CVEjoin: Over 100,000 Security Vulnerabilities Augmented with Threat Intelligence

CVEjoin is a dataset of more than 100,000 information-security vulnerabilities from the National Vulnerability Database (NVD), augmented with data from multiple security feeds and social networks. It was developed by Rodrigo Parente using a fully automated tool to gather intrinsic vulnerability characteristics and external threat intelligence. The dataset is intended to aid research on risk assessment and vulnerability severity prediction.

Use Cases

• Analyzing the risk of exploiting security flaws based on augmented threat intelligence and context-specific information.
• Predicting vulnerability severity using intrinsic characteristics from the NVD and external security feeds.
• Studying the global threat landscape by correlating vulnerability data with information from social networks.

Strengths

• Contains data on more than 100,000 vulnerabilities, providing a substantial scale for analysis.
• Integrates data from multiple sources, including the NVD, security feeds, and social networks.
• Created with a fully automated tool, which suggests consistency in data collection methodology.

Limitations

• Column-level documentation is absent; field semantics must be inferred after download.
• Last update date is unknown; freshness unverified.
• Row count is unknown, which may limit suitability assessment for specific tasks.

Provenance

Source

National Vulnerability Database (NVD), multiple security feeds, and social networks.

Collection Method

Data gathered using a fully automated tool developed by the author.