A Database of Open Source Vulnerabilities

OSVDB stands for Open Source Vulnerability Database, and that's exactly what it is. You can find it at http://www.osvdb.org .

The front page has the ten most recent stable entries (and a link to an RSS feed with the same information) with pointers to browse the vulnerability data (alphabetically) or search by keyword. A search for LDAP found about 30 results, with results listing the ID number, title, disclosure date (some from January 1, 1970 -- were those the ones listed when the database became available?) and status.

Click on the ID number for additional information, which includes an overview of what the vulnerability is, what the solution is (a patch, upgrade, etc.), and external references. Vulnerabilities marked as "stable" have more information available than new vulnerabilities.

Posted to Computing-Open Source | TrackBack