Mission and Overview
NVD is the U.S. government repository of standards based vulnerability management data. This data enables automation of vulnerability management, security measurement, and compliance (e.g. FISMA).
Resource Status
NVD contains:
10286
OVAL Queries
117168
CPE Names

Last updated: 2/13/2017 6:29:48 PM

CVE Publication rate: 32.03

Email List

NVD provides four mailing lists to the public. For information and subscription instructions please visit NVD Mailing Lists

Workload Index
Vulnerability Workload Index: 11.59
About Us
NVD is a product of the NIST Computer Security Division and is sponsored by the Department of Homeland Security's National Cyber Security Division. It supports the U.S. government multi-agency (OSD, DHS, NSA, DISA, and NIST) Information Security Automation Program. It is the U.S. government content repository for the Security Content Automation Protocol (SCAP).

National Checklist Program Repository

 

The National Checklist Program (NCP), defined by the NIST SP 800-70 Rev. 3, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications. NCP is migrating its repository of checklists to conform to the Security Content Automation Protocol (SCAP). SCAP enables standards based security tools to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.

Search for Checklist using the fields below. The keyword search will search across the name, and summary.


There are 424 matching records. Displaying matches 1 through 20.
1 2 3 4 5 6 7 8 9 10 > >> 
Tier Target Product Product Category Authority Last Modified Date Checklist Name (Version) Resources
IV Microsoft Internet Explorer 7 Web Browser USGCB/TIS 01/25/2016 USGCB Internet Explorer 7 (2.1.x.1)
IV Microsoft Internet Explorer 8 Web Browser USGCB/TIS 04/28/2015 USGCB Internet Explorer 8 (1.3.x.1)
IV Microsoft Windows 7
Microsoft Windows 7 x86 (32-bit)
Microsoft Windows 7 x64 (64-bit) 		Operating System USGCB/TIS 01/25/2016 USGCB Windows 7 (2.0.x.1)
IV Microsoft Windows 7
Microsoft Windows 7 32-bit (X86)
Microsoft Windows 7 64-bit (X64) 		Operating System USGCB/TIS 04/28/2015 USGCB Windows 7 Firewall (1.3.x.1)
IV Microsoft Windows Vista Operating System USGCB/TIS 04/28/2015 USGCB Windows Vista (3.0.x.1)
IV Microsoft Windows Vista Operating System USGCB/TIS 04/28/2015 USGCB Windows Vista Firewall (2.1.x.1)
IV Microsoft Windows XP Pro Service Pack 3
Microsoft Windows XP Pro Service Pack 2 		Operating System USGCB/TIS 04/28/2015 USGCB Windows XP Firewall (2.1.x.1)
IV Microsoft Windows XP Pro SP2
Microsoft Windows XP Service Pack 3 		Operating System USGCB/TIS 04/28/2015 USGCB Windows XP (3.0.x.1)
IV Red Hat Enterprise Linux 5 Operating System USGCB/TIS 04/30/2015 USGCB Red Hat Enterprise Linux (RHEL) 5 Desktop (1.2.5.0)
III* Access 2013 Desktop Application Defense Information Systems Agency 02/08/2017 Microsoft Access 2013 STIG (Version 1, Release 4)
III Adobe Acrobat Reader Desktop Application National Security Agency 09/05/2014 Adobe Acrobat Reader X Secure Configuration Benchmark (10.1.1)
III* HP HP-UX 11.31 Operating System Defense Information Systems Agency 02/08/2017 HP-UX 11.31 STIG (Version 1, Release 13)
III IBM AIX 5.3 Operating System Defense Information Systems Agency 05/28/2014 AIX 5.3 STIG (Version 1, Release 2)
III* IBM AIX 6.1 Operating System Defense Information Systems Agency 02/08/2017 AIX 6.1 STIG (Version 1, Release 10)
III IBM Tivoli Identity Manager 4.6 Identity Management National Security Agency
MITRE 		07/11/2011 IBM Tivoli Identity Manager Security Guide (4.6)
III Microsoft .NET Framework 4.0 Application Server Defense Information Systems Agency 06/07/2016 Microsoft .NET Framework 4 (Version 1, Release 3)
III Microsoft Outlook 2007
Microsoft Word 2007
Microsoft Office 2007
Microsoft Access 2007
Microsoft Excel 2007
Microsoft Infopath 2007
Microsoft PowerPoint 2007
Microsoft Visio 2007 		Desktop Application
Office Suite 		Defense Information Systems Agency 01/15/2015 Microsoft Office 2007 STIG (Version 4, Release 1)
III Microsoft Office 2010
Microsoft Excel 2010
Microsoft InfoPath 2010
Microsoft OneNote 2010
Microsoft Outlook 2010
Microsoft PowerPoint 2010
Microsoft Project 2010
Microsoft Publisher 2010
Microsoft Word 2010
Microsoft Access 2010 		Office Suite
Desktop Application 		Defense Information Systems Agency 12/12/2016 Microsoft Office 2010 STIG (Version 1, Release 10)
III Microsoft Access 2010 Desktop Application Defense Information Systems Agency 11/02/2016 Access 2010 STIG (Version 1, Release 9)
III Microsoft Excel 2010 Desktop Application Defense Information Systems Agency 07/21/2015 Excel 2010 STIG (Version 4, Release 9)
* This checklist is still undergoing review for inclusion into the NCP at this tier ranking.
1 2 3 4 5 6 7 8 9 10 > >>