NVD is the U.S. government repository of standards based
vulnerability management data. This data enables automation of
vulnerability management, security measurement, and compliance (e.g.
FISMA).
NVD is a product of the NIST Computer
Security Division and is sponsored by the Department of Homeland
Security's National Cyber
Security Division. It supports the U.S. government multi-agency (OSD, DHS,
NSA, DISA,
and NIST) Information Security
Automation Program. It is the U.S. government content repository for
the Security Content Automation Protocol (SCAP).