a CVE assignment and inform the submitter about the CNA decision (assigned, denied or pending).
- 提交 30ff5优化Submissions of new vulnerabilities will request an external advisory url for further validation of the issue.
版本 14.20.0 (2022-03-21)
- 提交 14dd6功能An overview of all RSS feeds with all available languages is listed.
版本 14.19.0 (2022-03-20)
- 提交 d86a3功能Availability of all RSS feeds in all available languages. This is true for of recent, updates, Twitter, and customer streams.
- 提交 85b71功能RSS feeds always show the CVE or another important identifier in the title for better searching capabilities.
- 提交 95b49优化The
languageelement of RSS feeds reflects the used content language.
版本 14.18.4 (2022-03-19)
- 提交 6bc0c优化Optimized performance by using specific features and configuration settings in PHP8.
- Fixed a race condition where consecutive API requests might not have been added to the personal API history properly.
版本 14.18.3 (2022-03-15)
- 提交 c2804优化Scrollbars of elements provide better styling to improve user experience, especially on smaller screens.
版本 14.18.2 (2022-03-14)
- 提交 0893a优化Improved intelligent matching of vendor and product definitions in simple searches.
版本 14.18.1 (2022-03-10)
- 提交 25bad优化Improved layout of the changelog items to provide better visibility.
- 提交 ed2be优化Timelines in vulnerability entries do always link to countermeasures if patch or upgrade URLs are known.
- 提交 91b01修复错误Some links to countermeasures were clickable but still threw a 404 even though the requested resources were available. Reported by user mael
版本 14.18.0 (2022-03-09)
- 提交 72d69功能Items listed in legends of charts are clickable to allow quick drilldowns.
- 提交 a7e66修复错误Certain pie charts did not reflect the correct number of known matches.
版本 14.17.5 (2022-03-07)
- 提交 c162c优化A better layout helps vulnerability moderators to identify priority entries in the submission queue.
版本 14.17.4 (2022-03-01)
- 提交 23a47修复错误In certain views the generation of timeline graphs was not possible if the advisory_date of an entry has been changed to another year.
版本 14.17.3 (2022-02-28)
- 提交 01eae修复错误Fixed an issue where empty CVSSv3 scores were shown with a value of 0.0.
版本 14.17.2 (2022-02-27)
- 提交 c8b23优化Performance optimization of list views which contain CVSSv3 Meta Scores.
- 提交 48019修复错误Under certain circumstances an existing remediation level based on the field
countermeasure_remediationlevelwas not shown correctly.
版本 14.17.1 (2022-02-25)
- 提交 4882d优化Icon text in the submenu allows hyphenation to optimize the view on narrow screens.
- 提交 60d49优化Charts for timespans are optimized to zoom into the timeframe whenever possible and useful.
版本 14.17.0 (2022-02-23)
- 提交 f8d99功能The applicable copyright license is shown in the footer of the page.
版本 14.16.1 (2022-02-22)
- 提交 c6483优化Table listings with narrow columns provide better spacing to fit the content.
版本 14.16.0 (2022-02-21)
- 提交 93389功能客户请求The CTI views do allow for drilldown of IP addresses as IoC (Indicator of Compromise).
- 提交 9e1e2修复错误客户请求Listing of version numbers ranging back to 0.x might have contained version 0.0. This is usually wrong and got fixed. Thanks to Cheek Yang of xFusion Digital Technologies for making us aware of this issue.
版本 14.15.1 (2022-02-20)
- 提交 24c78优化Certain CTI views which have complex hostnames as IoC (Indicator of Compromise) allow much faster analysis.
版本 14.15.0 (2022-02-18)
- 提交 4da51功能客户请求Custom CTI analysis contains IOC (Indicator of Compromise), TTP (Tactics, Techniques, Procedures) and IOA (Indicator of Attack) as well.
版本 14.14.0 (2022-02-17)
- 提交 52552功能客户请求The CTI view for countries lists popular TTP (Tactics, Techniques, Procedures) and IOA (Indicator of Attack) as well.
版本 14.13.4 (2022-02-09)
- 提交 291bf优化Search requests for CVE identifiers detects mismatching dashes (e.g. en and em) and corrects them automatically.
版本 14.13.3 (2022-02-08)
- 提交 f7d1b优化Performance optimization of data analysis of APT actors.
- 提交 7c6d0优化Improvement of CTI actor report generator for GitHub repository.
版本 14.13.2 (2022-01-31)
- 提交 b0bff优化Activity charts provide data with better accuracy.
- 提交 b0bff优化Activity charts have a better performance during generation.
版本 14.13.1 (2022-01-30)
- 提交 f1aa5优化Performance optimization of APT actor association charts during generation.
版本 14.13.0 (2022-01-28)
- In API 2.30/3.38 multiple fields to reflect our capabilities as a CNA to assign and disclose CVE entries are introduced:
cna_responsible,cna_contact_date,cna_response_date,cna_response_summary,cna_decision_date,cna_decision_summary,cna_eol, andcna_nocve.
版本 14.12.1 (2022-01-27)
- In API 1.13/2.29/3.37 provoking
405 Unknown request typeerrors again is only possible after a few minutes. This prevents flooding the API access log and prevents misconfigured clients from exhausting the API credits quickly.
版本 14.12.0 (2022-01-24)
- 提交 78570功能APT actor analysis view adds associated campaign details for IOC.
- 提交 78570功能APT actor analysis view adds associated CWE details for TTP.
- 提交 26292优化General performance optimization for all APT actor analysis views.
- 提交 1e67c优化Data shown in APT actor analysis view for non-authenticated users is based on real-time data.
版本 14.11.8 (2022-01-21)
- 提交 b1aa4优化Improvement of URL validation during moderation to prevent incorrect values.
版本 14.11.7 (2022-01-15)
- 提交 9fa88优化Improved security of SPF and DMARC. Recommendations were submitted by Nikhil Rane.
- 提交 9fa88优化Improved security and usability of signup procedure and passwort recovery procedure. Recommendations were submitted by Nikhil Rane.
版本 14.11.6 (2022-01-14)
- 提交 68c68优化Layout optimization of certain forms using additional information or CAPTCHA elements.
版本 14.11.5 (2022-01-13)
- 提交 ac2a6优化Performance tweaks of certain views.
版本 14.11.4 (2022-01-12)
- 提交 28f48优化Highly improved performance of APT actor analysis. Especially such with many known indicators of compromise.
版本 14.11.3 (2022-01-11)
- 提交 b59d0优化Performance and memory optimization of certain queries which do not need CTI data to be shown.
版本 14.11.2 (2022-01-07)
- 提交 9ade9优化Multi-threading has been optimized to decrease resource consumption and to increase performance.
- 提交 509bb优化External links in the table of contents of the Knowledge Base open a new window.
版本 14.11.1 (2022-01-05)
版本 14.11.0 (2022-01-04)
- 提交 bfdcd功能客户请求It is possible to do a CTI analysis of dedicated entries to show activities, interest distribution, active actors, and indicators of compromise. This feature requires an additional CTI license.
版本 14.10.2 (2021-12-28)
- 提交 f43dd修复错误Users hiding their profile were not able to show their own profile. This has been fixed.
版本 14.10.1 (2021-12-24)
- 提交 8b772优化客户请求Scrollbars on Mozilla browsers are styled or even hidden whenever useful to provide a better user experience on smaller screens.
版本 14.10.0 (2021-12-23)
- 提交 ac413功能The new status page shows the status, load and utilization of service components.
版本 14.9.0 (2021-12-22)
- 提交 a0614功能VulDB has been officially approved by the CVE program as a CVE Numbering Authority (CNA). We are authorized to handle new vulnerability submissions, assign unique CVEs and disclose them. Users may flag new vulnerability submissions to get a CVE. More information in our official press release.
- 提交 e8c35优化Cyber threat intelligence activity scores on the front page are shown as bars to indicate heat faster.
版本 14.8.1 (2021-12-18)
- 提交 158db优化Improved the order of the user menu on the Arabic edition of the site.
版本 14.8.0 (2021-12-17)
- 提交 bb5ae功能客户请求Language support for Russian (ru). This includes basic parts of the web site and vulnerability details.
版本 14.7.0 (2021-12-14)
- 提交 c958e功能Our bug bounty is fully compliant with draft-foudil-securitytxt-12. You will find the current file at /.well-known/security.txt
- 提交 d754b优化Additional intelligence of the search engine tries to determine potential product definitions. This increases accuracy of search requests.
