#cwe — Public Fediverse posts

Warning: CVE-2025-40739 (CWEs: ['CWE-125']) found no CAPEC relationships.
Warning: CVE-2025-40741 (CWEs: ['CWE-121']) found no CAPEC relationships.

#SoftwareSecurity #MemorySafety #CWE #ADBE
2/2

Warning: CVE-2025-40739 (CWEs: ['CWE-125']) found no CAPEC relationships.
Warning: CVE-2025-40741 (CWEs: ['CWE-121']) found no CAPEC relationships.

#SoftwareSecurity #MemorySafety #CWE #ADBE
2/2

Extracted CAPEC to CWE Mappings (first 10 examples)...
Total CVEs with CAPEC relationships found: 6

#Mitre #CAPEC #CWE #CyberThreats
2/2

We have scheduled the community meetings for March 2026. This is where you meet fellows working with the same issues, discuss and help us set our priorities for the project.

Register for free here: https://www.gvip-project.org/community/

#CVE #gcve #NVD #EUVD #CWE #CVSS #EPSS

🚀 49,000 Patches !

We’ve updated our dataset (https://huggingface.co/datasets/CIRCL/vulnerability-cwe-patch) of real-world vulnerabilities, now enriched with #CWE identifiers and #patches collected from platforms like GitHub, GitLab, Bitbucket.

This dataset is designed to support the development of tools for vulnerability classification. Dataset features are:

- #CVE / #GHSA ID
- Title of the #vulnerability
- Vulnerability description
- Patches (URL, Commit message, and Base64-encoded unified diff)
- CWE categorization

Join us for the GVIP Summit - the pre-FOSDEM conference on vulnerability management. Supported by the @sovtechfund

https://www.gvip-project.org

#NVD #CVE #SBOM #CVSS #CWE #CRA

OWASP Top Ten 2021 через простые примеры на Java. И немного про SAST

В этой статье мы расскажем про категории OWASP Top Ten 2021 через призму срабатываний Java анализатора PVS-Studio. Так что, если у вас есть желание посмотреть на возможные паттерны уязвимостей в Java коде или узнать, что из себя представляют категории OWASP Top Ten, приятного чтения!

https://habr.com/ru/companies/pvs-studio/articles/947332/

#owasp_top10 #pvsstudio #статистический_анализ #java #примеры_кода #информационная_безопасность #cwe #cve #owasp #sast

#SecureCoding: Risiken einschätzen mit dem #ExploitPredictionScoringSystem | Developer https://www.heise.de/hintergrund/Secure-Coding-Risiken-einschaetzen-mit-dem-Exploit-Prediction-Scoring-System-10252792.html #ITSecurity #Cybersecurity #VulnerabilityManagement #ExploitPrediction #EPSS #CVSS #SSVC #CWE #RiskManagement #ThreatIntelligence #MachineLearning #DataDrivenSecurity #PatchManagement #SecurityBestPractices #ZeroDay #VulnerabilityAssessment #SecurityTools #InfoSec

Hello World !
Nous vous proposons une Formation sécurité logicielle et management du risque
#CWE, #SIL #ASIL, #MISRA, les normes à connaître et les bonnes pratiques

- SIL : Safety Integrity Level &
- ASIL : Automotive Safety Integrity Level
- IEC61508 : Basic Safety Publication - Publication Fondamentale De Sécurité
- CWE : a community-developed list of software and hardware weakness types
- ...

Plus d’information en suivant ce lien : https://www.2i2l.fr/formation-securite-logicielle-et-management-du-risque-600

Merci, au plaisir d'échanger ! :)