This repository collects valid CPE product and vendor names that appear in NVD CPE dictionary. The database is updated on daily basis. For all the entries in the database, cpe_version is '2.3' and part is 'a' (application).
This repository provides a convenient way to obtain a complete database of valid combinations of CPE product and vendor names. Such database can be used, for instance, to build heuristics for locally mapping CPE vendor and product names.
This repository builds upon data provided by NVD either directly or via other redistributions of the NVD data, such as nvd-json-data-feeds. NVD API terms of use are available on the NVD Developers website.
This project is licensed under the Apache-2.0 license - see the Apache-2.0.txt file for details.