Find research datasets worth reusing
Search datasets from major research repositories and use ShareScore to quickly assess how well each record supports discovery, access, and reuse.
12
datasets available to search
ShareScore release 0.9.0
Dataset results
12 results for “security vulnerabilities”
FixMe: An Incremental Lightweight Method for Vulnerability Data Collection for Security Patch Prediction
<div> <div>This repository has the FixMe dataset and the source code for extracting the new dataset. is a lightweight approach for collecting code patches based on analyzing the commits of various version control systems. The practical framework is designed to generate patches across a wide array of programming languages. This open-source tool streamlines the process of gathering vulnerability records from the Common Vulnerabilities and Exposures (CVE) database through an incremental approach. By embracing an incremental methodology, we expedite the acquisition of data, ensuring the inclusion of newly identified vulnerabilities and their corresponding patch pairs. Our methodology involves extracting security issues, obtaining vulnerability-fixing commits, and retrieving relevant source code from various projects. The extracted dataset by the FixMe tool supports for the automated patch prediction, automated program repair, commit classification, vulnerability prediction and more.</div> </div>
Dataset for "Architectural Security Weaknesses in Industrial Control Systems: An Empirical Study Based on Security Advisories' Vulnerability Reports"
<p>Supplementary artifacts to "<em>Architectural Security Weaknesses in Industrial Control Systems (ICS): An Empirical Study based on Disclosed Software Vulnerabilities</em>"</p> <p>Published in the Proceedings from the 2019 IEEE International Conference on Software Architecture (ICSA)</p> <p>Package Contains:</p> <p>- Raw output showing Components, CAWEs, and CVEs per report</p> <p>- Frequency Data (# of reports) for those concerns</p> <p>- ICS Component - Term Dictionary </p> <p>- HTML versions of reports studied in paper</p>
Study Dataset: Shedding Light on CVSS Scoring Inconsistencies: A User- Centric Study on Evaluating Widespread Security Vulnerabilities
<p>This record contains the <strong>study datasets, descriptive results and questionnaires</strong> from the paper "Shedding Light on CVSS Scoring Inconsistencies: A User-Centric Study on Evaluating Widespread Security Vulnerabilities" by Julia Wunder, Andreas Kurtz, Christian Eichenmüller, Freya Gassmann and Zinaida Benenson to appear in Proceedings of the 45th IEEE Symposium on Security and Privacy (2024).</p> <p>The pseudonymous <strong>datasets</strong> contain data from the online surveys (main study with 196 participants and follow-up study with 59 participants). The first row gives the question codes and questions, the following rows gives the answers from the participants (see also README.md).</p> <p>We also provide <strong>descriptive results</strong> from the online surveys as PDF and the questionnaires.</p> <p>Please refer to the README.md file and our paper for further details about the data set and study.</p>
Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers
<div>Supplemental material for the paper "Just another copy and paste? Comparing the security vulnerabilities of ChatGPT generated code and StackOverflow answers" published in DLSP 2024.</div> <div> <div> </div> </div>
Replication Package: Asking Security Practitioners: Did You Find the Vulnerable (Mis)Configuration?
<p><strong>Welcome to the public repository for the additional content of the paper "Asking Security Practitioners: Did You Find the Vulnerable (Mis)Configuration?", accepted at the International Working Conference on Variability Modelling of Software-Intensive Systems (VAMOS) 2025.</strong></p> <p>This repository provides additional information to the conducted survey study on configuration-related vulnerabilities, including the following files:</p> <ul> <li>QUESTIONNAIRE_VAMOS2025.csv: sheet containing all questionnaire data and answer options</li> <li>DATA_VAMOS2025.csv: sheet containing data of the 41 participants, including additional codings of free-text answers</li> <li>README.txt: readMe file</li> </ul> <p><strong>Requirements for using the data<br></strong></p> <ul> <li>No requirements</li> </ul> <p><strong>License for using the data<br></strong></p> <p>Creative Commons Attribution 4.0 International</p> <p>The Creative Commons Attribution license allows re-distribution and re-use of a licensed work on the condition that the creator is appropriately credited.</p> <p>Further information: https://creativecommons.org/licenses/by/4.0/legalcode</p>
Replication Package for "On the impact of security vulnerabilities in the npm package dependency network
<p>This is the replication package for paper "On the impact of security vulnerabilities in the npm package dependency network" accepted for publication in MSR 2018.</p>
An Empirical Study of Vulnerabilities in Edge Frameworks to Support Security Testing Improvement
<p>This package contains the material collected to perform the empirical study described in our paper entitled ‘An Empirical Study of Vulnerabilities in Edge Frameworks to Support Security Testing Improvement’ authored by Jahanzaib MALIK (<a href="mailto:jahanzaib.malik@uni.lu">jahanzaib.malik@uni.lu</a>) and Fabrizio PASTORE (fabrizio.pastore@uni.lu).</p> <p> </p>
