Alternatives and similar repositories for vulnerability-db:

Users that are interested in vulnerability-db are comparing it to the libraries listed below

• vishalgarg-sec / Software-Supply-Chain-Security
  A compilation of Software Supply Chain Security resources including initiatives, standards, regulations, organizations, vendors, tooling,…
  ☆132Updated last year
• ossf / malicious-packages
  A repository of reports of malicious packages identified in Open Source package repositories, consumable via the Open Source Vulnerabilit…
  ☆297Updated this week
• iosifache / semgrep-rules-manager
  Manager of third-party sources of Semgrep rules 🗂
  ☆80Updated 8 months ago
• DataDog / malicious-software-packages-dataset
  An open-source dataset of malicious software packages found in the wild, 100% vetted by humans.
  ☆183Updated this week
• fkie-cad / nvd-json-data-feeds
  Community reconstruction of the legacy JSON NVD Data Feeds. This project uses and redistributes data from the NVD API but is neither endo…
  ☆143Updated this week
• ossf / osv-schema
  Open Source Vulnerability schema.
  ☆197Updated this week
• Checkmarx / chainjacking
  Find which of your direct GitHub dependencies is susceptible to RepoJacking attacks
  ☆58Updated 2 years ago
• ossf-cve-benchmark / ossf-cve-benchmark
  The OpenSSF CVE Benchmark consists of code and metadata for over 200 real life CVEs, as well as tooling to analyze the vulnerable codebas…
  ☆141Updated last year
• magnologan / awesome-sca
  A comprehensive list of software composition analysis tools.
  ☆140Updated 9 months ago
• apiiro / combobulator
  Dependency Combobulator
  ☆93Updated last year
• pbom-dev / OSCAR
  A comprehensive, systematic and actionable way to understand attacker behaviors and techniques with respect to the software supply chain
  ☆91Updated last month
• meta-fun / awesome-software-supply-chain-security
  Sharing software supply chain security open source projects
  ☆46Updated 2 years ago
• AppThreat / atom
  Atom is a novel intermediate representation for applications and a standalone tool that is powered by chen.
  ☆62Updated 2 weeks ago
• binareio / FastCVE
  FastCVE - fast, rich and API-based search for CVE and more (CPE, CWE, CAPEC)
  ☆49Updated 2 months ago
• nccgroup / ccs
  ☆110Updated last year
• SAP / risk-explorer-for-software-supply-chains
  A taxonomy of attacks on software supply chains in the form of an attack tree, based on and linked to numerous real-world incidents and o…
  ☆74Updated this week
• elttam / semgrep-rules
  ☆184Updated 4 months ago
• Vulnogram / Vulnogram
  Vulnogram is a tool for creating and editing CVE information in CVE JSON format
  ☆174Updated 2 months ago
• stacscan / stacs
  Static Token And Credential Scanner
  ☆96Updated last year
• cve-search / cpe-guesser
  Tool to guess CPE name based on common software name
  ☆91Updated 4 months ago
• Orange-Cyberdefense / grepmarx
  A source code static analysis platform for AppSec enthusiasts.
  ☆237Updated last month
• ossf / security-reviews
  A community collection of security reviews of open source software components.
  ☆93Updated last year
• doyensec / PESD-Exporter-Extension
  PESD (Proxy Enriched Sequence Diagrams) Exporter converts Burp Suite's proxy traffic into interactive diagrams
  ☆102Updated last month
• RefactorSecurity / vscode-security-notes
  Create notes during a security code review in VSCode 📝 Import your favorite SAST tool findings 🛠️ and collaborate with others 🤝
  ☆132Updated this week
• jgamblin / monthlyCVEStats
  Monthly CVE Stats
  ☆41Updated 3 weeks ago
• tuannq2299 / semgrep-rules
  A collection of Semgrep rules which followed security guidelines for .NET and Java.
  ☆17Updated 3 years ago
• avito-tech / deepsecrets
  Secrets scanner that understands code
  ☆188Updated last year
• boostsecurityio / lotp
  boostsecurityio/lotp
  ☆115Updated last week
• duo-labs / narrow
  Low-effort reachability analysis for third-party code vulnerabilities.
  ☆20Updated last year