How Reliable Are NVD CWE Labels? A Large-Scale Semantic Audit with Seclometry

CWE labels in the National Vulnerability Database NVD are widely treated as ground truth for vulnerability search, scanner evaluation, benchmark construction, learning-based security tools, and vulnerability prioritization. Yet their reliability has not been systematically measured at scale,...

cve-research-agent

CVE Research Agent A CVE research agent built on Claude Code...

EUVD-2006-5999

Malware in sbrugna...

EUVD-2021-16074

Malware in sbrugna...

EUVD-2013-1905

Malware in sbrugna...

EUVD-2021-20996

Malware in sbrugna...

EUVD-2018-12716

Malware in sbrugna...

EUVD-2021-20995

Malware in sbrugna...

EUVD-2022-5563

Malicious code in bioql PyPI...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

CVE-2022-31190

DSpace open source software is a repository application which provides durable access to digital resources. dspace-xmlui is a UI component for DSpace. In affected versions metadata on a withdrawn Item is exposed via the XMLUI "mets.xml" object, as long as you know the handle/URL of the withdrawn...

CVE-2025-46554 XWiki missing authorization when accessing the wiki level attachments list and metadata via REST API

XWiki is a generic wiki platform. In versions starting from 1.8.1 to before 14.10.22, from 15.0-rc-1 to before 15.10.12, from 16.0.0-rc-1 to before 16.4.3, and from 16.5.0-rc-1 to before 16.7.0, anyone can access the metadata of any attachment in the wiki using the wiki attachment REST endpoint...

Unauthorized Metadata Access

Mattermost is vulnerable to unauthorized metadata access. The vulnerability is due to improper validation and a failure to check if a file has been deleted when creating a bookmark, allowing an attacker to create bookmarks for deleted files and access their metadata...

CVE-2025-21424

creationtimestamp| type| source ---|---|--- 2025-03-03 10:29:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6169 2025-03-03 13:52:21+00:00| seen| https://t.me/cvedetector/19330 2025-03-04 10:46:33+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114103759186491533 2025-08-18...

PT-2024-23795

Name of the Vulnerable Software and Affected Versions Xapi affected versions not specified Description Xapi contains functionality to backup and restore metadata about Virtual Machines and Storage Repositories SRs. The metadata itself is stored in a Virtual Disk Image VDI inside an SR. A maliciou...

CVE-2023-52782

In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Track xmit submission to PTP WQ after populating metadata map Ensure the skb is available in metadata mapping to skbs before tracking the metadata index for detecting undelivered CQEs. If the metadata index is put in t...

PT-2024-34804 · Google Cloud · Looker

Name of the Vulnerable Software and Affected Versions: Looker versions affected versions not specified Description: An Insecure Direct Object Reference in Google Cloud's Looker allowed metadata exposure across authenticated Looker users sharing the same LookML model. Recommendations: At the momen...

CVE-2024-28153

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...

Stored XSS vulnerability in dependency-check-jenkins-plugin

dependency-check-jenkins-plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports on the Jenkins UI. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control workspace contents or CVE metadata...

CVE-2024-28153: Improper Neutralization of Input During Web Page Generation

Jenkins OWASP Dependency-Check Plugin 5.4.5 and earlier does not escape vulnerability metadata from Dependency-Check reports, resulting in a stored cross-site scripting XSS vulnerability...