Data License

Original BDVDB data is available under [EDIT: license, for example CC BY 4.0]. When you reuse it, please credit “Bangladesh Vulnerability Database (BDVDB)” and link to this site.

Data from upstream sources stays subject to the terms of those sources, listed below.

• CVE Program (MITRE)
• National Vulnerability Database (NVD)
• CISA Known Exploited Vulnerabilities
• FIRST EPSS

This product uses data from the NVD API but is not endorsed or certified by the NVD.

CVE is a registered trademark of The MITRE Corporation.

Each record states its origin in a source note on the record page and in the source field of its JSON file. Where a source does not provide a value, BDVDB leaves the field empty.

Some fields are derived mechanically from the source data:

• Title comes from the record. If it has none, it is assembled from the vendor, product and weakness category, or from the start of the description.
• Impact comes from the record, or is a sentence built from the CVSS metrics.
• Fixed version is taken from the version ranges in the CVE record, where it has them.
• History comes from the published and updated dates in the CVE List.

Vulnerability records come from the sources above. While the sample-data notice is showing, researcher, team and sponsor names in sample entries are fictional.

The website source code is licensed separately under [EDIT: code license].