Which term stands for the publicly available list of vulnerability identifiers used in advisories?

• A. Common Vulnerabilities and Exposures (CVE)
• B. National Vulnerability Database (NVD)
• C. Common Weakness Enumeration (CWE)
• D. Open Source Vulnerability Database (OSVDB)

Answer: (A)

CVE, or Common Vulnerabilities and Exposures, is the publicly accessible list of vulnerability identifiers used in advisories. Each disclosed vulnerability receives a unique CVE ID (for example, CVE-2023-XXXXX), which lets researchers, vendors, and security teams reference the same issue across reports, patches, and risk assessments. The CVE list itself is a naming standard and catalog maintained publicly so advisories and databases can interoperate smoothly.

The National Vulnerability Database (NVD) is a separate repository that hosts CVE records and adds scoring and metadata, but it’s not the list of identifiers itself. The Common Weakness Enumeration (CWE) catalogs types of software weaknesses (like buffer overflows) rather than individual vulnerabilities. OSVDB was another vulnerability database that is no longer active.