NVD: National Vulnerability Database in Cybersecurity

Vulnerability Management
ByDecipherU Editorial
How is it pronounced?
en-vee-dee

NVD stands for National Vulnerability Database. The National Vulnerability Database is the U.S. government's repository of vulnerability data built on the CVE catalog. NVD enriches each CVE with CVSS severity scores, affected product listings (CPE), and weakness classifications (CWE).

How NVD Is Used in Cybersecurity

Security engineers query the NVD to research CVE details, affected software versions, and recommended mitigations during vulnerability triage. Threat intelligence analysts monitor NVD feeds for newly published vulnerabilities affecting their organization's technology stack. SCA tools pull data from the NVD to match application dependencies against known vulnerabilities.

Cybersecurity Roles That Work with NVD

Related Cybersecurity Acronyms

Frequently asked questions

What does NVD stand for?

NVD stands for National Vulnerability Database. The National Vulnerability Database is the U.S. government's repository of vulnerability data built on the CVE catalog. NVD enriches each CVE with CVSS severity scores, affected product listings (CPE), and weakness classifications (CWE).

What is NVD used for in cybersecurity?

Security engineers query the NVD to research CVE details, affected software versions, and recommended mitigations during vulnerability triage. Threat intelligence analysts monitor NVD feeds for newly published vulnerabilities affecting their organization's technology stack. SCA tools pull data from the NVD to match application dependencies against known vulnerabilities.

Sources

  1. NIST NVD
Last verified: April 2026?Report an inaccuracy