Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [vulnerability-management]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
1 answer
346 views

Is CVE-2024-20666 Bitlocker vulnerability mitigated by disabling Windows RE or removing the recovery parition?

Taking Microsoft's page on CVE-2024-20666 at face value, that Bitlocker vulnerability is darn serious in an "evil maid" attack: A successful attacker could bypass the BitLocker Device ...
fgrieu's user avatar
  • 1,243
0 votes
1 answer
83 views

What does a "?" mean in Common Product Enumeration (CPE)?

I looked at the documentation for cpe Naming Specification Version 2.3 http://csrc.nist.gov/publications/nistir/ir7695/NISTIR-7695-CPE-Naming.pdf Specification says, "*" or "-" is ...
june y's user avatar
  • 3
1 vote
1 answer
238 views

Vulnerabilities in Build-time Libraries Could be a Security Threat

If a dependency that is used in development environment or at build time has a security vulnerability, could it cause a security threat for the application? I'm looking for an example to understand ...
Mjina's user avatar
  • 111
1 vote
1 answer
99 views

Vulnerability: Standalone Library vs. Same Code Elsewhere

Are libraries inherently more vulnerable than in-house application code? The speaker of this talk generally advises folks against creating wrapper libraries for Erlang in Elixir rather than just ...
stk1234's user avatar
  • 202
1 vote
1 answer
211 views

Is there a way to check if vulnerability introduced by npm package is reachable/exploitable

I have a problem where I have too many vulnerabilities on a few hundred repositories introduced with outdated npm packages. The issue is that I need to find a way to prioritize this. The biggest pain ...
4tire's user avatar
  • 11
1 vote
1 answer
133 views

Security for a Windows application running in a corporate network

I know security is pretty important for the web application, but what about windows applications running in a corporate environment, network, not accessible from outside. Do we need to treat security ...
Yaplex's user avatar
  • 111
0 votes
3 answers
454 views

How to manage my vulnerability scan reports efficiently

My company uses multiple tools for vulnerability scanning. We have Nessus Pro for network scanning, White Source Bolt and GitHub Dependabot for dependencies, and SonarQube for source code, and Burp ...
Toan Ha's user avatar
  • 29
1 vote
2 answers
927 views

Manually Validating Vulnerabilities from a Vulnerability Scan

How do you manually validate vulnerabilities from a vulnerability scan or a vulnerability release from a vendor? Say you received a report with a high vulnerability. The vulnerability scanner used a ...
brad_huntington's user avatar
1 vote
1 answer
670 views

What is difference & link between threat modelling and vulnerability assessment?

My understanding is that, threat modelling is used at the design stage to identify the possible threats, prioritize them and help in identifying security requirements/security controls. Vulnerability ...
Kumar's user avatar
  • 191
2 votes
1 answer
322 views

vulnerability management 101

Looking at a typical vulnerability scan report from Nessus or Qualys most people are terrified, lost, and basically with more questions than answers. For example, how on earth am I going to deal with ...
cyzczy's user avatar
  • 1,588
40 votes
4 answers
7k views

How do open-source projects prevent disclosing a bug while fixing it?

I understand that many open-source projects request vulnerabilities not to be disclosed on their public bug tracker but rather by privately contacting the project's security team, to prevent ...
Heinzi's user avatar
  • 3,088
0 votes
0 answers
112 views

Chrome Vulnerabilities are detected in vulnerability scan even after upgraded with latest versions [duplicate]

Had few chrome vulnerabilities [CVE-2020-6420] detected by BI(Retina). Upgraded the affected machines to chrome version 84.0.4147.89. After re-scan still the same vulnerabilities are detected. Anyone ...
GMtech's user avatar
  • 1
0 votes
3 answers
291 views

Vulnerability management benchmarks

Despite the continuous effort in our company to resolve vulnerabilities, we are still reporting a significant number of vulnerabilities after each scan we perform. We would like to understand if ...
Satrapa's user avatar
2 votes
3 answers
194 views

How to make sure vulnerability management does not lead to reduced or compromised security

When running vulnerability scans, often a particular version of, say, Node.js is reported to be vulnerable along with a recommendation to update to a higher version. Then we also have insecure SSL/...
user211245's user avatar
3 votes
1 answer
256 views

How to fairly pay out bug bounties without going over budget?

I work for a small company and for our webapp, we want to offer bug bounties for vulnerabilities reported with monetary rewards based on criticality. Problem is we only have a limited overall budget ...
Chimarr's user avatar
  • 53
3 votes
0 answers
136 views

Version earlier than 0 in Debian OVAL feeds

I'm trying to parse Debian OVAL feeds to establish if some packages are vulnerable or not. I'm using criterions to establish what's the vulnerable version for a package, however often there are ...
Любомир Райков's user avatar
0 votes
2 answers
185 views

How Vulnerability scanners assign CVE codes to Vulnerability found

I just want to know how CVE codes are assigned by the vulnerability scanners, while it found the particular vulnerability.
Ezekiel Kottarathil's user avatar
0 votes
0 answers
134 views

How to check security and other updates avaliable on linux distro automaticaly?

