> For the complete documentation index, see [llms.txt](https://ceh-practical.cavementech.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://ceh-practical.cavementech.com/module-5.-vulnerability-assessment/1.-perform-vulnerability-research-with-vulnerability-scoring-systems-and-databases.md).
# 1. Perform Vulnerability Research with Vulnerability Scoring Systems and Databases
## 1. CWE common weakness enumeration
Common Weakness Enumeration (CWE) is a category system for software vulnerabilities and weaknesses. It has numerous categories of weaknesses that means that CWE can be effectively employed by the community as a baseline for weakness identification, mitigation, and prevention efforts. Further, CWE has an advanced search technique with which you can search and view the weaknesses based on research concepts, development concepts, and architectural concepts.
{% embed url="" %}
1. Launch any web browser, and go to **** website (here, we are using **Mozilla Firefox**).
> If the **Default Browser** pop-up window appears, uncheck the **Always perform this check when starting Firefox** checkbox and click the **Not now** button.
> If a **New in Firefox: Content Blocking** pop-up window appears, follow the step and click start browsing to finish viewing the information.
2. **CWE** website appears. Navigate to **Search** tab, in the **Google Custom Search** under **CWE List Quick Access** section and search for **SMB** in the search field.
> Here, we are searching for the vulnerabilities of the running services that were found in the target systems in previous module labs (Module 04 Enumeration).
3. The search results appear, scroll-down to view the underlying vulnerabilities in the target service (here, **SMB**). You can click any link to view detailed information on the vulnerability.
> The search results might differ when you perform this task
4. Now, click any link (here, **CWE-284**) to view detailed information about the vulnerability.
5. Similarly, you can click on other vulnerabilities and view detailed information.
6. Now, navigate to the **CWE List** tab. **CWE List Version** will be displayed. Scroll down, and under the **External Mappings** section, select **CWE Top 25 (2023)**.
> The result might differ when you perform this task.
7. A webpage appears, displaying **CWE VIEW: Weaknesses in the 2023 CWE** **Top 25 Most Dangerous Software Weaknesses**. Scroll down and view a list of **Weaknesses in the 2023 CWE Top 25 Most Dangerous Software Weaknesses** under the **Relationships** section. You can check each weakness to view detailed information on it.
> This information can be used to exploit the vulnerabilities in the software and further launch attacks.
> The result showing publishing year might differ when you perform this task.
## 2. CVE Common vulnerabilities and exposures
{% embed url="" %}
## 3. NVD National Vulnerability Database
{% embed url="" %}
{% embed url="" %}