CERTCC / VINCE

VINCE is the Vulnerability Information and Coordination Environment developed and used by the CERT Coordination Center to improve coordinated vulnerability disclosure. VINCE is a Python-based web platform.

https://kb.cert.org/vince/

CERTCC/VINCE Issues

CSAF JSON: datetime not implemented to the standard
Closed 24 days ago
List of suggestions
Updated a month ago
CSAF enhancements reflect Embargo, Expected Date Public and Vendor Involvements.
Closed 2 months ago
BUG: Vul Note PDF hyperlinks unclickable
Closed a year ago4
2.1.2 does not correctly handle creation of bounce tickets
Closed a year ago
Contact approval process enhancements
Closed a year ago9
CSAF Compatability
Updated a year ago3
Implement PDF Button to VulNotes
Closed a year ago10
VINCE Storage of Vendor products and their affected versions
Closed a year ago1
Bug: CVSS string with AV:L returns incorrect metric.
Closed a year ago1
CSAF: `revision_history` not implemented correctly
Updated a year ago4
Feature request: Add federation approach
Updated a year ago2
Feature request: Integrate workflow states
Updated a year ago
Could this be using a standard open source license?
Closed a year ago4
minor UX tweak: add prefix "CVE-" to "Edit Vulnerability" screen
Closed a year ago
Add vendor-specific tracking ID to e-mail notifications for private messages to/from case coordinators
Closed a year ago1
Allow case reporters to add tracking ID in Case
Closed a year ago1
Run on-premises
Closed a year ago7
Django 3.2.18 vulnerability CVE-2023-24580: Potential denial-of-service vulnerability in file uploads
Closed a year ago1
Architecture and interworking documentation of various components.
Closed a year ago1
Investigate XSS issue if present in VINCE CVE Submit code
Closed a year ago1
Dependency Upgrade/Management
Closed a year ago7
Edit Vulnerability Button "hangs" and does not allow edit
Closed a year ago2
Error in publishing CVE 5
Closed a year ago2
BUG: "Add Vulnerability" Button doesn't work after adding a vulnerability from a case view
Closed a year ago1
CVE Services not responding
Closed a year ago2
Remote Code Injection vulnerability using Python pickle object
Closed 2 years ago2
Encrypt and Send failure without exception handling
Closed 2 years ago1
Implement download as HTML button
Closed 2 years ago1
Provide an HTML version download of a Vulnerability Notice.
Closed 2 years ago
An HTML Injection vulnerability when email with Subject is rendered.
Closed 2 years ago1
An HTML Injection vulnerability when Product Affected field contains arbitrary HTML content
Closed 2 years ago2
Add Timezone for displaying Date Time fields anywhere for clarity.
Closed 2 years ago
Fix CVE-2022-40248 and CVE-2022-40257
Closed 2 years ago
Case Machine Readable Format
Closed 2 years ago
User ID and Group ID of users can be enumerated
Closed 2 years ago1
assign CVE ID for open redirect fixed in 1.50.0
Closed 2 years ago4
Hard-coded template path in cogauth/templates/cogauth/profile.html
Closed 2 years ago1
Merge tags in cogauth/templates/cogauth/profile.html
Closed 2 years ago1
COGLoginView class has hard-coded contact email address
Closed 2 years ago4
Case completion/acknowledgement
Updated 2 years ago
Email Case Recognition
Updated 2 years ago
Case acknowledgement checkbox
Updated 2 years ago
Add CONTRIBUTING.md?
Closed 2 years ago1
Team Transition Notification
Updated 2 years ago2
Its not easy to identify new updates in a case
Updated 2 years ago
Tag Search/Filter bug in VINCETrack
Updated 2 years ago
Extra newlines in Vuln Note API "public" URLs
Closed 2 years ago1
reset my mfa
Closed 2 years ago1
CSAF schema changes requires updates to VINCE API examples.
Closed 3 years ago4