CVE DATABASE

CVE Database

Common Vulnerabilities and Exposures. Search for known security vulnerabilities in software and systems.

What is a CVE?

CVE (Common Vulnerabilities and Exposures) is a standardized identifier for publicly disclosed cybersecurity vulnerabilities. Each CVE ID references a specific vulnerability, making it easier to share data across separate vulnerability databases and tools.

  • CVE-YYYY-NNNNN - Format: Year + Sequence Number
  • Maintained by MITRE Corporation
  • Used by security tools worldwide including H2 Scanner

How H2 Scanner Uses CVEs

H2 Security Scanner automatically detects dependencies with known CVE vulnerabilities by checking against the OSV database. When vulnerabilities are found, we provide:

  • Direct links to CVE details
  • Severity scoring (CVSS)
  • Remediation guidance
  • Upgrade recommendations