Events

upcoming

Recurring

DateEventDescriptionAccess
Every ThursdayTactical Working Group (TWG) MeetingFocused on on managing, coordinating, and expediting CVE Program activities, communications, and processes for the benefit of program stakeholders.private
Every other ThursdayQuality Working Group (QWG) MeetingFocused on identifying areas where CVE content, rules, guidelines, and best practices must improve to better support stakeholder use cases.private
Every other FridayCVE Outreach and Communications Working Group (OCWG) MeetingPromote the CVE Program to achieve program adoption and coverage goals through increased community awareness.private
Every other MondayCVE Artificial Intelligence Working Group (CVEAI WG) MeetingFocused on defining swim lanes for AI vulnerability disclosure within the CVE Program.private
Every TuesdayVulnerability Conference and Events Working Group (VCEWG)Focused on planning and managing collaborative events, such as workshops and conferences, especially the annual “VulnCon” conferences co-hosted by the CVE Program and FIRST.private
Every TuesdayAutomation Working Group (AWG) MeetingFocused on identifying and advancing proposals for the collaborative design, development, and deployment of automated capabilities that support the efficient management of the CVE Program.private
Every other WednesdayStrategic Planning Working Group (SPWG) MeetingFocused on the long-term strategy (1-5 years) and goals of the CVE Program; will work closely with the CVE Board to determine goals and objectives and will act to achieve them.private
Every other WednesdayCNA Organization of Peers (COOP) MeetingProvide a forum for more effective communication and participation by the CNAs.private
Every other WednesdayCVE Board MeetingOpen and collaborative discussion of topics relevant to the ongoing oversight and strategic direction of the CVE Program.private

past

DateEventDescriptionAccess
Oct 29 – 30, 2024CVE Program Workshop – Autumn 2024A collaborative virtual community event of CVE Partners focused on improving CVE.

Event Time: 10:00 AM to 2:00 PM EDT both days.

Please refer to the CNA partners email announcements for agenda topics and other workshop details.		private
Apr 7 – 10, 2025CVE/FIRST VulnCon 2025VulnCon 2025 is co-sponsored by the CVE Program and FIRST and is open to the public.

SPECIAL MESSAGE FOR CVE NUMBERING AUTHORITIES (CNAs):
VulnCon 2025 takes the place of this year’s Spring CVE Global Summit.

Agenda:
Available here.

Program Overview:
* Day 1: Monday, April 7 — Plenary, Vendor Tables, Welcome Reception
* Day 2: Tuesday, April 8 — Plenary, Vendor Tables, Off-site Social Event
* Day 3: Wednesday, April 9 — Plenary, Breakouts, Vendor Tables
* Day 4: Thursday, April 10 — Plenary, Breakouts, Vendor Tables

Venue:
McKimmon Center,
North Carolina State University,
1101 Gorman St.,
Raleigh, North Carolina 27606
USA

Registration:
Registration is now closed. Details here.
  • Virtual Admission: US $100.00 (closed)
  • In-person Standard Admission (closed): US $300.00
  • In-person Late Rate Admission (closed): US $375.00
Registration fees include four days of coffee breaks and buffet lunches, one networking reception hosted at the McKimmon Center, and applicable meeting materials. Note that discounted rates are not being offered for this event regardless of membership or speaking status.

An offsite social event is planned for Tuesday, April 8, from 19:00-21:00 in downtown Raleigh. You may purchase a ticket during your main registration or access a separate purchase form link found in your registration email confirmation. Tickets are US $30.00 per person.

Call for Papers:
Closed on January 31, 2025. Details here.

Purpose:
The purpose of VulnCon is to collaborate with various vulnerability management and cybersecurity professionals to develop forward leaning ideas that can be taken back to individual programs for action to benefit the vulnerability management ecosystem.

A key goal of the conference is to understand what important stakeholders and programs are doing within the vulnerability management ecosystem and best determine how to benefit the ecosystem broadly.		public
Jun 5, 2024CNA Rules v4.0 Q&A WebinarThis event is limited to authorized representatives from CVE Numbering Authority (CNA) partners only.

Time: 11:00 AM - 12:30 PM EDT

Registration: Available for CNA partners on the webinar website.

IMPORTANT: CNAs are encouraged to submit questions ahead of time via this web form.

Purpose: The purpose of this CVE® Program webinar is to update CNAs about the new and improved CNA Rules Version 4.0 (PDF).

Topics will include the ways the new rules might affect CNA processes in the short term, the benefits for CNAs moving forward, and the expected positive impact on the vulnerability management ecosystem.

CNAs, register today!		private
Aug 8 – 11, 2024DEF CON 32CVE attending. Look for us and say hello!public
Aug 3 – 8, 2024Black Hat USA 2024CVE attending. Look for us and say hello!public
Jun 9 – 14, 202436th Annual FIRST ConferenceCVE attending. Look for us and say hello!public
Mar 25 – 27, 2024CVE/FIRST VulnCon 2024VulnCon 2024 is co-sponsored by the CVE Program and FIRST and is open to the public.

