Comment by aaronbrethorst
10 hours ago
We should start naming them like hurricanes: NIST creates a list of alphabetical names and assigns any CVE >= 9.0 with a name. Vulnerability Alex (CVE 9.4)
10 hours ago
We should start naming them like hurricanes: NIST creates a list of alphabetical names and assigns any CVE >= 9.0 with a name. Vulnerability Alex (CVE 9.4)
Vulnerability Zzyzx in a week
Tomorrow
[dead]
CVE scores are already inflated because it looks good for their discoverers.
"Oh man, Jan really ruined my weekend."
I actually kinda like how that works.
CVSS is a terrible proxy for vulnerability real world impact. Not to mention, that CVE with CVSS 10.0 in Bob's Flower Names library with 5 users is probably not that important.