Open source vulnerability database opens

An open source initiative to categorise and catalogue the vulnerabilities in both software and hardware has opened for public access.

The Open Source Vulnerability Database (OSVDB) has been collecting information on vulnerabilities from security professionals for the past two years and now plans to distribute it freely and update it with at least one new vulnerablity every day.

"Getting reliable and complete information on security vulnerabilities is typically a hunt among dozens of websites and mailing lists, not to mention dealing with proprietary and copyrighted information," said OSVDB founder Tyler Owen in a statement.

"No more. The folks at the OSVDB have been busy building a database and system to catalogue and explain thousands of vulnerabilities."

The database will serve as a one-stop shop for all vulnerability needs and will collect vulnerability data on all kinds of software and operating systems.

Guidelines on ethical vulnerability disclosure will be released this quarter, including clear guidelines on the timing of notification of vulnerabilities to product developers, and of notification to the community.