← Back to home

Sources and attributions

VardianSec decides which vulnerabilities affect each program using public sources. It does not resell that raw data: what it offers are its decisions and alerts. Thanks to the people who maintain these sources.

CVE Program

CVE Records published by the CVE Program (cvelistV5), used under its terms of use. CVE® is a registered trademark of The MITRE Corporation.

NVD (NIST)

This product uses the NVD API but is not endorsed or certified by the NVD.

CISA KEV

CISA's Known Exploited Vulnerabilities catalog, public data from the U.S. Government.

OSV.dev

Its package lists have been used in testing. Each OSV source keeps its own license (mostly CC-BY 4.0 and CC0; Ubuntu advisories, CC-BY-SA 4.0).

None of these organizations endorses or certifies VardianSec.