DefectDojo (originally an OWASP project)

An open source vulnerability management system that imports scanner output through a large parser library, deduplicates findings and tracks them to closure.