cve.mitre.org is the most complete. The spooks are rumored to have tens of thousands that they privately know about.
You know... MITRE.
"The MITRE Corporation is a not-for-profit company that operates multiple federally funded research and development centers (FFRDCs).
We take on some of our nation's most critical challenges and provide innovative, practical solutions."