## 1 Introduction  
The Internet of Things (IoT), a network of interconnected smart devices, is gaining popularity and is used daily by everyone. We already use Internet of Things devices more often than standard IT devices, and experts at IoT Analytics predict that, by the end of 2024, nearly 18.8 billion of such devices will be active [1]. Given the fact that IoT devices accompany us every day in both our personal and professional lives, being used in homes, on the streets, in industry, in hospitals, in the military, and in agriculture, their importance in everyday life, both at home and in the workplace, is growing, and it is essential to focus on the possibility of ensuring their security at the highest possible level. In order to do so, it is necessary to gather information on any emerging vulnerabilities in them and how they can be exploited. The field of research on the security of IoT devices is expanding year by year, [2] which shows the growing importance of the subject. The popularization of IoT devices has resulted in the need to respond to upcoming cybersecurity threats by,for example, creating or adjusting intrusion detection systems with IoT security datasets and Machine Learning (ML) techniques, which is also one of the efforts undertaken in the field [3]. Undoubtedly, one of the main challenges related to the cybersecurity of Internet of Things devices is their vulnerabilities. Knowing about them is essential for professionals and users, as using IoT devices also brings about many opportunities and risks. It is in the interest of CSIRT-type (Computer Security Incident Response Team) team members, network owners, or even IoT device manufacturers themselves, as well as their users, to know about the possible vulnerabilities of these devices and how to exploit them in order to be able to counter unwanted events efficiently. Our vulnerability data research began several years ago. The intensity of the work increased in 2019 when we began building vulnerability and exploit databases as part of the VARIoT (Vulnerability and Attack Repository for IoT) project [4]. The results of the project's work are publicly available on the official portal for European data [5], Poland's Open Data Portal [6], and our website [7]. After completing the project, we keep updating the databases and adding new capabilities using new technologies, such as more advanced Artificial Intelligence (AI) tools. This article presents the most important advances of the VARIoT database, which were not previously described in other scientific publications. On the VARIoT database ([[https://www.variotdbs.pl/](https://www.variotdbs.pl/)]([https://www.variotdbs.pl/](https://www.variotdbs.pl/)), accessed on 1 November 2024), in addition to information about vulnerabilities and exploits, users can also find information about news from the world of IoT. The Application Programming Interface (API), produced as a part of the project enables straightforward data searches, filtering, and retrieval. In addition, by linking vulnerabilities with exploits, one can easily obtain exploits for the found vulnerabilities and vice versa, and applied ML makes it possible to obtain vulnerabilities and exploits similar to the returned results. The paper outlines the database's creation process, focusing on newly added sources. The most important unique features are described, including the scope of information on each vulnerability, which cannot be found in other databases. Providing information from Asian databases may help with retrieving information about vulnerabilities in devices which have just just released but are not yet available on the European market, as many IoT devices are designed in Asia and may be investigated by local cybersecurity experts. One of the new features of the database is the automatic evaluation of the severity of vulnerabilities. Vulnerability severity is commonly evaluated using the Common Vulnerability Scoring System (CVSS) [8].