版本 14.6.0 (2021-12-12)
版本 14.5.0 (2021-12-11)
- 提交 5e850功能Entires in the Knowledge Base are linked to the table of contents to provide better accessibility of information.
- 提交 d184f优化Slightly improved confirmation email messages for moderated submissions.
版本 14.4.1 (2021-12-10)
- 提交 5213b优化Commit details show more information and link to additional resources.
- 提交 03ef5优化Performance optimization of the front page which loads the vulnerability of the day much faster.
版本 14.4.0 (2021-12-09)
- 提交 53394功能客户请求All documentation files are moved into the new Knowledge Base. Old links to the documentation remain valid.
- 提交 e75bd优化Optimized padding of breadcrumb items provides better usability.
版本 14.3.1 (2021-12-08)
- 提交 9f087优化New multi-threading handling of expensive database queries increases the performance of many requests and views.
版本 14.3.0 (2021-12-07)
- 提交 0328b功能Added a breadcrumb navigation item to access higher level sections easier.
- 提交 20ade功能Release versions in the changelog might be accessed via ID.
- 提交 ebad6修复错误The user data in the side menu are shown properly even if there are very long strings used.
版本 14.2.0 (2021-12-06)
- 提交 3deae功能CVSSv3 pie chart lists do also include CNA data to improve comparison of different sources.
- 提交 06fc8优化Commits listed in the changelog have type badges for better identification.
版本 14.1.3 (2021-12-05)
- 提交 6ba63优化Databox with vulnerability of the day uses better search box for increased accessibility.
版本 14.1.2 (2021-12-04)
- 提交 ab33b优化Responsive app elements behave better on smaller rectangular screens.
- 提交 07841修复错误All risk views show data properly under any circumstances for authenticated users.
版本 14.1.1 (2021-12-03)
- 提交 e5209优化客户请求The layout for printing views is optimized for better user experience.
- 提交 d0822优化The language path for Japanese is changed from /jp/ to /ja/ to respect ISO 639-1 language two-letter conventions. Old links remain active and redirect to the new URL structure.
- 提交 fa317优化The user menu layout has been optimized for better readability. Especially VulDB moderators and administrators get easier access to relevant data.
版本 14.1.0 (2021-12-02)
- 提交 e68e7功能Some chart types, especially pie charts and doughnut charts, show an additional legend to provide better visibility of data.
- 提交 2fa71优化客户请求The responsiveness of the user menu on the side behaves better on smaller screens.
- 提交 ee455优化External URLs to MITRE CVE link to the new cve.org domain.
版本 14.0.1 (2021-12-01)
- 提交 786dd优化Minor optimizations of layout elements of new app layout.
- 提交 61570优化客户请求The settings page informs users about the character limit for custom alert filters. Purchasing additional licenses is required to extend this limit.
版本 14.0.0 (2021-11-30)
- 提交 bb919功能客户请求Relaunch of the service with a new layout and extended app capabilities.
版本 13.41.1 (2021-11-11)
- 提交 a667c优化Vulnerability entries without user comments show the requested languages, even if English was the only language selected.
- 提交 1ff69优化Layout of the login recommendation to comment on vulnerability entries was optimized.
版本 13.41.0 (2021-11-10)
- 提交 0c2ae功能客户请求Commercial customers using credit card as payment method are able to show their last invoices online. Invoices and receipts can be downloaded from our partner Stripe. All documents are hosted externally. VulDB does not store credit card details, invoices nor receipts.
版本 13.40.1 (2021-11-09)
- In API 2.28/3.36 the field
vulnerability_bugbounty_priceis only shown if there is a bug bounty price defined. - 提交 5fe48优化Performance improvement (CPU and memory consumption) of long list views.
版本 13.40.0 (2021-11-08)
- in API 2.27/3.35 it is now possible to use URL encoding in advanced search queries to make them much easier to handle.
版本 13.39.1 (2021-11-06)
- 提交 1c057修复错误客户请求Under rare circumstances a timeframe request did contain entries outside the defined timeframe. Additional validation has been introduced to prevent this effect. Reported by user guliang
版本 13.39.0 (2021-11-03)
- 提交 02e0b功能客户请求Language support for Portuguese (pt). This includes basic parts of the web site and vulnerability details.
版本 13.38.0 (2021-11-01)
- 提交 49840功能客户请求Enterprise customers are able to create a custom dashboard with individual charts and lists to maintain their professional vulnerability management.
版本 13.37.0 (2021-10-29)
- 提交 ecf36功能External links in vulnerability entries known to be not working anymore are flagged as 404 Not Found.
- 提交 00f47优化In the commit view the column Moderated is renamed to Accepted to indicate the moment a change was approved.
版本 13.36.2 (2021-10-27)
- 提交 6ba60优化Most recent entries on the frontpage are listed faster and with more details right after the creation of a new entry.
版本 13.36.1 (2021-10-26)
- 提交 fe47a优化客户请求Overview pages with an huge number of entries are not limited anymore.
版本 13.36.0 (2021-10-25)
- 提交 9d96d功能客户请求The section exploits shows entries only if an exploit is available for download.
- 提交 7b0b6功能客户请求The exploit prices areseparated from the generic exploit section.
版本 13.35.1 (2021-10-19)
- 提交 fab04优化Optimization of summaries and descriptions in certain languages to better consider the expected vulnerability class of an entry.
版本 13.35.0 (2021-10-09)
- The search feature on the web site and the API supports the purl format used to identify a mostly universal package URL. It is predictive and supports extended structures like the advanced search and searching for CPE strings.
版本 13.34.0 (2021-09-15)
- In API 2.26/3.34 information about bug bounty organization
vulnerability_bugbounty_organization, pricevulnerability_bugbounty_price, and payout datevulnerability_bugbounty_payoutdatewere introduced.
版本 13.33.1 (2021-09-13)
- 提交 4280a优化
版本 13.33.0 (2021-09-10)
- Introduction of the CNA CVSSv3 vector and score. The new fields are accessible via
vulnerability_cvss3_cna_*. They are available on the web site and the latest API 3.33.
版本 13.32.4 (2021-09-07)
- 提交 759f3优化Better handling of long strings of commit values shown in commit histories.
版本 13.32.3 (2021-09-06)
- 提交 3c9ba优化Ranges between versions and up to versions are shown with even higher level of accuracy. This includes titles and summaries as well.
版本 13.32.2 (2021-09-02)
- 提交 d29bb优化Improvement of reliability and performance handling of internal submit queue processing.
版本 13.32.1 (2021-08-31)
- 提交 7ad33优化Hardware upgrade for better memory and processing handling.
版本 13.32.0 (2021-08-27)
- 提交 90877功能客户请求Actor analysis lists determined TTP (Tactics, Techniques, Procedures)
- 提交 90877功能客户请求Actor analysis lists determined IOA (Indicator of Attack)
版本 13.31.0 (2021-08-26)
- 提交 af5a0功能Overview of APT actors highlights new actors and added indicators of compromise
版本 13.30.1 (2021-08-25)
- 提交 a0f19优化Better matching for CPE searches if the official CPE dictionary is not applied properly.
版本 13.30.0 (2021-08-24)
- 提交 758ae功能CTI Analysis provides a wide variety of statistical data regarding actors and activities.
版本 13.29.3 (2021-08-23)
- 提交 2d4fa优化Vulnerability comments in a specific language are only shown if the site is loaded in that language.
版本 13.29.2 (2021-08-22)
版本 13.29.1 (2021-08-21)
- 提交 b2396优化Eliminated all links to SecurityFocus vulnerability database as they discontinued the service. Thank you for all your contributions to the cyber security industry!
- 提交 adec0优化Re-ordered the listing of external resourced within the reference tables.
- 提交 9b464优化New color scheme for yearly comparison of CVSS base and temp vectors.
版本 13.29.0 (2021-08-19)
- 提交 c2a84功能Cyber threat intelligence activity index for software types on the frontpage use machine learning to predict activity index of the future.
- 提交 52c88优化Ranges between versions and up to versions are shown with higher level of accuracy. This includes titles and summaries as well.
版本 13.28.11 (2021-08-18)
- 提交 2f6c2优化Announcement banner is shown only if necessary to provide the maximum of space.
- 提交 abbea优化Time-only statements are now always shown depending on the selected request language.
版本 13.28.10 (2021-08-17)
- 提交 8ae38优化Vulnerability entries hide header tooltip icons as soon as the screen is too small to read them.
版本 13.28.9 (2021-08-16)
- 提交 51f56优化Faster calculation and loading of Threat Intelligence activity index chart on the frontpage.
