Open Vulnerability and Assessment Language, OVAL, is an xml based format for defining vulnerabilities and tests for verifying or discovering vulnerabilities.
Vendors like CIS, Red Hat, Suse, Oracle publish OVAL definitions.