Study traces CVE-linked vulnerable code copied across projects
Using SQVDT on NVD data, the authors report copy-paste reuse of high-severity patterns inside and between projects.
Stories per day · 30 days
2 RSS
Relatedai-generated1android1apache1certificate-authority1code-reuse1cve-enrichment1cvss1cwe1ghsa1linux1mailing-list1open-source1oss-security1phi-31pki1sqvdt1vulnerability-reports1vulnerability-triage1
10 stories, newest first · one card per story
Stories tagged #nvd
NVD lists CVE-2026-111943 as a compromised intermediate CA
The captured NVD page is only site chrome, so vendor, versions, severity, and impact are not in the text.
1
Re: Proposal: Add separate oss-security-vulnerability-reports mailing list (for AI vulnpocalypse)
oss-security contributors propose digests or a separate list to manage a flood of AI vulnerability reports.
Fine-tuned Phi-3.5-mini predicts CVSS and CWE from CVE text
It matched official vectors on 48.8% of 36,325 usable 2024 CVEs after training only on 2022 and 2023.
CISA Charts New "Quality Era" for Global CVE Program
CISA outlined a quality framework for the CVE program as 2026 disclosures approach a projected 96,000.
CISA outlines improvement plan for CVE program
CISA published a white paper to improve CVE quality as disclosure volume surges.
Towards Scalable and Cost-Efficient Vulnerability Detection: A Study on Automatic Query Generation
A study finds LLM-synthesized CodeQL queries improve average F1-score by 82% over baseline queries, offering scalable vulnerability detection versus direct LLM scanning.
An Empirical Analysis of ReDoS Vulnerabilities and ReDoS Detection Tools
Study of NVD data finds ReDoS vulnerabilities growing more prevalent and more likely to be exploited, while five detection tools disagree substantially.
NIST Seeks Public Input on AI-Ready NVD Modernization
NIST is seeking public comment on modernizing the National Vulnerability Database to support AI-powered vulnerability research.
NIST wants to overhaul its vulnerability database for the AI age
NIST issued a Federal Register RFI seeking public input on overhauling the National Vulnerability Database for AI-scale, machine-consumable security data.
1