The Cathedral and the Bazaar of Software Vulnerabilities: From the NVD to the CNAs

Siqi Zhang, Fabio Massacci, Mengyuan Zhang

For decades, the National Vulnerability Database (NVD), the "Cathedral", has been the reference source for vulnerability information for downstream research and industry tasks, e.g…