版本 13.28.8 (2021-08-15)
- 提交 2b166优化Better performance thanks to optimized database index for several different tables.
版本 13.28.7 (2021-08-08)
- 提交 0fc46修复错误Fixed a rare bug on the frontpage where very recent entries are not shown with all available technical details in the title.
版本 13.28.6 (2021-08-07)
- 提交 b4035优化Corrected the right-to-left writing of HTML titles in the Arabic language version of the service.
版本 13.28.5 (2021-08-05)
- 提交 98081优化Optimized the capabilities of searching with CPE strings. Such searches are now much faster and more accurate.
版本 13.28.4 (2021-08-04)
- 提交 b697e优化客户请求Aligned the listing of
entry_changelogto show the field name ofvulnerabilitycenter_lastupdatedatecorrectly. This issue was reported by Fergus Nelson. - 提交 006fc修复错误客户请求Under certain circumstances the calculation of exploit prices was not happening. This has been fixed. This bug was reported by Fergus Nelson.
版本 13.28.3 (2021-08-02)
- 提交 9864d优化External redirects first tested for malicious code are using HTTP status code 301 Moved Permanently instead of 302 Found.
版本 13.28.2 (2021-07-28)
- 提交 8a3ac优化Better layouting of the payment site for all languages.
版本 13.28.1 (2021-07-27)
- 提交 293f1修复错误
版本 13.28.0 (2021-07-26)
- 提交 5f4e7功能客户请求Language support for Arabic (ar). This includes basic parts of the web site and vulnerability details. Right-to-left is implemented whenever required.
版本 13.27.4 (2021-07-24)
- 提交 7430f优化Current CTI scores in overviews are loaded and shown much faster which improves speed of site generation.
- 提交 7430f修复错误Current CTI scores are shown in overviews in any case even if the servers are under heavy load.
- 提交 7430f修复错误Current CTI scores in overviews show the correct timestamp of the last update for the most recent entries in the tooltip of the field.
版本 13.27.3 (2021-07-17)
- 提交 6861b优化Better import and validation handling for APT actor IoC moderation to improve processing and quality.
版本 13.27.2 (2021-07-16)
- 提交 363b6优化Clarification of titles of privilege escalation vulnerabilities. Remote issues that require some form of authentication are shown as Privilege Escalation without mentioning of Remote. Only remote issues without authentication are shown as true Remote Privilege Escalation.
- Fixed a rare bug in API 1.11/2.24/3.31 that created an associative array for
software_versionif the list of versions numbers contained the value0. Thanks to Fergus Nelson for reporting this issue.
版本 13.27.1 (2021-07-15)
- 提交 6e469修复错误Fixed a bug in the web entry view that undefined CVSSv2 vectors were shown with the value X instead of ND.
- Fixed a bug in API 1.10/2.23/3.30 that undefined CVSSv2 vectors were shown with the value X instead of ND.
- 提交 6e469修复错误Fixed a bug in overviews to show tooltips for different CVSS sources of CVSSv3 Meta Temp Scores.
版本 13.27.0 (2021-07-14)
- 提交 cc0e3功能客户请求Cyber threat intelligence events display emerging, current, and upcoming activities by actors.
- 提交 dacc3修复错误Fixed a bug that temp scores of CVSS vectors are not properly stored during initial entry create. This did not affect updated entries.
版本 13.26.4 (2021-07-07)
- 提交 84a8b优化New layout for changelog for better readability.
- 提交 ae57e优化Every commit shown in the changelog contains the commit ID for better reference.
- 提交 2e4f6优化Commits in changelog provide permalink for easier access.
版本 13.26.3 (2021-06-30)
- 提交 ea669优化Reinstated linking to CVEdetails.com as they resumed adding and updating new CVEs.
版本 13.26.2 (2021-06-25)
- The
Content-Typeof all API responses is changed toapplication/json; charset=utf-8. This is not a change in the API itself which is why the version number of the API endpoints is not incremented.
版本 13.26.1 (2021-06-24)
- The official vulnerability API endpoint is located at
/?apiand will redirect faulty URLs and GET parameters. Microsoft Power Apps did not respect this URL structure and changed the query string to a parameter tuple with an empty value. Our API endpoint redirected to the correct URL but Power Apps is not capable of following such HTTP redirects. This issue got fixed as Power Apps is now allowed to access the API endpoint even though the request URL format is not entirely correct.
版本 13.26.0 (2021-06-18)
- In API 2.22/3.29 the field
vulnerability_attckwas made available. It contains the identifier of the associated MITRE ATT&CK technique.
版本 13.25.3 (2021-06-16)
- 提交 0494b优化Performance optimization during stress (e.g. many users, DDoS attacks).
- 提交 9660e优化Changed the algorithm to generate the category values
localandremotein the RSS feeds. Also added the valuepartialforlocalif the attack vector is physical.
版本 13.25.2 (2021-06-15)
- 提交 55449优化Dedicated approval and handling of permissions to use extended CTI features.
- 提交 00931优化The user profile shows details about the purchased CTI license.
- 提交 0552f优化Better performance of generation of user menu for authenticated users.
版本 13.25.1 (2021-06-14)
- 提交 fd133优化More accurate timing information about new IoC (Indicator of Compromise) assigned to an APT actor.
版本 13.25.0 (2021-06-11)
- 提交 ed936功能
版本 13.24.1 (2021-06-09)
版本 13.24.0 (2021-06-08)
- 提交 efc17功能Current APT actor activities are shown on the community activity stream on the frontpage.
版本 13.23.0 (2021-06-07)
- 提交 94a1e功能Dedicated access to CTI features in the item threat of the main menu.
- 提交 fc8b2功能客户请求Access to APT actor information to show activities, interest distribution, indicators of compromise, and external references. The analysis is based on unique activity data ranging back to 2016.
- 提交 fc8b2功能Access to country-specific information to show activities and interest distribution.
版本 13.22.1 (2021-06-04)
- 提交 03370优化Timelines indicating activities show the so called activity index instead of the generic entries label.
- 提交 03359优化Bar charts showing exploit prives use exploit instead of the generic entries label.
版本 13.22.0 (2021-05-31)
- 提交 7dc24功能客户请求Views with threat intelligence focus show APT actors identified during CTI activity analysis.
- 提交 5ada2功能Titles of charts link to drilldown sites whenever possible.
版本 13.21.0 (2021-05-26)
- 提交 edf52功能客户请求Language support for Japanese (jp). This includes basic parts of the web site and vulnerability details.
版本 13.20.4 (2021-05-18)
- 提交 02cd6优化The event of web code improvement shown in the community stream links to the changelog.
- In API 1.9/2.21/3.28 requests by the official Splunk app with a license of less than 10 API credits will throw an
403 Splunk app license expirederror to prevent stressing the service with expired Splunk installations.
版本 13.20.3 (2021-05-12)
- 提交 b4953优化Streamlined entry identifier wording on community activity stream on the frontpage.
版本 13.20.2 (2021-05-04)
- 提交 8d247优化The changelog does contain the version number of the service.
- 提交 5421d优化All major releases are shown in the changelog with a star.
版本 13.20.1 (2021-05-02)
- 提交 b0e75优化Community activities shown on the frontpage do refer to entries with their corresponding VDB ID to increase readability.
版本 13.20.0 (2021-04-29)
- 提交 0d72f功能Frontpage does now show the latest changelog entries of the current day.
- 提交 d6b22优化客户请求Vulnerability entries do now always contain links to available upgrades and patches in the Countermeasure section.
版本 13.19.3 (2021-04-28)
- 提交 6df70优化Performance optimization of the Threat Intelligence chart on the frontpage.
- 提交 d1eb6修复错误客户请求Fixed an issue where count and overview of user commits were not updated. Reported by user misc
版本 13.19.2 (2021-04-26)
- 提交 a9542优化Hardware upgrade for better memory and processing handling.
- In API 3.27 the values of numeric request types is verified and if not acceptable, a
400 Bad requesterror message is shown.
版本 13.19.1 (2021-04-24)
- 提交 3855b优化Optimized load balancing, limiter, and DDoS mitigation to provide more stability for legitimate users.
版本 13.19.0 (2021-04-22)
- 提交 a85dc功能客户请求Submitted items are reviewed by an automated pre-parser to define a priority for processing by the moderation team. This increases priority for most important items and therefore improves processing speed.
版本 13.18.0 (2021-04-20)
- 提交 612a5功能客户请求Language support for Chinese simplified (zh-Hans). This includes basic parts of the web site and vulnerability details.