Let suppose we have network of 10 plus Linux machines having different distro (debian, Centos , Redhat and Arch etc ). Can we implement some centralized system where we have update about update on ...
Usman Ali Maan's user avatar
2 votes
1 answer
454 views

Best practices for vulnerability patching periods?

I was wondering if there are any general recommendations on maximum resolution times for vulnerabilities. Consider a vulnerability/patch management process where a ticket is opened when a ...
user149408's user avatar
0 votes
1 answer
130 views

What is the difference when scanning external IP's from my LAN vs cloud/external scanner?

Im concerned if I am scanning effectively. When I scan our external IP's with the scanner on my laptop the packets are leaving my network through my firewall and routing across the internet to hit ...
errMSG's user avatar
  • 197
0 votes
0 answers
626 views

Determining clients connecting to IIS using CBC ciphers. (preparing for Lucky13 remediation)

I am trying to determine the impact of re-mediating a lucky 13 vulnerability; which i understand requires disabling CBC cipher modes. So far i have added custom logging to my IIS instance to capture ...
MaCuban's user avatar
0 votes
0 answers
166 views

Can I get hold of malicious npm packages?

the npm advisories site lists quite a lot of malicious packages which - in my understanding - are not packages with vulnerabilities but malicious per se. These packages were removed from the npm repo ...
pinas's user avatar
  • 171
0 votes
2 answers
2k views

Which database is used by npm-audit

you probably know the npm-audit tool which informs you about vulns in your node.js projects dependencies. I'd like to know what database npm-audit is using and how I get access to this data. Thank ...
pinas's user avatar
  • 171
3 votes
2 answers
690 views

How do I get the "vulnerabilities history" of a Node.js package?

When installing a Node.js package via npm or when running npm-audit I get information about known vulnerabilities of packages in the project. From my understanding this means that there must be some ...
pinas's user avatar
  • 171
1 vote
0 answers
99 views

Vulnerabilities arising from Interations between application and environment

Suppose I have a 'secure' environment - a few servers running operating systems hardened according to best practice, likewise for network devices, user accounts with minimal permissions and a good ...
Baron Mingus's user avatar
1 vote
0 answers
141 views

Is there away to retrieve results (including found vulnerabilities) of a specific scan from one API call? [closed]

Is there away to retrieve results (including found vulnerabilities) of a specific scan from one API call? From InsightVm documentation, the GET scan API call returns only scan info with statistics of ...
Ikenahim77's user avatar
1 vote
1 answer
146 views

Common practice when CVSS v2 score over represents severity

We're formalizing our vulnerability management process and decided to use CVSS V2 to help decide what vulnerabilities to remediate. We're running into a situation where a vulnerability's severity ...
anchovie's user avatar
0 votes
1 answer
331 views

Can a CVE be removed from NVD database?

Normally, CVEs are added to the NVD CVE database and never removed. But can a CVE ID just disappear from the database after being there for a while? (Maybe because the entry was a complete mistake, or ...
Konstantin Shemyak's user avatar
0 votes
0 answers
307 views

Can OpenVAS do a scan on a scanner device?

I know OpenVAS can scan printers with just tweaking some scan configuration. I try to scan a scanner device but I only get one result which is OS Detection Consolidation and Reporting. I have an ...
Finn's user avatar
  • 13
1 vote
0 answers
119 views

UDF Client, Socket Binding and Tags Hack - Need Help [closed]

Background For a long time now, I've been working to remove a persistent, if not permanent, malware presence on my computers and phones. Every attempt at removal has been unsuccessful to date, by me ...
blackpine's user avatar
1 vote
3 answers
801 views

Vulnerability management and assessment tracking solutions

How does your company track the vulnerability management information that happens between receiving a vulnerability scan report and remediating a vulnerability? Given the following example: Scan A ...
anchovie's user avatar
1 vote
1 answer
325 views

Exploit database for NVD vulnerabilities [closed]

I have the list of vulnerabilities (CVEs) in the NVD database. I need to find which one has an exploit. Is there any database available to get the list of all the exploits for CVEs? or is there any ...
MOH's user avatar
  • 31
0 votes
1 answer
184 views

Server vulnerability scanning [closed]

How can I discover server vulnerabilities without using a scanning software such as openVas? is there any manual ways or steps to follow to assure server security. Thanks in advance
user avatar
3 votes
2 answers
180 views

What qualifies a vulnerability that shall be published?

Consider an open source project that is under continuous development. During development, in your day-to-day work you do occasionally find some issues on your own. There are also users of your library ...
eckes's user avatar
  • 468
2 votes
1 answer
1k views

Could you use svchost to run any service?

