National Institute of Standards and Technology Provides Free Database of CVE's

For all you techies out there wondering about the next worm that hasn't been reported by the national press, the NIST has created a free database of Common Vulnerabilities and Exposures (CVE's).  NIST describes the page this way:

NVD is a comprehensive cyber security vulnerability database that integrates all publicly available U.S. Government vulnerability resources and provides references to industry resources. It is based on and synchronized with the CVE vulnerability naming standard.

The database content is not for the squeamish, or the easily bored, but can be highly valuable as a tool to discover vulnerabilities in software we use on a daily basis.  According to statistics, approximately 8 vulnerabilities are published daily.  Yikes!

Mark Giangrande, DePaul Law