What is the name of the standardized list of common software vulnerabilities and exposures?

• A. Common Vulnerabilities and Exposures (CVE)
• B. National Vulnerability Database (NVD)
• C. Open Source Vulnerability Database (OSVDB)
• D. Common Weakness Enumeration (CWE)

Answer: (C)

The standardized list of common software vulnerabilities and exposures is CVE, the Common Vulnerabilities and Exposures. This system assigns a unique identifier to each publicly known vulnerability, allowing researchers and defenders to reference the same issue consistently. MITRE oversees the assignment of CVE IDs, and the National Vulnerability Database (NVD) provides enriched data for these CVEs, including severity scores and metadata.

Open Source Vulnerability Database (OSVDB) was another vulnerability database, but it is no longer active, so it isn’t the official standard. Common Weakness Enumeration (CWE) is a separate catalog of software weaknesses or root causes that can lead to vulnerabilities, not the list of actual vulnerabilities themselves.