Data sources & attribution
SecLookup republishes data from the public sources below. Each remains the property of its owner and is used under its terms. Always check the official page (linked on every entry) before acting on the information.
| Source | Owner | Terms |
|---|---|---|
| National Vulnerability Database (CVE) | NIST | Public domain. This product uses data from the NVD API but is not endorsed or certified by the NVD. |
| Known Exploited Vulnerabilities catalog | CISA | Public domain (U.S. Government work) |
| Common Weakness Enumeration (CWE) | The MITRE Corporation | CWE Terms of Use. CWE™ is a trademark of The MITRE Corporation. © The MITRE Corporation. |
| CAPEC | The MITRE Corporation | CAPEC Terms of Use. CAPEC™ is a trademark of The MITRE Corporation. © The MITRE Corporation. |
| MITRE ATT&CK® | The MITRE Corporation | ATT&CK Terms of Use. © The MITRE Corporation. Reproduced and distributed with the permission of The MITRE Corporation. |
| OWASP Top 10, API Security Top 10, LLM Top 10, Mobile Top 10, ASVS, Cheat Sheet Series | OWASP Foundation | CC BY-SA 4.0 |
| NIST SP 800-53 rev5 (OSCAL) | NIST | Public domain (U.S. Government work) |
| CIS Critical Security Controls v8.1 | Center for Internet Security | Only control and safeguard names are shown. The full text is © CIS under CC BY-NC-ND 4.0; see the CIS website. |
| Mappings Explorer (control ↔ ATT&CK mappings) | MITRE Center for Threat-Informed Defense | Apache 2.0 |
Freshness
The database is rebuilt periodically by the update.py script. The home page shows how many entries are loaded from each source; hover over a count to see when it was last updated.