版本 13.17.1 (2021-04-16)
- 提交 b93ed优化Code optimization of CTI map generation for faster processing with less memory requirements.
版本 13.17.0 (2021-04-15)
- 提交 1ffb5功能客户请求Description of CTI trigger possibilities and threshold handling to create events and reports.
- 提交 881a3优化Footer does now refer to your specific copyright and license depending whether there is a commercial, enterprise, or reseller license established.
版本 13.16.0 (2021-04-12)
- 提交 f7832功能客户请求Some users mistake their mail address as legitimate username to login. In this case a warning message informs the user about the mistake.
版本 13.15.3 (2021-04-08)
- 提交 265e0优化Performance optimization for CTI country analysis (closed beta invite only at the moment). Time range analysis is now incremental which makes report generation much faster (especially for larger ranges).
版本 13.15.2 (2021-03-31)
- 提交 05005优化All listings in the personal profile do contain timestamps to make identification of single items much easier.
- 提交 cddb4优化Completed some of the missing translations for French, Italian, Spanish, Polish, and Swedish.
- 提交 6dc4a优化Improved the handling of time format regarding country-specific definitions. The language en will show A.M. and P.M. only if the browser is also set to en-us. Otherwise the 24 hour format is used. If the language is set to fr and the browser announces fr-fr there will be the French format 12h34. The 24 hour format is also used as default for all languages without a specific definition.
版本 13.15.1 (2021-03-30)
- 提交 d71be修复错误Fixed a bug where some long product names, product listings and titles did not show the product name in its entirety.
- In API 3.26 fixed an issue where queries for
advisory_date_start,entry_timestamp_create_start,entry_timestamp_change_start, andentry_timestamp_all_startdid not work properly if the request value had a trailing whitespace.
版本 13.15.0 (2021-03-29)
- The personal API history does show the execution time for a request to help optimize queries. The column is shown as seconds and sortable.
- 提交 c4d04功能客户请求Added planned features in a roadmap to announce upcoming functionality. The items shown are just suggestions and might change regarding implementation and deployment.
版本 13.14.3 (2021-03-28)
- 提交 1ec36优化客户请求Better description of update handling, especially prioritization of new data for existing entries and update requests by customers.
- 提交 ae8c3优化Optimized the description of different commit moderation approaches. The actions for handling spam and profanity are explained in detail.
版本 13.14.2 (2021-03-26)
- In API 2.20/3.25 the list of multiple items in
software_affectedlistandsoftware_notaffectedlistdo trim trailing whitespaces correctly.
版本 13.14.1 (2021-03-25)
- 提交 a8cdf优化Added a new community rank Guru which requires 5000 points to be reached. Therefore, Grand Master is not the highest rank anymore.
版本 13.14.0 (2021-03-24)
- Introduced API 3.24 with the new request type
entry_timestamp_all_startwhich combines new items fromentry_timestamp_create_startand updated items fromentry_timestamp_change_startin a single stream.
版本 13.13.1 (2021-03-20)
- 提交 26de8优化Optimized speed and memory consumption of queries based on LIKE statements in search queries.
版本 13.13.0 (2021-03-17)
- 提交 1daf9功能客户请求Documentation of the different levels used in the field exploit_exploitability shown on multiple listings on the web site.
版本 13.12.0 (2021-03-10)
- 提交 699d0功能客户请求Made internal changelog public to provide full transparency for our customers. Entries earlier than 2020 just show milestones and not detailed changes.
- 提交 43dfe功能Added link to changelog under support in main menu and in the footer of the page.
- 提交 c0ba0优化Updated internal quality guidance for CVSS fields during creation of new entries based on official Microsoft disclosures.
版本 13.11.3 (2021-03-08)
- 提交 1faf6优化Updated internal quality requirements for
advisory_person_nameandadvisory_person_nicknamefields to prevent inaccurate information during daily update procedure.
版本 13.11.2 (2021-03-04)
- 提交 ecf32优化Optimized limiter to prohibit crawling of view elements by non-commercial users.
- 提交 fa612优化Limiter uses better geolocation data to prevent malicious users from changing IP addresses to slow down detection of abuse.
版本 13.11.1 (2021-03-03)
- 提交 09cef修复错误Fixed a rare German translation issue in a specific sentence of some vulnerability summaries.
版本 13.11.0 (2021-03-01)
- 提交 17052功能Prepared language database for upcoming translations.
- 提交 b3dfc优化Optimized language database for better performance.
版本 13.10.0 (2021-02-28)
- 提交 021d4功能CTI Analysis (closed-beta only) supports search strings for technology-specific research.
版本 13.9.0 (2021-02-22)
- 提交 e7965功能Added user element under search in main menu.
- 提交 7ed21优化Optimized internal CTI event analysis module.
版本 13.8.0 (2021-02-04)
- 提交 5626b功能Added load balancing features to handle performance peaks much better.
- 提交 2efad功能Enabled priority module to provide high-availability for enterprise customers.
版本 13.7.1 (2021-02-03)
- 提交 167ac优化Optimized normalize module to improve quality assurance of vulnerability data management.
版本 13.7.0 (2021-02-01)
- 提交 14106功能Initiated preparation for port of web services to PHP8. First polyfill functions tested.
版本 13.6.1 (2021-01-17)
- 提交 bdc13修复错误Fixed a bug where some new user submissions were shown as rejected even though they were still not processsed yet. This issue was reported by user misc.
版本 13.6.0 (2021-01-16)
- 提交 960f5功能Start of internal testing for CTI attribution module to identify APT group activities as such. Used by CTI team to create CTI alerts and infos for paying customers.
版本 13.5.4 (2021-01-09)
- Changed
entry_timestamp_deltabehavior from7200to120to keep commit grouping much smaller. Entries updated within a short period of time will pushed into the update stream to provide the most actual data to API users.
版本 13.5.3 (2021-01-04)
- 提交 96326优化Performance improvement of search engine. Early dissection will speed up some specific search requests.
- 提交 96326优化Performance improvement of monoblock engine. Compilation of entries is a bit faster under certain circumstances.
版本 13.5.2 (2020-12-23)
- 提交 db3d5优化Unordered lists in regular content to not a a maximum heigh and auto scrollbars anymore.
版本 13.5.1 (2020-12-15)
- 提交 c227f优化Performance optimization of monoblock data processing.
版本 13.5.0 (2020-12-09)
- 提交 93707功能Added a stylesheet to display "time ago" for stream items.
版本 13.4.0 (2020-12-08)
- In API 3.23 added request type
cursorinitto determine ideal initial cursor position for ongoing vulnerability stream (e.g. Splunk).
版本 13.3.0 (2020-12-04)
- 提交 3abdf功能Introduced information regarding ATT&CK. The fields are currently auto-generated and not part of the monoblock.
- In API 2.19/3.22 added field
source_cve_cnawhich contains a string of the CVE Numbering Authority that assigned the CVE. - 提交 118c6修复错误Corrected a display bug for tooltips of CVSS fields on certain overview pages.
版本 13.2.1 (2020-12-03)
- 提交 6c403优化Optimized signup flood protection to prevent malicious users from auto-generating community accounts.
版本 13.2.0 (2020-11-26)
- 提交 0cd93功能Added new import feature for vulnerability moderators to handle custom entries and large batches of submissions.
- 提交 a4571功能The differences in a diff view are highlighted by color to provide better visibility.
版本 13.1.2 (2020-11-13)
- 提交 7983d优化Performance optimization of monoblock data processing.
版本 13.1.1 (2020-11-06)
- 提交 c87a7优化Migration to new hardware.
版本 13.1.0 (2020-11-02)
- 提交 f6cc6功能Paying customers do now see a summary on top of every vulnerability entry to identify the most important aspects of the vulnerability.
版本 13.0.1 (2020-10-16)
- 提交 68339优化Optimized some indexes within the database to improve performance.
版本 13.0.0 (2020-10-09)
- 提交 8b201功能Introduced new monoblock structure to provide more possibilities like commits, commit histories, etc.
版本 12.26.1 (2020-09-26)
- 提交 b11f4优化Better, faster, and more accurate calculation of CTI interest scores.
版本 12.26.0 (2020-09-10)
- 提交 b015c功能The live symbol is pulsating.
- 提交 2d270优化The CSS code for the custom worldmap is deleted to stramline the CSS file.
版本 12.25.1 (2020-08-10)
- 提交 b3264优化Optimization of browser rendering speed by adding
font-display: swapto the CSS style sheet.
