0

I'm looking for a description list for major vulnerabilities such as SQLi, XSS etc.

The format should be like this:

Short Description:
Description:
Impact:
Solution/How to prevent:
References:

closed as too broad by Jens Erat, Steve, RoraΖ, tim, schroeder Jun 1 '15 at 19:26

Please edit the question to limit it to a specific problem with enough detail to identify an adequate answer. Avoid asking multiple distinct questions at once. See the How to Ask page for help clarifying this question. If this question can be reworded to fit the rules in the help center, please edit the question.

2

Since you mention SQLi and XSS, this seems to be primarily about web vulnerabilities. In that case, take a look at OWASP.

If you're asking this from a developer's point of view, you will be especially interested in their Cheat Sheets. For example, here is the XSS Cheat Sheet.

0

The most famous place where to list and discuss vulnerabilities is probably the Bugtraq mailing list.

0

A professionnal grade list of common vulnerabilities and exposures is available on the MITRE web server Common Vulnerabilities and Exposures.

For example if your would be interested in XSS: search on CVE for ID on XSS.

0

I like http://www.cvedetails.com/ since it allows me to generate a feed and search by product and version, but it is not the only place where I go to stay up to date, securityfocus.com (as mentioned in another answer) is also a very good resource. When it comes to staying up to date, my advise is not to rely on just one source, even reddit.com/r/security comes up with interesting things now and then.

Most often, the specific vendor also has a way of communicating changes in their versions, for example for MySQL Oracle releases these every so often.

Hope it helps

0

Maybe a bit too detailed for you, but I recommend the Common Vulnerabilities and Exposures list.
Although it's primary purpose is to provide a dictionary of common names (CVE Identifiers) for publicly known information security vulnerabilities, the fact that they are recognized and used throughout the industry makes them a source.
They partner with the U.S. National Vulnerability Database (NVD).

They have RSS feeds, or you can download their master lists or updates.

They just changed their syntax last januari 2015.

Others have built APIs around CVE Google cve api Common Vulnerabilities and Exposures to find e.g. the CVE-search API developed by CIRCL.

Not the answer you're looking for? Browse other questions tagged or ask your own question.