oss-sec mailing list archives

Whats worth a CVE?

From: Scott Herbert <scott.a.herbert () googlemail com>
Date: Mon, 21 Jan 2013 19:50:22 +0000

Well the subject sum's the question up really, are their any fixed
guidelines for what counts as a CVE and what doesn't? Or is it just up
to the CVE pool manager as to what they feel is of note?

Attachment: signature.asc
Description: OpenPGP digital signature

Current thread:

CVE Request - Wordpress 3.5 Full-path disclosure vulnerability Henrique (Jan 20)
- Re: CVE Request - Wordpress 3.5 Full-path disclosure vulnerability Kurt Seifried (Jan 20)
  - Re: CVE Request - Wordpress 3.5 Full-path disclosure vulnerability Agostino Sarubbo (Jan 21)
    - Re: CVE Request - Wordpress 3.5 Full-path disclosure vulnerability Henrique Montenegro (Jan 21)
    - Re: CVE Request - Wordpress 3.5 Full-path disclosure vulnerability Giles Coochey (Jan 21)
    - Re: CVE Request - Wordpress 3.5 Full-path disclosure vulnerability Henri Salo (Jan 21)
    - Re: CVE Request - Wordpress 3.5 Full-path disclosure vulnerability Henrique Montenegro (Jan 21)
    - Re: CVE Request - Wordpress 3.5 Full-path disclosure vulnerability Kurt Seifried (Jan 21)
    - Whats worth a CVE? Scott Herbert (Jan 21)
    - Re: Whats worth a CVE? Eitan Adler (Jan 21)
    - Re: Whats worth a CVE? Kurt Seifried (Jan 21)
    - Re: CVE Request - Wordpress 3.5 Full-path disclosure vulnerability Milan Berger (Jan 21)