版本 12.25.0 (2020-05-16)
- 提交 f6e38功能Added an optimization banner to inform users about upcoming changes and features.
版本 12.24.0 (2020-05-13)
- 提交 58be3功能New horizontal table style to make some upcoming views better readable.
版本 12.23.5 (2020-05-01)
- 提交 e655c优化Upgrading to an extended server cluster for better performance.
版本 12.23.4 (2020-04-17)
- In API 3.21 the field
entry_timestamp_changeis now always present even if the entry was just created and never updated yet. In this case it will contain the same value likeentry_timestamp_create. User of the official VulDB Splunk App are advised to update to the latest release.
版本 12.23.3 (2020-03-04)
- 提交 328c8优化CVEdetails.com stopped updating their database. We keep linking old CVEs to their sites but do not do so for newer entries.
版本 12.23.2 (2020-01-10)
- 提交 ce27f优化Added validation styles for numbers, dates, emails, and urls for forms. These detect missing or wrong data before submitting a form.
版本 12.23.1 (2019-11-19)
- 提交 7d12f优化Decreased the font-size of labes from 90% to 75% for better readability.
- 提交 c8999优化Improved style and layout of tooltips for better readability.
版本 12.23.0 (2019-11-15)
- 提交 5c4b5功能Load new pages with extended loading time show progress bar spinner at top of the site.
版本 12.22.0 (2019-11-09)
- 提交 c4f43功能Added logos of vendors/products in entries if available.
- 提交 46f6e优化Stramlined CSS style sheet regarding mini buttons.
版本 12.21.0 (2019-11-08)
- 提交 4f1af功能Added tooltips for easier access to more information.
- 提交 63433优化Added fade effect for mini buttons for a better user experience.
版本 12.20.1 (2019-11-06)
- 提交 01634优化Stramlined box elements and columns.
版本 12.20.0 (2019-10-31)
- In API 3.20 added field
vulnerability_namewhich contains a string or array a popular names of the vulnerability (e.g. Shellshock, Poodle).
版本 12.19.0 (2019-09-13)
- In API 3.19 added field family
entry_details_*which containentry_details_affected,entry_details_vulnerability,entry_details_impact,entry_details_exploit,entry_details_countermeasures, andentry_details_sources.
版本 12.18.0 (2019-08-31)
- In API 3.18 added field
entry_replacesto display duplicates which have been replaced by this entry.
版本 12.17.0 (2019-08-26)
- In API 3.17 added fields
vulnerability_cvss3_basevector_vuldbandvulnerability_cvss3_tempvector_vuldbto display full VulDB CVSSv3 vectors easily.
版本 12.16.0 (2019-08-22)
- 提交 3ef93功能Added experimental world map to highlight CTI activities.
- 提交 5054e优化Improved the layout of checkboxes on web forms.
版本 12.15.0 (2019-07-06)
- 提交 e5808功能客户请求VulDB administrators are able to provide DB dumps for faster onboarding of enterprise customers.
版本 12.14.0 (2019-07-01)
- 提交 2fcc6功能客户请求Introduction of software type categories available in the field
software_type.
版本 12.13.3 (2019-06-04)
- In API 3.16 fixed value of field
advisory_identifier, disabled safeguard mechanism to prevent inconsistency in result count.
版本 12.13.2 (2019-06-01)
- 提交 26f6b优化Updated the Data Privacy Notice to clarifying wording and added details about payment processing.
版本 12.13.1 (2019-05-27)
- 提交 6e92e优化Added loading bar on top of the page to indicate the loading of large pages.
版本 12.13.0 (2019-05-24)
- 提交 bcb85功能Submitting forms locks input fields and shows progress indicator.
版本 12.12.0 (2019-05-17)
版本 12.11.0 (2019-05-08)
- In API 3.14 requesting dedicated CVSS fields supports the official response format (e.g.
vulnerability_cvss3_vuldb_basescore) and the legacy format (e.g.vulnerability_cvss3_basescore_vuldb). The legacy format will be dropped in a future major release of the API.
版本 12.10.1 (2019-04-24)
- 提交 1dc8a优化Improved the layout of the search menu item for better accessibility.
- 提交 bb0d0优化The status boxes of live views are now pulsating if there is currently some activity.
版本 12.10.0 (2019-04-17)
- In API 1.8/2.18/3.13 added field
software_cpe23which introduces full CPE 2.3 support whereassoftware_cpeis still providing CPE 2.2 data.
版本 12.9.0 (2019-04-15)
- 提交 3bfed功能Added a detailed clendar view for years an months.
- 提交 faa07优化Streamlined the row behavior.
版本 12.8.2 (2019-04-10)
- 提交 35519优化Hovering a clickable symbol in an overview will now be indicated by the cursor as pointer.
- 提交 cdf7b优化Improved the layout of buttons inside text boxes (e.g. searches).
版本 12.8.1 (2019-04-01)
- 提交 27ca6优化Centered the purchase table for better accessibility.
版本 12.8.0 (2019-03-29)
版本 12.7.0 (2019-03-21)
版本 12.6.0 (2019-03-15)
- 提交 d3ac7功能客户请求Added multiple levels to the main menu to provide better accessibility to the variety of features.
- 提交 35f3e功能Added the possibility for buttons within textboxes (e.g. searches).
版本 12.5.0 (2019-03-08)
- 提交 1ae53功能Vulnerability entries do now show the exploit prices with a graphical element.
- 提交 74f44优化Improved the display of symbols in overviews.
版本 12.4.0 (2019-03-04)
- In API 1.7/2.17/3.12 added fields
entry_locked_statusandentry_locked_reasonto inform about entries undergoing update and review processes (they might change soon).
版本 12.3.0 (2019-03-01)
- 提交 81d15功能Introduction of the C3BM Index (CVSSv3 Base Meta Index) based on CVSS data of multiple sources.
版本 12.2.0 (2019-02-28)
- 提交 231a4功能Large tables might be shown with a striped layout to improve readability.
- 提交 16d23优化Improved the layout of buttons in the user submenu.
版本 12.1.0 (2019-02-25)
- 提交 9c6de功能客户请求Symbols in overviews are clickable to provide a drilldown feature. This is true for CVSS, exploit prices, exploitability, and countermeasures.
- 提交 92aac优化Header text is now a graphical element.
版本 12.0.4 (2019-02-23)
- 提交 82de5优化Slightly changed the colorization of remedation and exploitability levels.
版本 12.0.3 (2019-02-22)
- 提交 55aa5优化Changed the pointer behavior of certain table headers from grab to regular pointer.
版本 12.0.2 (2019-02-21)
版本 12.0.1 (2019-02-20)
- In API 1.6/2.16/3.11 improved speed, reliability and accuracy of
updatesqueries. - 提交 d6d17优化Improved the width behavior of user menu buttons.
- 提交 a25da优化Links in overviews are clickable within the whole cell and not just on the text itself.
版本 12.0.0 (2019-02-18)
- 提交 b9184功能客户请求New overviews introduced with a lot of information items.
- 提交 65679功能Added support for dynamic behavior for long tables with more than six columns.
- 提交 4c719优化Streamlined the behavior of content and article.
- 提交 4c719优化Streamlined the behavior of tables.
- 提交 4c719优化Streamlined the behavior of buttons.
版本 11.27.0 (2019-02-15)
- 提交 c278e功能Added the posibility to fade-in some elements for a better user experience.
- 提交 07fdc优化Improved the width behavior of user menu buttons.
版本 11.26.0 (2019-02-08)
- 提交 7324e功能Added buzzboxes to show statistical data about the project.
- 提交 3b784优化Optimized the margin behavior of columns.
版本 11.25.0 (2019-02-06)
- In API 3.10 added request parameter
offsetto set a starting point for results (pagination).
版本 11.24.1 (2019-02-01)
- 提交 5d94f优化Reached the 10.000th community user. Congratulations!
版本 11.24.0 (2019-01-18)
- In API 3.9 added field
software_type.
版本 11.23.0 (2019-01-11)
版本 11.22.1 (2019-01-08)
- In API 1.5/2.15/3.7 field
software_componentis not returning multiple fields anymore to prevent parsing errors.
版本 11.22.0 (2019-01-01)
- 提交 772cf功能
版本 11.21.0 (2018-12-13)
- In API 1.4/2.14/3.6 requesting details without unlocked archive access will warn in field
entry_warningabout limitation.
版本 11.20.0 (2018-10-28)
- 提交 d4c8e功能Large quantities of statistical views are created by Cronjobs to improve performance.
