Data Sources & Licenses
CVENow aggregates and presents vulnerability information from public sources to make it easier to search and receive notifications. Source records can change over time; consult the original record for the authoritative and most current information.
National Vulnerability Database (NVD)
CVENow retrieves vulnerability records and enrichment data using the NVD CVE API 2.0, maintained by the U.S. National Institute of Standards and Technology (NIST). Depending on the record, displayed fields may include the CVE identifier, description, publication and modification timestamps, vulnerability status, severity, and CVSS score/version.
NVD CVE API documentation · Search NVD records · NVD website
Independence notice: CVENow is an independent project. It is not affiliated with, endorsed by, or certified by NIST or the National Vulnerability Database (NVD). Use the NVD record as the source of truth for information maintained by NVD.
CVE Program / The MITRE Corporation
CVE identifiers and CVE records are part of the Common Vulnerabilities and Exposures (CVE) Program. CVENow is independent and is not operated, sponsored, or endorsed by MITRE or the CVE Program.
Copyright © 1999–2026, The MITRE Corporation. CVE is a trademark and the CVE logo is a registered trademark of The MITRE Corporation.
The CVE Program's terms permit reproduction and distribution of CVE material subject to conditions, including preserving MITRE's copyright designation and the applicable licence text. See the complete CVE Program Terms of Use.
CVE Usage — MITRE licence notice
MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy.
Source: CVE Program — Terms of Use. The full terms, including disclaimers, are incorporated by reference; review them before redistributing CVE content.
Common Vulnerability Scoring System (CVSS)
CVSS is owned and managed by FIRST.Org, Inc. (FIRST), which licenses it for use subject to attribution and publication conditions. Where CVSS scores are shown, they should be understood in the context of the relevant CVSS version and source record. FIRST states that publishers of CVSS data should provide both the score and the scoring vector so readers can understand how the score was derived.
CVENow does not independently assess the risk of a vulnerability merely by displaying a source score. A score is a technical severity metric, not a complete risk assessment for a specific environment.
FIRST CVSS FAQ and attribution guidance · CVSS specification
Accuracy, updates, and limitations
- Records may be newly published, modified, awaiting enrichment, rejected, or otherwise revised by the source organization.
- CVENow synchronizes data periodically; a displayed record may lag behind the source.
- Descriptions, scores, severity labels, and source metadata are provided for informational purposes and may be incomplete or change without notice.
- Always follow links to the original source when making security, operational, compliance, or remediation decisions.
- CVENow and its source data are provided without a guarantee that the displayed information is complete, error-free, or suitable for a particular environment.
Other trademarks and third-party material
Product names, company names, vulnerability identifiers, and other third-party marks remain the property of their respective owners. Where a record includes vendor references or other source links, those sources may have their own terms and notices. CVENow does not claim ownership of third-party materials merely by displaying or linking to them.
If you believe an attribution is missing or a record is displayed incorrectly, include the CVE ID and source URL when reporting the issue. Do not include passwords or verification tokens.