CoolFace
Datasetpublic

regularpooria/CVE_CWE_Software_Mapping_Dataset

CVE-CWE Software Weakness Mapping Dataset Dataset description This dataset maps Common Vulnerabilities and Exposures (CVEs) to Common Weakness Enumeration (CWE) entries in the CWE-699 Software category. It combines CVE descriptions with CWE descriptions and parent-category information for security research and vulnerability classification. Dataset structure The dataset is provided as Global_Dataset.csv. Its main fields include: CVE-ID: CVE… See the full description on the dataset page: https://huggingface.co/datasets/regularpooria/CVE_CWE_Software_Mapping_Dataset.

sourceHugging Faceapache-2.0updated 11d agoView on Hugging Face
0likes67downloads
Dataset Card

CVE-CWE Software Weakness Mapping Dataset

Dataset description

This dataset maps Common Vulnerabilities and Exposures (CVEs) to Common Weakness Enumeration (CWE) entries in the CWE-699 Software category. It combines CVE descriptions with CWE descriptions and parent-category information for security research and vulnerability classification.

Dataset structure

The dataset is provided as Global_Dataset.csv. Its main fields include:

  • —CVE-ID: CVE identifier.
  • —CVE-DESCRIPTION: Description of the vulnerability.
  • —CWE-ID: Associated CWE identifier.
  • —CWE-DESCRIPTION: Description of the associated weakness.
  • —PARENTS: Parent CWE category or categories.
  • —YEAR: Year extracted from the CVE identifier.
  • —IS-IN-CWE699: Whether the CWE belongs to the CWE-699 Software category.

Data sources

  • —CVE-to-CWE mappings and vulnerability descriptions are sourced from the zefang-liu/cve-and-cwe-mapping-dataset dataset on Hugging Face.
  • —CWE descriptions and hierarchy information are collected from the CWE software-category data scraped by this project.

The dataset is generated by dataset/generate_dataset.ipynb.

Intended uses

This dataset is intended for research and experimentation involving:

  • —CVE-to-CWE classification.
  • —Vulnerability search and retrieval.
  • —Security text embedding and similarity experiments.
  • —Analysis of software weakness categories.

Limitations

The mappings reflect the upstream data sources and may contain incomplete, ambiguous, or changing vulnerability information. The dataset should not be treated as a definitive security assessment or as a replacement for reviewing the original NVD and CWE records.

License and attribution

Please review and follow the licenses and attribution requirements of the upstream CVE and CWE sources before redistributing or using this dataset.