版本 11.19.0 (2018-10-01)
- 提交 3b088功能客户请求Launch of Video Tutorial Series on YouTube to introduce new users to the capabilities of the service.
版本 11.18.1 (2018-09-20)
- 提交 c4d5c优化Changed the cursor behavior for votes from copy to default.
- 提交 c4d5c优化Changed the cursor behavior of ribbons to default.
版本 11.18.0 (2018-09-18)
- 提交 afb23功能Added custom ribbons to popup with interesting details if needed.
- 提交 8ee7c优化Improved the behavior of items which have a fade-in effect.
版本 11.17.0 (2018-09-01)
- 提交 8dfe7功能客户请求Release of official Splunk App which is available on Splunkbase for free. Commercial or enterprise license is recommended.
版本 11.16.0 (2018-08-31)
- 提交 c00a7功能客户请求Introduction of CPE lists in entry views to indicate the affected products.
版本 11.15.0 (2018-08-06)
- In API 3.5 support for the queries
advisory_date_start,entry_timestamp_create_start,entry_timestamp_change_start. - 提交 576a2优化客户请求Disabled the gradients in symbols.
版本 11.14.4 (2018-08-04)
- 提交 48a03优化Fixed an issue with the visibility of long date symbols.
版本 11.14.3 (2018-08-03)
- 提交 7d763优化Improvement of gradient in symbols.
- 提交 856af优化Adding support for other font families in symbols.
版本 11.14.2 (2018-08-02)
- 提交 b0000优化Introduction of gradients in symbols.
版本 11.14.1 (2018-08-01)
- 提交 7ef2d优化Introduction of antialiasing of fonts for better readability on high-resolution displays.
版本 11.14.0 (2018-07-31)
- 提交 dc2ae功能Added support for stream symbols shown on overviews.
版本 11.13.1 (2018-07-22)
- 提交 b675b优化Improved the layout of mini buttons.
版本 11.13.0 (2018-07-12)
- 提交 b1af8功能客户请求Added dynamic layouts for tables to hide certain columns under specific conditions. This improves the mobile view a lot.
版本 11.12.1 (2018-07-10)
- 提交 d5a10优化Optimized the margin of header elements.
版本 11.12.0 (2018-07-06)
- 提交 bc316功能Introduction of the user menu for authenticated users. This menu shows additional details and provides access to more features.
版本 11.11.3 (2018-07-05)
- 提交 be3b7优化A new table wrapper optimizes how tables are shown on different screen sizes.
版本 11.11.2 (2018-07-04)
- 提交 c4570优化Streamlining of cvss lists.
版本 11.11.1 (2018-06-29)
- 提交 7409e优化Streamlining of mini button for unlock announcements.
版本 11.11.0 (2018-06-28)
- 提交 b09c3功能Introduction of column views, as used in the documentation section of the service.
版本 11.10.1 (2018-06-12)
- In API 2.13/3.4 fixed enforcement of
querylimitfordetails=0queries. This issue was reported by user portal.
版本 11.10.0 (2018-06-11)
版本 11.9.4 (2018-06-10)
- 提交 2ed12优化Streamlining of mini buttons.
版本 11.9.3 (2018-06-08)
- 提交 88f01优化Mini buttons do now animate on hover.
版本 11.9.2 (2018-06-06)
- In API 1.3/2.12/3.2 fixed wrong values in
response_remaining(calculation was correct, value shown was wrong). This issue was reported by user portal.
版本 11.9.1 (2018-06-04)
版本 11.9.0 (2018-05-18)
版本 11.8.0 (2018-05-15)
- In API 2.10 added
vulnerability_risk(also shown in non-detail responses).
版本 11.7.1 (2018-05-14)
- In API 2.9 added detailed error messages regarding API key problems (
missing,wrong,unknown,valid). - In API 2.9 enterprise customers have performance priority over free users.
版本 11.7.0 (2018-05-08)
- In API 2.8 the field
entry_titledoes not show CVE anymore. - In API 2.8 added fields
vulnerability_timeline,countermeasure_reactiondays,countermeasure_0daydays,countermeasure_exposuredays, andcountermeasure_exploitdelaydays.
版本 11.6.0 (2018-05-07)
- In API 2.7 added support for request type
topsoftware.
版本 11.5.0 (2018-05-01)
- 提交 c968e功能Made Data Privacy Notice available to comply with european GDRP requirements.
版本 11.4.0 (2018-04-01)
- 提交 3bdb9功能Release of Alexa Skill to make vulnerability management possible with the AI by Amazon. More information.
版本 11.3.0 (2018-03-22)
- 提交 b90e6功能客户请求Working on a proof-of-concept to use Alexa as a gateway to work with vulnerability data.
版本 11.2.3 (2018-02-17)
- 提交 f3590优化Introduction of a container element to have more flexibility with layout positioning on the web frontend.
版本 11.2.2 (2018-02-01)
- 提交 51a81优化Introduction of a sub-title on the site title to better describe the service.
版本 11.2.1 (2018-01-29)
- 提交 2638b优化Official approval of VulDB by Norton Site Checker. The service is rated as safe.
版本 11.2.0 (2018-01-22)
- Upgrade to API 2.0. Response contains three elements (request, response, result) instead just the results.
版本 11.1.1 (2017-09-23)
- 提交 aebb3优化Improvement of the container margins to have a better layout.
版本 11.1.0 (2017-09-16)
- 提交 05eb4功能Partnership with Titanium Team of scipag to establish Cyber Threat Intelligence services (CTI). More information.
版本 11.0.1 (2017-06-02)
- 提交 45634优化Optimization of automated exploit price calculation to gain more accuracy.
版本 11.0.0 (2017-06-01)
- 提交 a862d功能Introduction of dynamic graphs shown in different views.
版本 10.12.2 (2017-05-19)
- 提交 a7bd0优化Optimization of the official Twitter feed.
版本 10.12.1 (2017-05-16)
- 提交 93c6e修复错误Fixed a display issue on the frontpage. Under certain circumstances new items were not shown as bold.
版本 10.12.0 (2017-04-28)
- 提交 7a1d8功能Added dynamic charts in the results overview of web searches.
版本 10.11.0 (2017-04-21)
- 提交 e7f52功能Added dynamic charts of all kind of overview pages.
版本 10.10.0 (2017-04-10)
- 提交 97ed5功能Created an About page which explains the history of our vulnerability service.
版本 10.9.0 (2017-04-01)
- 提交 3d204功能Added the 100.000th entry to the database. Check the stats for more details. Congratulations!
版本 10.8.0 (2017-03-22)
- 提交 1f1f6功能客户请求Vulnerability entries flagged as false-positive do now highlight this fact on their pages (title and introduction).
版本 10.7.0 (2017-03-21)
- 提交 2eb19功能Introduced data for OVAL and IAVM. Completed all existing entries with appropriate data.
版本 10.6.0 (2017-02-23)
- 提交 f7af4功能客户请求Supporting CVSS scores from multiple sources (VulDB, vendor, researcher, NVD).
版本 10.5.1 (2017-02-13)
- 提交 915e2优化Optimized the indexing of the database to improve search performance.
版本 10.5.0 (2017-02-01)
- 提交 a1e82功能Public availability of community edition. Create your account for free.
版本 10.4.1 (2017-01-20)
- 提交 ed89a优化Optimized performance by using specific features and configuration settings in PHP7.
版本 10.4.0 (2017-01-18)
- 提交 2eb99功能Added an advanced search on the web site to improve specific search capabilities.
版本 10.3.0 (2017-01-01)
- 提交 766b4功能Start open beta of community edition.
版本 10.2.0 (2016-12-20)
- 提交 afa9d功能Introduced Bug of the Day on the front page. One of the more serious or interesting issues of the recent days is shown every day.
版本 10.1.1 (2016-12-19)
- 提交 e0724优化Redesign of the frontpage with a slick layout and better data accessibility.
版本 10.1.0 (2016-12-16)
- 提交 17b00功能Implemented a module to detect loss of data integrity on the service.
版本 10.0.0 (2016-12-01)
- Introduction of public API to provide vulnerability for automated processing.
版本 9.19.1 (2016-11-08)
- 提交 1bf65优化Optimization of database table structures to gain more flexibility and performance.
版本 9.19.0 (2016-11-07)
- 提交 41c1a功能Implementation of Content Security Policy (CSP) to improve web security of the service.
版本 9.18.0 (2016-11-02)
- 提交 2c835功能It is now possible to upvote comments for vulnerability entries. Upvoted comments are shown on top of the list.
