COMMON VULNERABILITIES AND EXPOSURES (CVE) - a dictionary of common names for publicly known information security vulnerabilities and exposures. OPEN VULNERABILITY ASSESSMENT LANGUAGE (OVAL) - a common language for security experts to discuss the technical details of how to identify the presence of vulnerabilities on computer systems using Community Forum-developed SQL queries. MITRE maintains and manages both CVE and OVAL.