#nvd

[rancid-tactics]

«SPARTAN» Order/Орден «СПАРТА»

[szepkerekkocka]

"CVSS is a shitty system"

Esettanulmányok arról, hogy készül a virsli CVSS (Common Vulnerability Scoring System), a cURL vezető fejlesztőjének előadásában.

@muszeresz

[avtomatkalashnikova]

We are, as they say, out here.

[theradceliac]

So I was recently diagnosed with social communication disorder and a nonverbal learning disorder. From what I read they both seem very similar at least with the social aspects but if anyone has information about them I’d appreciate it

[cyber-sec]

US Audit Reveals Growing NVD Crisis at NIST

A federal audit has found that the U.S. National Institute of Standards and Technology failed to maintain a strategic plan for the National Vulnerability Database, leaving a backlog of over 27,000 unprocessed vulnerabilities. The report also highlights duplicated enrichment work with CISA and missed processing benchmarks, raising concerns about vulnerability management efficiency.

Source: Socket

Read more: CyberSecBrief

[jpmellojr]

Selective NVD enrichment: Why NIST's shift matters

NIST’s selective NVD enrichment is a big wake-up call for AppSec teams: more CVEs, less context, and more manual triage ahead. https://jpmellojr.blogspot.com/2026/05/selective-nvd-enrichment-why-nists.html

[attritionorg]

The NVD Shell Game & Schrödinger's Enriched Vulnerability

The NVD Shell Game & Schrödinger's Enriched Vulnerability

[attritionorg]

Shadow, Ghost, and Phantasmawhatever Vulnerabilities - The Reality

Back in September of 2024, I took some notes on a blog I wanted to write about “Shadow” vulnerabilities, based on a corporate blog with a poor concept and misunderstanding of CVE. The title was to be “Shadow Vulnerabilities – Rebuttal” and pretty straight-forward. Vulnerability life is crazy when you help manage a true vulnerability database (VDB) that isn’t a clone of CVE, and operates…

Shadow, Ghost, and Phantasmawhatever Vulnerabilities - The Reality