CVE (Common Vulnerabilities and Exposures)

Common Vulnerabilities and Exposures is the public catalog of disclosed software vulnerabilities. The CVE Program is overseen by the CVE Board, with MITRE as Secretariat and sponsorship from CISA, and individual CVE Records are published by CVE Numbering Authorities (CNAs). Each CVE Record identifies a specific flaw in specific product versions (for example, CVE-2024-3094 is the XZ Utils backdoor). CVE Records are commonly mapped to CWEs to indicate the underlying weakness class.