Which database is the U.S. government repository that provides CVE details and vulnerability scores?

• A. Common Vulnerabilities and Exposures (CVE)
• B. National Vulnerability Database (NVD)
• C. Open Source Vulnerability Database (OSVDB)
• D. Common Weakness Enumeration (CWE)

Answer: (B)

The National Vulnerability Database is the U.S. government repository for CVE details and vulnerability scores. It hosts CVE entries—the identifiers and descriptions assigned by MITRE—and augments them with CVSS-based severity scores, impact metrics, and related metadata. This combination makes it the authoritative source for both the vulnerability descriptions and their standardized risk ratings in a government-supported, publicly accessible database. The CVE itself is just the naming system for vulnerabilities, not a scoring database. OSVDB was a separate project that is no longer maintained, and CWE classifies software weaknesses rather than individual vulnerabilities or scores.