Is it possible if per say you installed an "evil_service," to use svchost to run it? Will it run any service?
0siris's user avatar
  • 91
1 vote
0 answers
235 views

Windows Possible Vectors for Privilege Escalation From "Weak" Folder ACLs

I am doing a security analysis and I am trying to figure out what the possible attack vectors and possibility of privilege escalation's are of the way this program is setup? I used Attack Surface ...
0siris's user avatar
  • 91
2 votes
1 answer
2k views

JBoss Web vulnerabilities [duplicate]

In my organization I found servers running JBoss Web/7.0.13.Final and JBoss Web/7.0.12.Final. I could not find security vulnerabilities for this server's versions, but they seem old to me. How can I ...
Gari BN's user avatar
  • 495
1 vote
0 answers
1k views

CVSS Alternatives? [closed]

I am looking for suggestions of alternatives to vulnerability scoring systems such as CVSS & DREAD. I have found that DREAD is too subjective to work and CVSS was ranking everything too highly ...
dperrie's user avatar
  • 111
4 votes
3 answers
310 views

I want to hire someone on Upwork to install a bitcoin trading bot on a cloud server. What vulnerabilities should I watch out for?

Context I tried installing Tribeca (a bitcoin trading bot) myself yesterday, but messed it up somehow, as I'm not very familiar with Docker/Git/NPM/mongoDB technologies (a little knowledge is ...
user29357's user avatar
3 votes
1 answer
502 views

Adobe Flash and Meltdown / Spectre

Many browsers have received updates to protect against the Meltdown and Spectre attacks. I presume these patches relate (solely) to JavaScript execution within the browser. Java in the browser is as ...
Maarten Bodewes's user avatar
1 vote
2 answers
1k views

How can I change windows security settings using python? i.e. Password Requirements / Require Ctrl - Alt - Delete to log in

I am writing code in Python 2 or 3 to script Cybersecurity functions. Functions such as Lockout Duration, Password Length, and other things that involve a lot of clicking that could easily be ...
Enigmoramous's user avatar
1 vote
0 answers
102 views

Is using AWS and administered VMs a reasonable and feasible secure environment?

I'm currently tasked with exploring options for hosting secure data for our company that don't require setting up any in-house infrastructure as we don't currently have any. Everyone is a developer ...
UnlikelyNomad's user avatar
0 votes
3 answers
175 views

Is it recommended to patch announced vulnerability for unused services or features?

Sometimes vendors announce software upgrade to patch some discovered vulnerability in some feature or service which is not enabled in your system. Is it recommended to upgrade your software although ...
Mr.lock's user avatar
  • 365
3 votes
2 answers
478 views

How do I secure my home Wi-Fi network in light of KRACK? [duplicate]

Now that KRACK has been discovered to exploit WPA2, is it still possible to secure my home Wi-Fi network? If so, what steps should I take to secure it against KRACK attacks? Will there now be a need ...
Jonathan's user avatar
  • 3,185
1 vote
1 answer
1k views

How to acquire security advisory for CentOS?

I've been seeing security advisory number like CESA-2017:1842, and after search I could only find some of them in mailing list archives such as this. Is there a website like https://usn.ubuntu.com or ...
Sajuuk's user avatar
  • 281
0 votes
1 answer
256 views

Are CVE identifiers assigned for proprietary software packages? [duplicate]

If I find a vulnerability while using a proprietary software package can I request a CVE identifier. Or rather vulnerabilities in proprietary software packages are a matter of me reporting issue to ...
sob's user avatar
  • 225
5 votes
2 answers
731 views

Why are the CVSS scores differ so much between Redhat and NVD page?

take CVE-2016-7872 for example. in National Vulnerability Database webpage, we can see that the cvss2 and cvss3 score are 9.8 and 10.0 respectively. but in the redhat security advisory page, they ...
Sajuuk's user avatar
  • 281
25 votes
4 answers
5k views

Should a vulnerability in a service that is present on the device, but not running and not used at all, be mentioned in the vulnerability report?

Say, I have scanned our Cisco Router, and it returned 20 vulnerabilities back. However, most of them are tied to specific services that this router is not running, for example CVE-2016-6380 - we are ...
shivelin's user avatar
  • 458
1 vote
3 answers
4k views

What is the difference between patch management and vulnerability management?

I've been thinking about this lately. are they the same thing? or is the latter has a lot more than just management of patches?
Sajuuk's user avatar
  • 281
4 votes
1 answer
2k views

What does a "-" mean in the Version field in Common Product Enumeration (CPE)?

I'm trying to understand the Common Product Enumeration standard published by Mitre. In the Version field, I've found references to "*" or ANY meaning "Any Version." However, when I search the CPE ...
Cargo23's user avatar
  • 141