PouyaEsmaeili/vulnerability_mitigation_useful_links.md

## vulnerability_mitigation_useful_links.md

      
    Raw
  

              vulnerability_mitigation_useful_links.md
            
          
    Useful links for vulnerability mitigation:


No
Title
Description


1
CVSS Documentation
The Common Vulnerability Scoring System (CVSS) provides a way to capture the principal characteristics of a vulnerability and produce a numerical score reflecting its severity. The numerical score can then be translated into a qualitative representation (such as low, medium, high, and critical) to help organizations properly assess and prioritize their vulnerability management processes.


2
CVSS Calculator
Common Vulnerability Scoring System Version 4.0 Online Calculator


3
NVD NIST
The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics.


4
Exploit DB
The Exploit Database is a CVE compliant archive of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers.


5
OWASP
The Open Worldwide Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software.


6
CWE
CWE™ is a community-developed list of software and hardware weakness types. It serves as a common language, a measuring stick for security tools, and as a baseline for weakness identification, mitigation, and prevention efforts.
No	Title	Description
1	CVSS Documentation	The Common Vulnerability Scoring System (CVSS) provides a way to capture the principal characteristics of a vulnerability and produce a numerical score reflecting its severity. The numerical score can then be translated into a qualitative representation (such as low, medium, high, and critical) to help organizations properly assess and prioritize their vulnerability management processes.
2	CVSS Calculator	Common Vulnerability Scoring System Version 4.0 Online Calculator
3	NVD NIST	The NVD is the U.S. government repository of standards based vulnerability management data represented using the Security Content Automation Protocol (SCAP). This data enables automation of vulnerability management, security measurement, and compliance. The NVD includes databases of security checklist references, security-related software flaws, product names, and impact metrics.
4	Exploit DB	The Exploit Database is a CVE compliant archive of public exploits and corresponding vulnerable software, developed for use by penetration testers and vulnerability researchers.
5	OWASP	The Open Worldwide Application Security Project (OWASP) is a nonprofit foundation that works to improve the security of software.
6	CWE	CWE™ is a community-developed list of software and hardware weakness types. It serves as a common language, a measuring stick for security tools, and as a baseline for weakness identification, mitigation, and prevention efforts.