New answers tagged cve
1) Cool names count. Don't discount the value of public relations. 2) Heartbleed, BEAST, CRIME, and POODLE all impacted (or could be be reached through) web servers. Web servers tend to be publicly available, widespread, and directly identified (in the minds of the press and non-technical public) as "THE INTERNET." Therefore, these issues had a wider ...
The process for assigning a CVE's CVSS score to a vulnerability is very prescriptive. There is little room for interpretation, or to account for impacts which the are not accounted for by the scoring formula. So, in the end some relatively major issues will end up with oddly low scores, and some relatively trivial issues will end up with excessively high ...
An attack vector is a path or means by which an attacker can gain access to a computer or network server in order to deliver a payload or malicious outcome. When it's not specified, it simply means that probably there is a way, but no-one has found one or the vendor does not want the vector to be disclosed yet.
Top 50 recent answers are included