• 0xD@infosec.pub
    link
    fedilink
    English
    arrow-up
    8
    ·
    edit-2
    1 day ago

    OMG I’ve been motherfucking looking for this EUVD for the past weeks and only found references and info pages, but never the actual fucking database!! Finally I know it exists.

    Why is it hidden? Why does it have that braindead URL? And why, for the love of god, does it have a separate numbering scheme?!

    • JohnEdwa@sopuli.xyz
      link
      fedilink
      English
      arrow-up
      5
      ·
      edit-2
      13 hours ago

      Why does it have that braindead URL?

      euvd.enisa.europa.eu -> European Union Vulnerability Database, run by the European Union Agency for Cybersecurity (from the previous name, European Network and Information Security Agency ENISA), hosted on the official website of the european union, europa.eu.

      And why, for the love of god, does it have a separate numbering scheme?!

      Because they want the ability to reference other vulnerability sources - like JVN - and not just CVE:

      The EUVD service builds upon the CVE system and vulnerabilities in the scope of the CVE numbering service receive a CVE. In addition, the EUVD data aggregates and enriches the vulnerability information and lists an EUVD ID on top of the CVE when new vulnerability entries are created. To allow further cross referencing, the CVE identifier and additional vulnerability identifiers are listed when available. -https://euvd.enisa.europa.eu/faq

      And because, you know, standards.

    • SinningStromgald@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      15 hours ago

      I can only assume the stories about CVE have pushed it to the top but I just search “European vulnerability database” and first link went to the database.