GCVE: Global CVE Allocation System
Enhancing Flexibility, Scalability, Autonomy, and Resilience in Vulnerability
Identification
Slides presented at a CSIRT meeting are now online.
Slides (PDF) https://gcve.eu/presentation/gcve-eu-paris-2025-06-16.pdf
Toreon is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities discovered by or reported to Toreon that are not in another CNA’s scope
https://cve.org/Media/News/item/news/2025/06/17/Toreon-Added-as-CNA
#cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity
Minutes from the CVE Board teleconference meeting on May 28 are now available
https://cve.mitre.org/community/board/meeting_summaries/28_May_2025.pdf
#cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity
New on the #CVE Blog:
Videos from “CVE/FIRST VulnCon 2025” Now Available
https://medium.com/@cve_program/videos-from-cve-first-vulncon-2025-now-available-ae43e3c20329
#vulnerabilitymanagement #vulnerability #informationsecurity #cybersecurity
854 CVE Records + severity scores when available in CISA’s Vulnerability Summary bulletin for the week of June 2, 2025
https://www.cisa.gov/news-events/bulletins/sb25-160
#CVE #CVEID #CVSS #CWE #Vulnerability #VulnerabilityManagement #HSSEDI #CISA
New on the #CVE Blog:
“CVE List Keyword Search on CVE.ORG Website Updated”
Additional expanded search scenarios now include: searching the nominal CVE ID Year (e.g., “CVE-2025”) returns all CVEs reserved in the CVE-2025 year series; hyphenated words; exact version strings (e.g., “6.17.4”) ; exact IPv4 strings; filenames; URLs; CWE IDs; CAPEC IDs; combinations of any of the above; & more
https://medium.com/@cve_program/cve-list-keyword-search-on-cve-org-website-updated-2729451c3b61
#vulnerabilitymanagement #vulnerability #informationsecurity #cybersecurity
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code locally.
https://vulnerability.circl.lu/vuln/cve-2025-32717#sightings
#vulnerabilitymanagement #vulnerability #infosec #cybersecurity
CVE-2025-32717
New on the #CVE Blog:
“Jen Ellis of NextJenSecurity Joins CVE Board”
https://medium.com/@cve_program/jen-ellis-of-nextjensecurity-joins-cve-board-6c9ff4eded4c
#vulnerabilityManagement #vulnerability #informationsecurity #infosec #cybersecurity
OpenJS Foundation is now a CVE Numbering Authority (CNA) assigning CVE IDs for all projects listed at https://openjsf.org/projects
https://cve.org/Media/News/item/news/2025/06/10/OpenJS-Foundation-Added-as-CNA
#cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity #opensource
Profisee Group, Inc. is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities found in software developed by Profisee only
https://cve.org/Media/News/item/news/2025/06/10/Profisee-Added-as-CNA
#cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity
367 CVE Records + severity scores when available in CISA’s Vulnerability Summary bulletin for the week of May 26, 2025
https://cisa.gov/news-events/bulletins/sb25-153
#CVE #CVEID #CVSS #CWE #Vulnerability #VulnerabilityManagement #HSSEDI #CISA
Minutes from the CVE Board teleconference meeting on May 14 are now available
https://cve.mitre.org/community/board/meeting_summaries/14_May_2025.pdf
#cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity
In this edition of "Improving Security Across Nations with FIRST," we spotlight Nick Leali, FIRST CVSS SIG Co-Chair and PSIRT Incident Manager at Cisco.
He shares how FIRST drives global vulnerability management standards:
CVSS evolution - Leading development of CVSS version 4, used by vendors, national databases and platforms like GitHub worldwide
Complementary frameworks - How CVSS works alongside EPSS and SSVC to prioritize vulnerability responses
Automation-ready standards - Making vulnerability management machine-readable to handle the dramatically faster pace of discovery and disclosure
Watch to discover how Nick's 20+ years in cybersecurity and leadership in global standards development helps organizations communicate vulnerability risks more effectively:
Jen Ellis of NextJenSecurity has joined the CVE Board https://www.cve.org/Media/News/item/news/2025/06/03/New-CVE-Board-Member-NextJenSecurity
#cve #vulnerability #vulnerabilitymanagement #informationsecurity #cybersecurity
Teradyne Robotics is now a CVE Numbering Authority (CNA) assigning CVE IDs for all products released by Teradyne Robotics subsidiaries, Universal Robots (UR) and Mobile Industrial Robots (MiR), including both actively supported and end-of-life/end-of-service products, as well as vulnerabilities in third-party software identified by Teradyne Robotics that are outside the scope of another CNA
https://www.cve.org/Media/News/item/news/2025/06/03/Teradyne-Robotics-Added-as-CNA
#cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity
New on the #CVE Blog:
“CVE Program Report for Quarter 1 Calendar Year (Q1 CY) 2025”
https://medium.com/@cve_program/cve-program-report-for-quarter-1-calendar-year-q1-cy-2025-0e84776ee5c5
#VulnerabilityManagement #Vulnerability #InformationSecurity #Cybersecurity
883 CVE Records + severity scores when available in CISA’s Vulnerability Summary bulletin for the week of May 19, 2025
https://www.cisa.gov/news-events/bulletins/sb25-147
#CVE #CVEID #CVSS #CWE #Vulnerability #VulnerabilityManagement #HSSEDI #CISA
All of the videos from “CVE/FIRST VulnCon 2025” are now available on YouTube!
https://www.youtube.com/playlist?list=PLWfD9RQVdJ6cm3kSvz-Sk87CawSzn5Ep0
#CVE #FIRST #VulnerabilityManagement #Vulnerability #Cybersecurity #InformationSecurity
Harborist is now a CVE Numbering Authority (CNA) assigning CVE IDs for all projects listed under https://www.npmjs.com/~ljharb
https://cve.org/Media/News/item/news/2025/05/28/Harborist-Added-as-CNA
#cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity #opensource
