Week 4

Question 1

What is the difference between CWE and CVE?

Answer 1

CWE categorises common weaknesses than can occur in programs, whereas CVE is a database of vulnerabilities and exploitations as seen in-the-wild.

Question 2

What is the relationship between NVD and CVE?

Answer 2

CVE and NVD are two separate programs, with the CVE list originally launched by MITRE as a community effort in 1999. NVD is now the database housing the CVEs and enriching each CVE once it has been published. NVD provides vulnerability management data. In summary, NVD provides further information beyond just the CVE information.

Question 3

An integer can be…

Answer 3

A whole number, negative number or positive number

Question 4

What is a natural number?

Answer 4

A positive integer - normal people numbers.