VIM -- Vulnerability Information Managers


About VIM
English (USA)

Managing vulnerability information is an expensive, dirty business.

This list provides a forum for people to review and enhance information regarding vulnerabilities that have already been publicly disclosed, in order to reduce duplicate effort and increase the overall quality of vulnerability information. This list is NOT intended for the initial publication of vulnerabilities, as many
mechanisms already exist.

Topics include, but are not limited to:

- identifying and resolving inaccuracies or gaps in public vulnerability reports
- sharing communications with vendors for acknowledging/patching the claimed issues
- vulnerability database maintenance
- validation and verification
- terminology
- trends and statistics

The target audience includes members of vulnerability database teams,
vulnerability notification services, and any other persons who have an
active interest in improving the accuracy of vulnerability

To see the collection of prior postings to the list, visit the VIM Archives.

Using VIM
To post a message to all the list members, send email to

You can subscribe to the list, or change your existing subscription, in the sections below.

Subscribing to VIM

Subscribe to VIM by filling out the following form. You will be sent email requesting confirmation, to prevent others from gratuitously subscribing you. This is a private list, which means that the list of members is not available to non-members.

    Your email address:  
    Your name (optional):  
    You may enter a privacy password below. This provides only mild security, but should prevent others from messing with your subscription. Do not use a valuable password as it will occasionally be emailed back to you in cleartext.

    If you choose not to enter a password, one will be automatically generated for you, and it will be sent to you once you've confirmed your subscription. You can always request a mail-back of your password when you edit your personal options.
    Pick a password:  
    Reenter password to confirm:  
    Which language do you prefer to display your messages? English (USA)  
    Would you like to receive list mail batched in a daily digest? No Yes
VIM Subscribers
(The subscribers list is only available to the list members.)

Enter your address and password to visit the subscribers list:

Address: Password:   

To unsubscribe from VIM, get a password reminder, or change your subscription options enter your subscription email address:

If you leave the field blank, you will be prompted for your email address

VIM list run by vim-owner at
VIM administrative interface (requires authorization)
Overview of all mailing lists

Delivered by Mailman
version 2.1.26
Python Powered GNU's Not Unix