Mission and Overview
NVD is the U.S. government repository of standards based vulnerability management data. This data enables automation of vulnerability management, security measurement, and compliance (e.g. FISMA).
Resource Status
NVD contains:

Last updated: 1/22/2017 5:13:51 PM

CVE Publication rate: 20.47

Email List

NVD provides four mailing lists to the public. For information and subscription instructions please visit NVD Mailing Lists

Workload Index
Vulnerability Workload Index: 10.04
About Us
NVD is a product of the NIST Computer Security Division and is sponsored by the Department of Homeland Security's National Cyber Security Division. It supports the U.S. government multi-agency (OSD, DHS, NSA, DISA, and NIST) Information Security Automation Program. It is the U.S. government content repository for the Security Content Automation Protocol (SCAP).

National Checklist Program Repository

 

The National Checklist Program (NCP), defined by the NIST SP 800-70 Rev. 3, is the U.S. government repository of publicly available security checklists (or benchmarks) that provide detailed low level guidance on setting the security configuration of operating systems and applications. NCP is migrating its repository of checklists to conform to the Security Content Automation Protocol (SCAP). SCAP enables standards based security tools to automatically perform configuration checking using NCP checklists. For more information relating to the NCP please visit the information page or the glossary of terms.

Search for Checklist using the fields below. The keyword search will search across the name, and summary.


There are 410 matching records. Displaying matches 181 through 200.
Tier Target Product Product Category Authority Last Modified Date Checklist Name (Version) Resources
II Microsoft SharePoint Server 2010 Server Defense Information Systems Agency 12/04/2015 Microsoft SharePoint 2010 STIG (Version 1, Release 7)
II Microsoft SharePoint Server 2010 Server National Security Agency 02/19/2014 SharePoint 2010 (2010)
II Microsoft Sharepoint Server 2013 Server Defense Information Systems Agency 06/07/2016 Sharepoint 2013 (Version 1, Release 3)
II* Microsoft Skype for Business 2016 Office Suite Defense Information Systems Agency 01/17/2017 Microsoft Skype for Business 2016 STIG (Version 1, Release 1)
II Microsoft SQL Server 2012 Database Management System Defense Information Systems Agency 12/12/2016 SQL Server 2012 STIG (Version 1, Release 12)
II Microsoft SQL Server 2014 Database Management System Defense Information Systems Agency 12/12/2016 SQL Server 2014 Instance STIG (Version 1, Release 3)
II* Microsoft Visio 2016 Office Suite Defense Information Systems Agency 01/17/2017 Microsoft Visio 2016 STIG (Version 1, Release 1)
II Microsoft Windows 10 Mobile Operating System Defense Information Systems Agency 12/12/2016 Windows 10 Mobile STIG (Ver 1, Rel 2)
II* Microsoft Windows 2000 Operating System NIST, Computer Security Division 09/12/2014 NIST SP 800-43 (Update R1.2.3)
II Microsoft Windows Vista Firewall
Microsoft Windows Vista
Microsoft Windows Server 2008
Firewall
Operating System
Defense Information Systems Agency 06/03/2015 Windows Firewall STIG (Version 1, Release 2)
II Microsoft Windows Server 2012/2012 R2 Defense Information Systems Agency 09/12/2016 Windows Server 2012 DNS STIG (Version 1, Release 4)
II Microsoft Windows XP Pro SP2
Symantec Antivirus
Operating System
Antivirus Software
Defense Information Systems Agency 01/15/2015 General Desktop Application STIG (Version 4, Release 4)
II Microsoft Word 2007 Desktop Application Defense Information Systems Agency 12/30/2015 Word 2007 STIG (Version 4, Release 14)
II* Microsoft Word 2016 Office Suite Defense Information Systems Agency 01/17/2017 Microsoft Word 2016 STIG (Version 1, Release 1)
II Mobile Iron Core v9.x Mobile Solution Defense Information Systems Agency 09/12/2016 MobileIron Core v9.x STIG (Version1, Release 1)
II Mozilla Firefox Web Browser Defense Information Systems Agency 12/12/2016 Mozilla Firefox STIG (Version 4, Release 16)
II Novell SUSE Enterprise Linux Server 11 Operating System Defense Information Systems Agency 12/12/2016 SUSE Linux Enterprise Server (SLES) v11 for System z STIG (Version 1, Release 8)
II Oracle Database 10g
Oracle Database 10g 10.1
Oracle Database 10g 10.2
Database Management System Defense Information Systems Agency 01/15/2015 Oracle 10 STIG (Version 8 Release 1.11)
II Oracle Database 11g
Oracle Database 11g 11.1
Oracle Database 11g 11.2
Database Management System Defense Information Systems Agency 09/12/2016 Oracle 11 STIG (Version 8 Release 18)
II Oracle Database 11g 11.2 Database Management System Defense Information Systems Agency 12/12/2016 Oracle 11.2g Database STIG (Version 1, Release 9)
* This checklist is still undergoing review for inclusion into the NCP at this tier ranking.