Re: CVE Must-Have Coverage

["Steven M. Christey" <coley@rcf-smtp.mitre.org>]

All,

For your information, here are the current sources that the CVE content 
team directly monitors.  (Note that we don't have 100% coverage for most 
of these).

SecurityFocus BID
Bugtraq mailing list
US-CERT Technical Alerts
US-CERT Vulnerability Notes
Cisco
Debian
Exploit-DB
Fedora
Gentoo
HP
iDefense
JP-CERT JVN
Mandriva
Microsoft
OSVDB
Red Hat
Security Tracker
Secunia
SUSE (openSUSE is also indirectly monitored)
Ubuntu
ISS X-Force


We used to monitor FRSIRT/VUPEN, but since they removed their public 
database entirely, we don't track them any more.

- Steve