Search Results
| Search type | Search syntax |
|---|---|
| Tags | [tag] |
| Exact | "words here" |
| Author |
user:1234 user:me (yours) |
| Score |
score:3 (3+) score:0 (none) |
| Answers |
answers:3 (3+) answers:0 (none) isaccepted:yes hasaccepted:no inquestion:1234 |
| Views | views:250 |
| Code | code:"if (foo != bar)" |
| Sections |
title:apples body:"apples oranges" |
| URL | url:"*.example.com" |
| Saves | in:saves |
| Status |
closed:yes duplicate:no migrated:no wiki:no |
| Types |
is:question is:answer |
| Exclude |
-[tag] -apples |
| For more details on advanced search visit our help page | |
Results tagged with risk
Search options questions only
not deleted
user 72031
0
votes
2
answers
311
views
Is exposing the default plesk page dangerous?
Is exposing the default plesk page on an IP dangerous? I can imagine it is somehow usable for fingerprinting a version maybe. But is it dangerous anyhow?
- 7,115
0
votes
1
answer
189
views
Is there a way to calculate the complexity of an XSS-vector?
I would like to consider a "XSS-vector complexity score" in the risk = likelihood * impact formula1. … OWASP Risk Rating Methodology.
2. Source: twitter.com, works only in Safari
3. Source: twitter.com, IE XSS filter bypass …
- 7,115
2
votes
1
answer
1k
views
Can information security risks essentially only be triaged according to the CIA triangle?
Can information security risks essentially only be triaged according to the CIA triangle (Confidentiality, Integrity and Availability) or are there other possibilities?
- 7,115
1
vote
1
answer
234
views
Is it a security risk, lack of knowledge for reactive action, when abuse mail is rejected?
Is this considered a security risk in general, in terms of a disability to detect and react in such case? … Now, I'm wondering if "not being able to receive that abuse emails" in case of a compromised server is a risk (read; possibly not detecting that your server is compromised)? …
- 7,115
0
votes
1
answer
127
views
What is the risk of unlimited email event triggering?
Is there any other risk than just misusing this mail trigger for sending annoying emails to email addresses, that didn't ask for it? …
- 7,115
3
votes
1
answer
3k
views
What does the EC_POINT_FORMAT TLS extension protect against and what is the risk of not usin...
What is the (potential) risk of not using it? …
- 7,115
3
votes
2
answers
1k
views
Will a crossdomain.xml file reduce a potential security risk?
I maintain a website were users are allowed to upload files. I'm doing already some good MIME-checks, consistency checks, virus checks, blacklist checks based on hash lists, some other custom checks a …
- 7,115
0
votes
1
answer
165
views
What is a good risk assessment for different types of online file references?
Nevertheless, I'm wondering if it is a security risk to hotlink to files other than JavaScript files.
The risk of hotlinking to an external JavaScript file seems pretty clear to me. … Can you face a risk yourself when people are hotlinking to self-hosted files, other then a availability risk? …
- 7,115
15
votes
7
answers
3k
views
What risk rating models are used for calculating risk scores of web vulnerabilities?
What risk rating methods, models, assessments or methodologies are used for calculating or estimating a risk score of vulnerabilities (for example, like described in the OWASP top 10) and which of those … I'm aware of the following three:
OWASP Risk Rating Methodology,
CVSS (version 1, 2 and 3),
Open FAIR (thanks to @atdre). …
- 7,115
7
votes
2
answers
1k
views
What are the security benefits or risks of HTTP/2?
Since HTTP/2 is starting to get adopted by more and more sites everyday. Are there any security benefits or known risks regarding HTTP/2?
- 7,115
6
votes
2
answers
10k
views
How to convert risk scores (CVSSv1, CVSSv2, CVSSv3, OWASP Risk Severity)?
Is there an accurate method or formula to convert risk scores between the OWASP Risk Rating Methodology (Overall Risk Severity) and the CVSS v1, v2 and v3 models) base score)? …
- 7,115
4
votes
2
answers
3k
views
Do high-level programming languages have more vulnerabilities or security risks than low-lev... [closed]
Do high-level programming languages have more vulnerabilities or security risks than low-level programming languages and if so, why?
Image source: http://a.files.bbci.co.uk/bam/live/content/znmb87h/ …
- 7,115