cnnvd

Mr Boland said that if the block on attending public contests was designed to have hackers report directly to the CNNVD it would create a " significant threat " because of the scope for Chinese hackers to exploit a huge pool of vulnerabilities .

博兰表示，如果阻止黑客参加公开赛事的目的是让黑客直接向国家信息安全漏洞库上报，这将造就出一个“重大威胁”，因为中国黑客将拥有利用大量漏洞的空间。

Now Chinese hackers could only take a discovery to the vendor or the Ministry " who might notify the vendor or might not . " MSS has already offered clues on its stance with its National Vulnerability database , CNNVD , a repository of known vulnerabilities in different software products .

现在中国黑客只能把发现的漏洞上报给软件供应商或安全部，而安全部“可能会通知供应商，也可能不通知”。从中国国家信息安全漏洞库（CNNVD）可以在一定程度上看出安全部的立场。