Policies on Bangladesh Vulnerability Database

Disclosure Policy

Mon, 01 Jan 0001 00:00:00 +0000

BDVDB practices coordinated disclosure. Our aim is to get vulnerabilities fixed and to give the public accurate information, while protecting the people who report them.

Scope

This policy covers vulnerabilities in software, firmware and online services that affect users in Bangladesh, as well as vulnerabilities in the BDVDB website and data. [EDIT: list anything you do not accept.]

Privacy Policy

Mon, 01 Jan 0001 00:00:00 +0000

BDVDB is a static website. It has no user accounts and no database, and it sets no advertising or tracking cookies.

What we collect

Browsing the site. Our hosting provider may keep standard server logs, such as IP addresses and requested pages. [EDIT: name the host and link to its privacy policy.]

Terms of Use

Mon, 01 Jan 0001 00:00:00 +0000

By using this website you agree to these terms. [EDIT: have a lawyer review these terms before launch.]

Information only

BDVDB is provided for information and defensive security purposes. Records can be incomplete, out of date or wrong. Check important details against vendor advisories before acting on them.

Data License

Mon, 01 Jan 0001 00:00:00 +0000

BDVDB data

Original BDVDB data is available under [EDIT: license, for example CC BY 4.0]. When you reuse it, please credit “Bangladesh Vulnerability Database (BDVDB)” and link to this site.

Data from upstream sources stays subject to the terms of those sources, listed below.

Security and PGP

Mon, 01 Jan 0001 00:00:00 +0000

Reporting a problem with this site

To report a vulnerability in BDVDB itself, use the report form or the contact in our security.txt file.

Our public key

Reports are encrypted with the key published at pgp-key.asc.

Fingerprint: [EDIT: full key fingerprint]
Valid until: [EDIT: expiry date]
Key rotation: [EDIT: how and when a replacement key is announced]

Compare the fingerprint with one published elsewhere, such as the project repository, before trusting a downloaded key.

ID and CNA Policy

Mon, 01 Jan 0001 00:00:00 +0000

BDVDB identifiers

Every entry has an identifier in the form BDVDB-YYYY-NNNN, where YYYY is the year the ID was assigned and NNNN is a sequence number. An ID is never reused. If an entry turns out to be invalid or a duplicate, it stays in place and is marked as such.

About and Contact

Mon, 01 Jan 0001 00:00:00 +0000

About BDVDB

The Bangladesh Vulnerability Database is an open reference of software vulnerabilities that affect Bangladesh. It brings together public vulnerability data and locally reported issues, so that organizations can find and fix problems faster.

BDVDB is run by [EDIT: organization or group name], and is based in [EDIT: city, Bangladesh].