版本 9.17.0 (2016-11-01)
- 提交 01762功能Start closed beta of community edition.
版本 9.16.0 (2016-10-26)
- 提交 464dc功能Editing a section of a vulnerability will automatically jump to the correct section of the edit form.
版本 9.15.0 (2016-10-25)
- 提交 cbba3功能Existing vulnerability entries can now be edited immediately by members of the moderation team.
版本 9.14.0 (2016-10-14)
- 提交 83203功能Enhanced the existing cache module to allow caching of database queries and results.
版本 9.13.0 (2016-10-11)
- 提交 786cb功能Every user account has now a profile.
- 提交 7868e功能Registered users are able to tweak their own configuration of the service.
版本 9.12.0 (2016-10-10)
- 提交 b9c2d功能Registered users are able to see history of vulnerability entries they have been viewing earlier.
版本 9.11.0 (2016-10-07)
- 提交 7da47功能Registered users are able to gain community points with activities to get a higher ranking on the site.
版本 9.10.0 (2016-10-06)
- 提交 f618b功能Users are able to submit new entries which will be queued and processed by the vulnerability moderation team.
版本 9.9.0 (2016-10-05)
- 提交 da14a功能Users accessing resources which require an authentication receive a proper error message.
版本 9.8.0 (2016-10-04)
- 提交 2f00f功能Users are able to reset their password via email (password recovery).
版本 9.7.0 (2016-10-03)
- 提交 5a1b1功能客户请求Logins with a new device or from an unknown source will inform the account holder about the potentially suspicious login. New devices are stored and shown in the personal device management overview.
版本 9.6.0 (2016-06-24)
- 提交 688a5功能Added a limiter to prevent malicious users from scraping our data without authorization.
版本 9.5.0 (2016-06-22)
版本 9.4.0 (2016-10-01)
- 提交 0aa68功能Introduction of exploit price calculations to provide a better tool to prioritize exposed vulnerabilies.
版本 9.3.1 (2016-07-05)
- 提交 4aa37优化Performance optimization for all web views.
版本 9.3.0 (2016-06-30)
- 提交 4aecf功能Some statistical data is now stored in a centralized table which allows them to be shown on multiple places without new calculations every time.
版本 9.2.0 (2016-05-02)
- 提交 3fee0功能Support for data fields of Tenable Nessus.
版本 9.1.1 (2016-04-29)
版本 9.1.0 (2016-04-27)
版本 9.0.0 (2016-04-14)
- 提交 b3559优化Complete rewrite of the search engine to provide better matches and optimized performance.
版本 8.1.2 (2016-04-06)
- 提交 3ce21优化Optimization of HTML code to make pages smaller and faster to download and render.
版本 8.1.1 (2016-04-04)
- 提交 3b609修复错误Fixed a bug or slow indexes which improved the performance of vulnerability display a lot.
版本 8.1.0 (2016-04-01)
- 提交 7bc0a功能Introduction of new summaries and descriptions with more data enrichment.
- 提交 56864优化Performance optimization.
版本 8.0.0 (2016-03-14)
- 提交 5e4e5功能Introducing Chart.js to generate dynamic charts.
版本 7.1.3 (2016-03-11)
- 提交 a0b92优化Establish VulDB as independent service to gain more flexibility.
版本 7.1.2 (2016-02-23)
- 提交 76b37优化Migration to new hardware.
版本 7.1.1 (2016-02-17)
- 提交 07bfb优化Renaming the Twitter handle from scipvulbot to "vuldb"https://twitter.com/vuldb.
版本 7.1.0 (2016-01-19)
- 提交 55bf1功能Enhancing statistical overview to provide previews and forecasts based in historical data.
- 提交 72424功能Creating new text for different pages and sub-pages.
版本 7.0.5 (2015-12-01)
- 提交 ea951优化客户请求Adding caching modules to improve site performance. Caching is possible per site and file.
版本 7.0.4 (2015-11-20)
- 提交 58def优化客户请求Increasing update frequency of existing entries.
版本 7.0.3 (2015-08-19)
- 提交 2ddb7修复错误Corrected the listing of multiple authors of a vulnerability.
版本 7.0.2 (2015-08-07)
- 提交 3b6e7优化More performance optimization of database queries.
版本 7.0.1 (2015-08-03)
- 提交 b1554优化Performance optimization of database queries.
版本 7.0.0 (2015-07-10)
- 提交 243a7功能Redesign of modular frontpage with the introduction of Top 5 lists.
版本 6.31.0 (2015-07-07)
- 提交 44e99功能Adding Qualys data to vulnerability entries.
- 提交 fe3d0功能Adding SecurityCenter data to vulnerability entries.
版本 6.30.0 (2015-03-09)
- 提交 e19c1功能Introduction of new queue for vulnerability processing by mod team.
版本 6.29.3 (2015-02-25)
- 提交 8695f优化Optimization of all X-Force data import and display.
版本 6.29.2 (2015-02-03)
- 提交 3453e优化Optimizaton of summaries and descriptions of vulnerability entries.
版本 6.29.1 (2015-01-08)
- 提交 7ac76优化Optimization of version descriptions of vulnerability entries.
版本 6.29.0 (2014-06-24)
- 提交 0b232功能客户请求Approaching backlog of old entries before 2003 with vulnerabilities ranging back to 1988. More information.
版本 6.28.0 (2014-05-26)
- 提交 0f72a功能Introduction of the "see also" hint which lists entries with are connected or similar.
版本 6.27.0 (2014-04-17)
- 提交 35f6f功能Adding a field to declare the date of the introduction of a vulnerability.
版本 6.26.1 (2014-03-27)
- 提交 3efc3优化Optimization of queuing of new vulnerabilities to better prioritize processing.
版本 6.26.0 (2014-03-20)
版本 6.25.12 (2014-03-14)
- 提交 bc799优化Database index optimization.
版本 6.25.11 (2014-03-07)
- 提交 d0dda优化Optimizing collision detection during the processing of new entries.
版本 6.25.10 (2014-02-10)
- 提交 ce076优化Optimizing summaries regarding sources of vulnerability entries.
版本 6.25.9 (2014-01-29)
- 提交 03d37优化Added helper for vulnerability moderation team to determine arguments of attacks faster and more reliable.
版本 6.25.8 (2014-01-28)
- 提交 53a64优化Optimizing summaries regarding code samples.
版本 6.25.7 (2014-01-23)
- 提交 61b0d优化Optimizing helper for vulnerability moderation team to complete new and existing entries with additional data. This increases data quality drastically.
版本 6.25.6 (2014-01-14)
- 提交 a17f4修复错误Fixed a bug where sometimes summaries and descriptions did contain spaces twice instead of once. This was just a problem in the HTML source code and not on the rendered web site.
版本 6.25.5 (2014-01-09)
- 提交 1cd31优化Added helper for vulnerability moderation team to determine keywords which shall be used within the title of a vulnerability entry.
版本 6.25.4 (2013-12-19)
- 提交 12a4f优化Optimizing the autocomplete feature to update new entries with historical data.
版本 6.25.3 (2013-11-06)
- 提交 1434c优化Optimizing the pre-parser to handle import of new vulnerability entries.
版本 6.25.2 (2013-10-22)
- 提交 a52cf优化Changing the algorithm to calculate the current threat level.
版本 6.25.1 (2013-10-21)
- 提交 921d7优化Changing the algorithm to calculate the risk rating of vulnerability entries.
版本 6.25.0 (2013-10-18)
- 提交 b4283功能Adding the support for OpenVAS data.
版本 6.24.0 (2013-10-17)
- 提交 01303功能Introducing the threat level to show an indicator for the current vulnerability landscape.
版本 6.23.0 (2013-10-03)
- 提交 e8e8f功能Adding the possibility to add a custom word to the title to provide more details on first sight.
版本 6.22.0 (2013-10-01)
- 提交 f8c1e功能Establishing a background updater which handles entries which need to be updated without interfering with the manual work of the moderation team.
- 提交 5abb3优化Enhancement of the review procedure of CVE entries pushed by MITRE to improve processing and quality.
版本 6.21.0 (2013-09-13)
- 提交 9f09f功能Collaboration with vFeed to exchange and enrich vulnerability data. More information.
版本 6.20.1 (2013-09-12)
- 提交 088ac优化Completing all existing entries with Secunia data.
版本 6.20.0 (2013-09-11)
- 提交 2b409功能Introducing risk maps to provide easy comparability between risk ratings of different sources.
