V-Searches uses the NVD database to inform the information security community of:
- A clear explanation of CVE Metrics
- The source reporting the vulnerability
- The status of NIST’s analysis
- A breakdown of CVSS v3.1 exploitability and impact score
- Attack vector, attack complexity, privileges required, user interaction, scope, confidentiality impact, integrity impact, availability impact
- An expanded list of reference URLs
Weekly reports contain:
- Cyber vulnerabilities with Critical severity from the NIST published in the last 14 days with links to remediation
- CVEs published in the last 30 days that are now in the Cybersecurity & Infrastructure Security Agency’s (CISA) Known Exploited Vulnerabilities Catalog (KEV)
- CVEs published this year and last year that have the highest Exploit Prediction Scoring System (EPSS) scores and percentiles