By using boxscore/security you agree to these terms. If you do not agree, do not use the site.
boxscore/security is an informational compilation of the public software-vulnerability record. It aggregates third-party data that may contain errors, omissions, or delays, and it may itself contain mistakes. It is not security advice and is not a substitute for your own vulnerability management, patching, or professional judgment. The service is provided "as is" and "as available", without warranties of any kind, express or implied, including accuracy, completeness, fitness for a particular purpose, or non-infringement.
To the fullest extent permitted by law, the operator is not liable for any direct, indirect, incidental, or consequential loss or damage arising from your use of, or reliance on, this site or its data. Always verify against the authoritative source — each CVE links to its record at cve.org.
The underlying vulnerability data comes from NIST/NVD, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS, the CVE Program, and OSV, and remains subject to their respective terms and licenses. The selection, ordering, formatting, and presentation on this site are the operator's own work. You may quote or link to individual pages with attribution; do not scrape the site in a way that degrades service for others, republish it wholesale as your own, or misrepresent its contents.
These terms may be updated; the current version is always posted here, and continued use constitutes acceptance. This site is operated from and governed by the laws of the State of Washington, United States. Questions: rondiver@gmail.com.