版本 6.19.0 (2013-09-10)
- 提交 8966c功能Introducing support for Secunia data as a source.
- 提交 8966c功能Introducing support for IBM X-Force data as a source.
版本 6.18.0 (2013-08-23)
- 提交 3881d功能Added the 10.000th entry about Google Chrome to the database. Check the stats for more details. Congratulations! More information.
版本 6.17.0 (2013-08-12)
- 提交 d8b39功能客户请求
版本 6.16.0 (2013-08-09)
- 提交 40986功能Adding support for a wide variety of new data fields.
版本 6.15.2 (2013-07-05)
- 提交 4dffe优化Enhancement of the review procedure of Nessus entries.
版本 6.15.1 (2013-06-28)
- 提交 4b14b优化Optimizing the plausability checks during vulnerability moderation to prevent contradicting and wrong data.
版本 6.15.0 (2013-06-19)
版本 6.14.1 (2013-06-11)
- 提交 0b61c优化Updating large quantities of vulnerabilities is now improved thanks to incremental updates.
版本 6.14.0 (2013-06-03)
- 提交 207db功能Added support for screenshots per entries to illustrate attacks and countermeasures. More information.
- 提交 207db功能Added support to embed external videos per entries to illustrate attacks and countermeasures. Videos can be hosted at YouTube and Vimeo. More information.
版本 6.13.0 (2013-05-31)
- 提交 22b2b功能Added the capability to add quotes from advisories to enrich entries.
- 提交 22b2b功能Added the capability to add links to videos for a vulnerability.
版本 6.12.0 (2013-04-29)
- 提交 57d8e功能Introduction of CVSS maps. More information.
版本 6.11.0 (2013-04-11)
- 提交 6a9d2功能Added the capability to list multiple different products in an affected list. This is done additionally to the main product that is affected by a vulnerability.
版本 6.10.2 (2013-04-04)
- 提交 239ac优化Enhanced input validation mechanism during vulnerability management to prevent mistakes regarding vendor/product definitions.
版本 6.10.1 (2013-03-28)
- 提交 497c0优化Optimization of logging and tracking of queued items processed by the moderation team.
版本 6.10.0 (2013-03-19)
- 提交 c46f6功能Added input validation mechanisms during vulnerability management.
- 提交 bc987优化Optimized input validation mechanisms during vulnerability management.
版本 6.9.1 (2013-01-09)
- 提交 b0410修复错误Fixed an issue in the database. This did only affect moderation of vulnerabilities and was not reflected on the user-side of the service.
版本 6.9.0 (2012-12-21)
- 提交 79a9b功能Added a feature to normalize terms between different vulnerability entries.
版本 6.8.1 (2012-11-26)
- 提交 d0a20优化Prepared the support for Milw0rm data for entries with an ID up to 50000.
版本 6.8.0 (2012-10-31)
- 提交 d83e7功能客户请求Added language support for French. More information.
版本 6.7.0 (2012-10-15)
- 提交 5a191功能客户请求Added language support for English. More information.
版本 6.6.0 (2012-10-01)
- 提交 61e91功能客户请求Added language support for Spanish. More information.
- 提交 58566修复错误Fixed an upload problem of new entries into the database.
版本 6.5.0 (2012-09-24)
- 提交 a75e7功能客户请求Added language support for Swedish. More information.
版本 6.4.0 (2012-07-04)
- 提交 a681e功能Migrating all available data from NASLDB.
版本 6.3.0 (2012-06-18)
- 提交 98ea9功能客户请求Added language support for Italian. More information.
- 提交 7b83d修复错误Fixed a problem in the German module responsible to handle umlauts.
版本 6.2.2 (2012-06-05)
- 提交 895ea优化Optimizing the autocomplete feature to update new entries with historical data.
版本 6.2.1 (2012-04-10)
- 提交 3a3bb修复错误Fixed a problem during the display of archive data.
版本 6.2.0 (2012-03-13)
- 提交 e00e9功能Added support for better linking to external sources.
版本 6.1.1 (2012-03-09)
版本 6.1.0 (2012-03-08)
- 提交 c17b6功能Added the calculation of the exposure time which measures the time of the disclosure and the mitigation possibilities of a vulnerability.
- 提交 23aa8优化Reviewed all available data of OSVDB.
版本 6.0.0 (2012-03-06)
- 提交 934a4优化Optimization of summaries and descriptions.
- 提交 3484c功能Added support to show images of vendors/products.
- 提交 3484c功能Added support for Google dorks to find issues very quickly.
版本 5.2.2 (2012-03-05)
- 提交 90cf5优化Performance optimization.
版本 5.2.1 (2012-03-02)
- 提交 e27ac优化Performance optimization.
版本 5.2.0 (2012-02-15)
- 提交 d6183功能Added web import feature for vulnerability moderators to handle new entries based on web resources.
版本 5.1.0 (2012-01-06)
- 提交 2e4ed功能Added single import feature for vulnerability moderators to handle single entries outside the regular queueing.
版本 5.0.0 (2011-02-22)
- 提交 04086功能Establishing new database backend with much more possibilities.
版本 4.10.2 (2010-12-01)
- 提交 8b4df优化Move to more powerful hardware due to increase in access.
版本 4.10.1 (2010-07-30)
- 提交 787d2优化Backporting all information for reference maps of existing entries.
版本 4.10.0 (2010-06-10)
- 提交 57677功能Adding Alert Info on web site to inform visitors about latest critical issue.
- 提交 80bfa功能Delivering ads for non-paying and unauthenticated users.
- 提交 acc6f优化Optimizing database structure for more flexibility and performance.
版本 4.9.0 (2010-03-08)
- 提交 dbea0功能Introduction of Reference Maps for better linking of vulnerabilities and sources. More information.
版本 4.8.1 (2010-02-10)
- 提交 e7405优化Make more statistical data available with better flexibility.
版本 4.8.0 (2010-02-08)
- 提交 47351功能Adding the alert info on top of the site to show the most recent vulnerability with the highest emergency rating.
版本 4.7.2 (2020-02-05)
- 提交 1a52b优化Improvement of VulDB alert system.
版本 4.7.1 (2010-02-02)
- 提交 aa53e优化Improved summary details per entries. More information.
- 提交 bd3fd优化Performance optimization for all RSS feeds. More information.
版本 4.7.0 (2011-01-11)
- 提交 90de3功能客户请求Added VulDB Alert to inform customers about issues applicable for them.
版本 4.6.0 (2009-12-16)
- 提交 9b5dc功能Partnership with OSVDB to cross-link vulnerability entries. More information.
版本 4.5.0 (2009-10-27)
- 提交 3dd4e功能Introduction of statistical overview. More information.
- 提交 3dd4e功能Introduction of product overview. More information.
版本 4.4.0 (2009-09-03)
- 提交 399e8功能Start of the Twitter bot vuldb (formerly known as scipvulbot). More information.
版本 4.3.0 (2009-08-25)
- 提交 61ad7功能Completing existing entries with most actual data. This includes but is not limited to CVE, Secunia, SecurityTracker, vendor, and confirmation details. More information.
版本 4.2.0 (2009-08-20)
- 提交 411d3功能Adding new data fields to enrich vulnerability entries.
版本 4.1.0 (2009-08-01)
版本 4.0.1 (2009-06-26)
- 提交 b47f5优化Optimization of existing RSS feeds by adding summaries and categories. More information.
版本 4.0.0 (2009-06-23)
- 提交 c26c1优化Complete re-write of the site in PHP. More information.
版本 3.5.0 (2006-07-01)
- 提交 42fff功能Emergency-SMS notification service becomes available in Germany. More information.
版本 3.4.0 (2004-05-19)
- 提交 a1c50功能Adding a lot of new data fields to enrich vulnerability entries. More information.
版本 3.3.0 (2004-01-01)
- 提交 a2ec5功能Introduction of Emergency-SMS notification service.
版本 3.2.0 (2003-12-19)
- 提交 37bc3功能Introduction of RSS feed. More information.
版本 3.1.0 (2003-11-18)
- 提交 8a989功能Initial release of scip_Alerter for desktop notifications. More information.
版本 3.0.0 (2003-03-01)
- 提交 d28ca功能Service is completely re-written in Perl and uses a dedicated backend for vulnerability moderation to gain more flexibility.
- 提交 94f12优化Bugbase is re-branded as scip VulnDB and hosted on www.scip.ch.
版本 2.0.0 (2002-09-01)
- 提交 51e87优化Changed from static web site to dynamic database (with the kind support of DukeCS).