alt Hacker NewsWe should start naming them like hurricanes: NIST creates a list of alphabetical names and assigns any CVE >= 9.0 with a name. Vulnerability Alex (CVE 9.4)
Replies
cowlevel • today at 5:52 AM
CVE scores are already inflated because it looks good for their discoverers.
duxup • today at 5:10 AM
"Oh man, Jan really ruined my weekend."
I actually kinda like how that works.
my-huge-pony • today at 7:22 AM
CVSS is a terrible proxy for vulnerability real world impact. Not to mention, that CVE with CVSS 10.0 in Bob's Flower Names library with 5 users is probably not that important.
Vulnerability Zzyzx in a week