Security vulnerabilities in open-source reused systems
<p>This dataset comprise 2017 Java projects. It contains information related to their external dependencies and its potential and disclosed security vulnerabilities.</p> <p>The potential vulnerabilities were detected with the use of the SpotBugs static analyzer tool, while the disclosed ones with the use of OWASP Dependency Check tool..</p> <p>This dataset was generated during a research effort to correlate software reuse to security vulnerabilities.</p> <p>The scripts for reproducing the dataset and analyzing it are available on GitHub under this link [https://github.com/AntonisGkortzis/Vulnerabilities-in-Reused-Software].</p>
A Critical Review of the Impact of Climate Change on Food Security in Nigeria: A Vulnerability Assessment
<p>This review explores the profound ramifications of climate change on food security in Nigeria through a comprehensive vulnerability assessment. As a nation heavily reliant on agriculture, Nigeria faces escalating challenges exacerbated by shifting climatic patterns. This study employs a multi-faceted approach to analyze the intricate interplay between climate change and food security, considering both current and projected impacts. Utilizing a combination of quantitative and qualitative methods, the research evaluates the vulnerability of key agricultural regions, examining variations in temperature, precipitation, and extreme weather events. The findings underscore a heightened susceptibility of crop yields and livestock production to climatic anomalies, presenting a clear threat to the nation's food supply chain. Moreover, the study delves into the socio-economic dimensions of vulnerability, scrutinizing the adaptive capacity of local communities and the efficacy of existing policies. Identifying vulnerable populations and regions is crucial for targeted interventions and policy formulation. The study however, discusses potential adaptation strategies, emphasizing the importance of sustainable agricultural practices, climate-resilient crop varieties, and community-based initiatives.</p>
Empirical Analysis of Security Vulnerabilities in Python Packages
<p>This dataset contains the data files used to analyze our RQs in the manuscript "Empirical Analysis of Security Vulnerabilities in Python Packages".</p> <p>For more information on how to understand the folder structure and dataset, please read the README.md.</p>
An Exploration on How Developers Respond to Security Vulnerabilities: The Case of Log4JShell
<p>Although using third-party libraries has become prevalent in contemporary software development, developers often struggle to update their dependencies. Prior works acknowledge that due to the migration effort, priority and other issues cause lags in the migration process. The common assumption is that developers should drop all other activities and prioritize fixing the vulnerability.<br> Our objective is to understand developer behavior when facing high-risk vulnerabilities in their code. We explore the prolific case of the Log4Shell, a vulnerability that has the highest severity rating ever, which received widespread media attention. Using a mixed-method approach, we analyze 219 GitHub Pull Requests (PR) and 354 issues belonging to 53 Maven projects affected by the Log4j vulnerability. Our study indicates that developers tend to have a quick response taking from 5 to 6 days. However, instead of focusing on fixing the vulnerability, surprisingly developer activities tend to increase for all pending issues and PRs. Developer discussions involved either giving information (29.3%) and seeking information (20.6%), which is missing in existing support tools. Leveraging this possibly-one of a kind event opens up a new line of research, advocating us to rethink best practices and what developers need in order to efficiently fix vulnerabilities.</p>
Evaluation of the Effects of a Structural Economic and Food Security Intervention on HIV Vulnerability in Rural Malawi
ClinicalTrials.gov study NCT02332265. IPD Sharing: Not stated. Countries: 1. Publications: 16.
ScienceDex guides
Understand access before you commit
These curated guides explain access requirements, typical timelines, costs, and reuse considerations for widely used research datasets.
Allen Brain Atlas
Allen Brain Atlas is an Allen Institute collection of brain map atlases, datasets, APIs, and analysis tools covering mouse, human, and non-human primate brain resources.
Annotated Behaviour and Observability Dataset (ABODe)
ABODe is a University of Edinburgh DataShare dataset for behavior classification in group-housed mice using home-cage video, identities, bounding boxes, ground-plate positions, and annotator labels.
DANDI Archive for NWB datasets
DANDI is a BRAIN Initiative archive for publishing and sharing neurophysiology data, including electrophysiology, optophysiology, and behavioral data packaged as NWB and related standards.
International Brain Laboratory public data
The International Brain Laboratory public data releases expose standardized mouse decision-making experiments, including Neuropixels recordings, widefield calcium imaging, behavior, and session metadata accessed through the ONE API.
OpenNeuro
OpenNeuro is a free, open platform for sharing neuroimaging datasets, with public search, dataset pages, and download paths for web, S3, DataLad, and the OpenNeuro CLI.