NVTs vs CVEs

Hi,

looks like you got some things mixed up. NVTs and CVEs are quite different.

A CVE is a reference number for a specific vulnerability. Any (legit) vulnerability can be reported and might get a CVE assigned to it, in order to have a standardized reference to it.
The official site summarizes it even better:

CVE® is a list of entries—each containing an identification number, a
description, and at least one public reference—for publicly known cybersecurity vulnerabilities.

An NVT (network vulnerability test) is a script that is being executed towards a targeted system and does vulnerability checks (remotely or locally), which also includes vulnerabilities that have got a CVE assigned to it.
However, there are also NVTs without a referenced CVE.

Now, what do you mean by “which are best to use”? For what?

Cheers,
ad

3 Likes