SPECIAL MESSAGE FOR CVE NUMBERING AUTHORITIES (CNAs):
VulnCon 2024 takes the place of this year’s Spring CVE Global Summit.

Program Overview:
* Day 1: Monday, March 25 —
Registration, Sessions, Opening Social Event
* Day 2: Tuesday, March 26 —
Registration, Sessions, Networking Reception
* Day 3: Wednesday, March 27 —
Registration, Sessions, Adjourn

Agenda:
View the conference agenda.

Venue:
McKimmon Center,
North Carolina State University,
1101 Gorman St.,
Raleigh, North Carolina 27606
USA

Purpose:
The purpose of VulnCon is to collaborate with various vulnerability management and cybersecurity professionals to develop forward leaning ideas that can be taken back to individual programs for action to benefit the vulnerability management ecosystem.

A key goal of the conference is to understand what important stakeholders and programs are doing within the vulnerability management ecosystem and best determine how to benefit the ecosystem broadly.

Call for Papers:
Closed on January 31, 2024. Details here.

Registration:
Closed on March 15, 2024. Details here.		public
Nov 15, 2023CVE Program Workshop – Autumn 2023A collaborative virtual community event of CVE Partners focused on improving CVE.

Meeting invite with agenda sent October 17, 2023.

Event Time: 10:30 AM to 4:00 PM (EST, GMT-5)		private
Aug 10 – 13, 2023DEF CON 31CVE attending. Look for us and say hello!public
Aug 5 – 10, 2023Black Hat USA 2023CVE attending. Look for us and say hello!public
Jun 4 – 9, 202335th Annual FIRST ConferenceCVE attending. Look for us and say hello!public
Apr 25 – 27, 2023CVE at RSA Conference 2023 (booth #6566)CVE Program Booth #6566.

Moscone North Expo hours:
April 25: 10:00 AM – 6:00 PM PT
April 26: 10:00 AM – 6:00 PM PT
April 27: 10:00 AM – 3:00 PM PT

Full event is April 24-27.		public
Mar 22 – 23, 2023CVE Global Summit – Spring 2023A collaborative community event of CVE Partners focused on improving CVE.

Registration:
Virtual – Meeting invite sent January 30, 2023
In-person – Registration link for in-person attendance sent with meeting invite (in-person registration due by March 8, 2023)

Venue: The MITRE Corporation, 7515 Colshire Drive, McLean, Virginia, USA		private
Feb 28 – Mar 3, 20232023 FIRST & AfricaCERT Symposium: Africa and Arab RegionsCVE talk by OCWG member Jean-Robert Hountomey of AfricaCERT.public
Sep 29, 20222022 FIRST PSIRT SIG Technical Colloquium“The Current State of the CVE Program with an Eye Towards the Future” presentation on Thursday, September 29, from 1:30 p.m. – 2:30 p.m. ET.

The event itself runs September 28-29.		public
Aug 6 – 11, 2022Black Hat USA 2022CVE attending. Look for us and say hello!public
Jun 23, 2022Open Source Summit North America 2022“Future of CVE” talk by CVE Board member Art Manion of CERT/CC.public
Jun 26 – Jul 1, 202234th Annual FIRST Conference 2022CVE attending. Look for us and say hello!public
Nov 2, 2022CVE Services WorkshopA collaborative event for CNAs to learn how to use CVE Services 2.1 to create, publish, and modify their own CVE Records; learn about CVE JSON 5.0, the new and enhanced format for CVE Records; and much more.

Time: 10:00 a.m. – 2:00 p.m. ET		private
Jun 7, 2022RSA 2022“The Future of Vulnerability Disclosure Processes” talk by CVE Board member Tod Beardsley of Rapid7.public
Mar 2 – 3, 20222022 TF-CSIRT Meeting & FIRST Regional Symposium EuropeCVE lightning talk by CVE Board member Shannon Sabens of Crowdstrike.public
Oct 27 – 28, 2021HITCON Pacific 2021CVE talk by CVE Board member Takayuki Uchiyama of Panasonic Corporation.public
Oct 26 – 27, 2021CVE Global Summit – Fall 2021A collaborative community event of CVE Partners focused on improving CVE.private
Sep 23, 2021CVE Services 2.x for CNAs WorkshopFirst of 3 planned workshops for CNAs. Topics for Workshop 1: intro to CVE Services; intro to JSON 5.0 + how to construct the JSON; intro to the free API; and Q/A. Primary Audience: developers/early adopters.private
May 13 – 14, 2021CVE Global Summit – Spring 2021A collaborative community event of CVE Partners focused on improving CVE.private
Jan 26, 2021CVE Working Groups ReadoutQuarterly updates from the CVE Working Groups to CVE Partners.private

Archives

Calendars of Events from 2020 and earlier are archived below. There is one PDF for each calendar year.