CVE's count Not matching with NVD Database

unread,

Aug 3, 2023, 9:49:55 AM8/3/23

to Dependency Check

Hi All,

Having some doubts regarding the odc.mv.db. It has the vulnerability count of 164680.
But NVD database v2 version( https://services.nvd.nist.gov/rest/json/cves/2.0 ) has 221556 CVEs.

And even the meta files (NVD Cache of all years together) has 223113 CVEs

There is a difference of 57000 CVEs not available in dependency check h2 db when compared to NVD.

Can someone please help me on this question. Why DB count of H2 database is not matching with NVD Database.

Thanks,
Meaheesha.

unread,

Aug 3, 2023, 11:42:40 AM8/3/23

to Meaheesha Rajesh, Dependency Check

On 3 Aug 2023, at 15:49, Meaheesha Rajesh <meaheesh...@gmail.com> wrote:

Hi All,

Thanks,
Meaheesha.

DependencyCheck is filtering out the CVE records that are not relevant for its purpose.

unread,

Aug 4, 2023, 7:14:55 AM8/4/23

to Dependency Check

Thanks aikebah for the quick reply :)

Reply all

Reply to author

Forward